$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/f3dd99b0-a2fb-3d3a-b611-e39475ae54bd.roa File: f3dd99b0-a2fb-3d3a-b611-e39475ae54bd.roa (raw, json) Hash identifier: 3G1Lt5owNr9p4jeEc/ErwuQ5ptbkOjpC8NVRRv1wU14= Subject key identifier: A3:56:C6:BA:04:A0:49:88:AE:85:ED:E7:DF:85:7F:71:43:DC:ED:BF Certificate issuer: /CN=cc8e57f5-c971-4f28-a6f5-b3c62be56cea Certificate serial: 010D0C9F4328584E0F88B847FAE15ECFC1072958 Authority key identifier: D7:E9:89:F4:FE:1A:A3:D4:77:5D:72:A2:D3:6B:F3:6F:09:AF:79:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/f3dd99b0-a2fb-3d3a-b611-e39475ae54bd.roa Signing time: Thu 04 Jun 2026 14:21:07 +0000 ROA not before: Thu 04 Jun 2026 14:21:07 +0000 ROA not after: Wed 02 Sep 2026 14:21:07 +0000 asID: 402522 IP address blocks: 209.135.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0f:88:b8:47:fa:e1:5e:cf:c1:07:29:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc8e57f5-c971-4f28-a6f5-b3c62be56cea Validity Not Before: Jun 4 14:21:07 2026 GMT Not After : Sep 2 14:21:07 2026 GMT Subject: CN=86bfe30a-48f9-4826-9523-cab6f4fedf66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:92:cd:ce:a5:5b:ee:31:20:51:4b:cc:7a:dc: 20:96:50:f9:67:f1:85:fe:38:46:7e:ec:4d:fa:ee: 58:73:15:46:8d:bf:73:82:ab:16:00:c6:f5:56:f0: 38:64:f4:fb:88:a8:0b:41:73:c1:41:54:2c:c1:1b: 2a:72:74:f1:b6:07:5b:14:19:f5:b0:2a:cb:a8:23: 59:42:12:dd:34:b1:73:b9:95:19:bd:db:02:8a:9d: a5:3a:1d:a6:12:f7:a3:a6:d0:70:5e:5e:25:dd:c4: af:1b:50:2f:8b:b6:b1:23:38:ff:cf:d4:bf:19:4b: e7:2c:81:dd:e4:37:c1:71:9f:bf:14:43:97:56:ae: 4e:3d:42:6d:c1:a8:59:6f:d0:af:b5:e1:65:c0:63: 8e:b3:e7:4b:d8:59:49:ab:8e:85:11:f6:2f:c9:c4: 16:fa:02:d1:52:b0:80:c9:2b:38:17:8a:11:86:7c: b0:ea:a8:8d:d4:5c:d6:40:c4:e6:35:ba:6b:e1:b8: 27:33:13:74:06:72:54:49:b2:dc:a6:17:59:fe:1a: 70:d3:f6:0e:41:ff:d9:50:ae:64:96:01:21:6d:55: dd:e5:ba:1e:13:f1:77:0f:09:42:d9:9b:5c:53:2d: 79:91:3b:c7:ee:00:1c:54:f4:53:5f:61:92:f9:98: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:56:C6:BA:04:A0:49:88:AE:85:ED:E7:DF:85:7F:71:43:DC:ED:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/f3dd99b0-a2fb-3d3a-b611-e39475ae54bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.crl X509v3 Authority Key Identifier: keyid:D7:E9:89:F4:FE:1A:A3:D4:77:5D:72:A2:D3:6B:F3:6F:09:AF:79:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.cer sbgp-ipAddrBlock: critical IPv4: 209.135.