$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d6f41894-5c14-3f8b-9624-39b47f7faed9.roa File: d6f41894-5c14-3f8b-9624-39b47f7faed9.roa (raw, json) Hash identifier: l2ijMrcR4ptpscYbKw8lxT9fovdB8RnJ68kglc0KgwY= Subject key identifier: 0A:2D:41:60:E2:8E:4C:C8:66:6E:0F:C8:31:3C:60:69:0F:28:06:65 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584E66DA0B874BE01F105F808EC0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d6f41894-5c14-3f8b-9624-39b47f7faed9.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 14061 IP address blocks: 134.209.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:0b:87:4b:e0:1f:10:5f:80:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=0061cbed-07a1-4765-a6e1-9644c441f843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:d6:14:ed:b4:5d:96:c0:37:02:22:0e:16: d8:05:ba:65:eb:d7:6b:1b:10:63:7c:02:75:bb:52: a0:9a:cc:c1:c9:8e:2d:c5:f3:cb:2c:56:6e:55:9e: 26:89:55:ba:f5:50:5b:5c:46:81:6f:83:ce:47:3d: 2d:78:fe:ac:4a:98:99:cf:1f:75:39:d4:41:f1:83: 74:d0:3f:d2:20:40:5b:86:61:c9:64:b6:d7:51:fb: 03:32:5b:84:46:30:92:75:1e:6e:f8:1a:e9:a9:29: cc:4d:44:5c:af:a4:12:64:98:60:8e:58:aa:f0:d1: 9d:ba:2a:31:b3:d8:83:11:44:c9:8d:15:a2:16:49: 96:2d:ad:e2:70:2b:6e:53:da:eb:c8:14:76:30:20: 35:a3:32:6a:02:b2:d4:b5:c2:aa:53:c4:0b:b5:2c: 47:21:0a:d0:4d:32:62:45:93:59:46:46:75:f7:04: 0e:6e:08:f6:6a:75:f8:a1:e3:95:7d:0a:a1:c1:44: ce:ab:c2:62:fb:6f:59:32:e6:98:ee:4d:ac:46:12: 42:ba:78:b5:8c:73:71:b6:36:87:52:f5:50:88:80: 85:eb:95:b3:06:65:07:12:fa:9c:b7:1e:07:3e:4f: af:b8:74:63:7e:2a:e9:97:41:5f:44:94:23:8f:4b: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2D:41:60:E2:8E:4C:C8:66:6E:0F:C8:31:3C:60:69:0F:28:06:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d6f41894-5c14-3f8b-9624-39b47f7faed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 134.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8e:e1:1b:1d:c3:ad:8b:5e:31:dc:98:0f:d9:80:28:ab:84: 6c:57:b6:1c:6f:0a:ab:90:33:33:0d:e6:e9:aa:16:e9:1a:b0: 06:1a:83:62:3e:95:c1:88:70:bc:17:29:20:69:b5:e2:27:36: bb:8b:dc:b4:ee:a3:1c:3c:01:38:7d:ae:c1:77:04:32:46:08: cb:60:60:55:85:b2:1d:1a:0e:cf:ff:77:e9:a8:99:c5:e7:85: b8:5d:ec:e7:a0:ab:58:c2:3d:6e:09:a5:f4:2f:33:bd:09:42: 8a:01:bf:ed:14:77:63:ea:c8:d6:f4:c5:31:4d:26:db:6b:84: db:bf:93:a9:0f:03:35:68:c4:c9:7c:dd:a1:bc:05:8a:64:dc: 92:67:59:2a:35:10:12:7d:4b:4f:f5:24:51:73:b2:13:34:4a: 3f:c0:55:6a:33:d7:45:a4:6b:1e:42:0b:5e:e9:e2:d1:9f:24: c2:27:1f:05:c2:01:b2:ec:7b:17:b7:87:58:97:b5:62:da:c9: 23:f6:67:18:fd:f7:1f:f3:0d:cf:95:2e:f5:76:62:88:25:2c: f8:9f:27:04:16:9a:15:74:14:3c:79:1e:69:f0:ba:63:b4:76: 98:3f:6c:17:67:61:2b:04:7c:23:bf:17:33:73:e2:ad:c7:b7: e8:f7:ef:1e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5m2guHS+AfEF+AjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MDA2MWNiZWQtMDdhMS00NzY1LWE2ZTEtOTY0NGM0NDFmODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqLWFO20XZbANwIiDhbYBbpl69drGxBjfAJ1 u1KgmszByY4txfPLLFZuVZ4miVW69VBbXEaBb4PORz0teP6sSpiZzx91OdRB8YN0 0D/SIEBbhmHJZLbXUfsDMluERjCSdR5u+BrpqSnMTURcr6QSZJhgjliq8NGduiox s9iDEUTJjRWiFkmWLa3icCtuU9rryBR2MCA1ozJqArLUtcKqU8QLtSxHIQrQTTJi RZNZRkZ19wQObgj2anX4oeOVfQqhwUTOq8Ji+29ZMuaY7k2sRhJCuni1jHNxtjaH UvVQiICF65WzBmUHEvqctx4HPk+vuHRjfirpl0FfRJQjj0uIHwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAotQWDijkzIZm4PyDE8YGkPKAZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZDZmNDE4OTQtNWMxNC0z ZjhiLTk2MjQtMzliNDdmN2ZhZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhtEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPY7hGx3DrYteMdyYD9mAKKuEbFe2HG8Kq5AzMw3m6aoW6RqwBhqDYj6V wYhwvBcpIGm14ic2u4vctO6jHDwBOH2uwXcEMkYIy2BgVYWyHRoOz/936aiZxeeF uF3s56CrWMI9bgml9C8zvQlCigG/7RR3Y+rI1vTFMU0m22uE27+TqQ8DNWjEyXzd obwFimTckmdZKjUQEn1LT/UkUXOyEzRKP8BVajPXRaRrHkILXuni0Z8kwicfBcIB sux7F7eHWJe1YtrJI/ZnGP33H/MNz5Uu9XZiiCUs+J8nBBaaFXQUPHkeafC6Y7R2 mD9sF2dhKwR8I78XM3Pirce36PfvHg== -----END CERTIFICATE-----Generated at Mon Jul 6 20:17:03 2026 by rpki-client