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e0:a6:1c:f3:8a:59:e2:d2:19:30:1f:a0:46:ec:8d:9d:70: b7:58:3d:4d:68:58:9e:47:78:b5:00:24:b1:af:5d:4b:1c:df: f7:8b:0e:71:c6:6f:bd:7b:e1:92:76:02:fe:71:24:d6:9c:04: d5:a3:73:92:24:a3:03:b5:0d:fd:cf:35:33:57:db:e3:f2:21: e3:2c:54:13:f5:11:cb:d0:d6:d5:0a:5a:f6:b2:26:f9:dc:93: b9:57:f5:eb:1e:53:21:6f:db:cd:76:04:ac:16:16:29:b3:1f: 5f:63:f3:cc:8e:dd:79:a7:bc:91:b0:49:38:26:79:6f:85:bd: ab:96:15:88:06:44:63:4a:2f:4f:85:bb:33:16:5b:a5:e1:4f: e3:20:d4:4d:5a:50:3e:5a:28:b0:ac:6a:a2:12:ba:f6:52:43: 41:b8:c1:1b:cb:35:80:b0:f1:be:c2:13:b8:df:6f:53:90:a2: b4:6e:c3:b9:65:1f:1e:b2:7b:86:d7:47:d3:a7:5a:94:18:b6: c8:44:28:c0:f5:42:cc:8f:fb:5c:28:67:5c:86:e8:22:4d:a3: 2b:0e:6f:2d:ef:85:5b:c3:26:cb:13:c7:4c:bb:ae:b4:f7:d0: d7:91:c3:e3:aa:2a:de:c8:e4:c2:1b:20:52:1a:af:e6:26:8c: 23:91:8b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4PiLhH+uFez8EHKVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M4ZTU3ZjUtYzk3MS00ZjI4LWE2ZjUtYjNjNjJiZTU2 Y2VhMB4XDTI2MDYwNDE0MjEwN1oXDTI2MDkwMjE0MjEwN1owLzEtMCsGA1UEAxMk ODZiZmUzMGEtNDhmOS00ODI2LTk1MjMtY2FiNmY0ZmVkZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pLNzqVb7jEgUUvMetwgllD5Z/GF/jhGfuxN +u5YcxVGjb9zgqsWAMb1VvA4ZPT7iKgLQXPBQVQswRsqcnTxtgdbFBn1sCrLqCNZ QhLdNLFzuZUZvdsCip2lOh2mEvejptBwXl4l3cSvG1Avi7axIzj/z9S/GUvnLIHd 5DfBcZ+/FEOXVq5OPUJtwahZb9CvteFlwGOOs+dL2FlJq46FEfYvycQW+gLRUrCA ySs4F4oRhnyw6qiN1FzWQMTmNbpr4bgnMxN0BnJUSbLcphdZ/hpw0/YOQf/ZUK5k lgEhbVXd5boeE/F3DwlC2ZtcUy15kTvH7gAcVPRTX2GS+ZirewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNWxroEoEmIroXt59+Ff3FD3O2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jYzhl NTdmNS1jOTcxLTRmMjgtYTZmNS1iM2M2MmJlNTZjZWEvZjNkZDk5YjAtYTJmYi0z ZDNhLWI2MTEtZTM5NDc1YWU1NGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2M4ZTU3ZjUtYzk3MS00ZjI4LWE2 ZjUtYjNjNjJiZTU2Y2VhL2NjOGU1N2Y1LWM5NzEtNGYyOC1hNmY1LWIzYzYyYmU1 NmNlYS5jcmwwHwYDVR0jBBgwFoAU1+mJ9P4ao9R3XXKi02vzbwmvefYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jYzhlNTdmNS1jOTcxLTRmMjgtYTZmNS1iM2M2 MmJlNTZjZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPgphzzilni0hkwH6BG7I2dcLdYPU1oWJ5HeLUAJLGvXUsc3/eLDnHG b7174ZJ2Av5xJNacBNWjc5IkowO1Df3PNTNX2+PyIeMsVBP1EcvQ1tUKWvayJvnc k7lX9eseUyFv2812BKwWFimzH19j88yO3XmnvJGwSTgmeW+FvauWFYgGRGNKL0+F uzMWW6XhT+Mg1E1aUD5aKLCsaqISuvZSQ0G4wRvLNYCw8b7CE7jfb1OQorRuw7ll Hx6ye4bXR9OnWpQYtshEKMD1QsyP+1woZ1yG6CJNoysOby3vhVvDJssTx0y7rrT3 0NeRw+OqKt7I5MIbIFIar+YmjCORi6M= -----END CERTIFICATE-----Generated at Sat Jun 6 12:03:50 2026 by rpki-client