$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa File: dfef9103-b23c-342c-83da-159fd5780ea7.roa (raw, json) Hash identifier: cVvFDWNRBZKwXuDZfYW4YAQjs9J27BJzvmY0LDRqKmg= Subject key identifier: 80:59:72:16:EF:66:2F:1F:FC:3D:7D:85:9C:66:89:CE:75:6E:11:E8 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584E2D9F24F95A11E1B172BBC960 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 13638 IP address blocks: 65.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:24:f9:5a:11:e1:b1:72:bb:c9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=23432988-76be-4bbe-bf81-75d4c827d158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:ac:7f:18:8c:0b:0d:64:17:2b:a2:87:26: 1c:4f:34:44:4f:b2:42:c4:52:74:7c:ec:81:e1:66: 8c:4b:43:61:63:e3:0d:d8:d3:1d:ff:26:65:65:71: 3f:3d:d8:e1:ba:4e:cd:fb:21:14:ff:c7:c2:c5:a8: 4d:5b:c5:1a:ee:4b:60:a4:66:04:b6:f6:ef:ed:c9: 3b:ae:d1:19:e8:6e:cf:36:a6:10:ff:c0:e9:10:66: d4:b1:8e:e0:7b:33:56:dc:40:21:5e:7f:a9:49:3c: 2d:c9:bd:f2:fb:5b:e0:1a:19:5d:28:c4:9e:60:10: 0d:e7:ed:87:51:8b:ba:51:b2:80:31:04:00:fc:55: 25:61:e2:2e:a0:4d:f7:4a:fe:55:e6:7c:6c:38:fe: 9e:b7:fb:20:e8:37:30:08:1e:d1:71:58:11:a3:d3: cc:a4:1c:55:af:59:67:27:d2:0b:2b:c1:03:4a:2f: db:e7:a9:3b:69:1c:50:b5:83:61:c8:c4:c3:37:2c: 53:0a:7b:a0:c6:23:83:c5:a3:72:96:92:0e:06:70: 0f:12:8d:93:62:fb:4e:1c:65:ec:09:d0:58:38:f1: 71:ac:a6:4a:c6:8b:81:02:b0:ee:15:b2:32:d0:f4: 8a:29:9f:ef:36:1a:52:a7:c9:c9:cb:25:4b:ac:21: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:59:72:16:EF:66:2F:1F:FC:3D:7D:85:9C:66:89:CE:75:6E:11:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 65.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5e:99:cf:2c:3e:75:8e:44:f4:74:78:ff:41:c1:33:ca:91: 39:2f:f5:40:10:4c:eb:7a:72:fa:44:fa:0c:2e:ab:2c:60:d2: 54:41:15:15:c3:fe:ec:73:2b:c7:b3:5c:05:1d:cb:e8:47:7b: ba:de:ac:a4:dc:04:35:83:55:ce:42:95:a7:50:33:c5:8a:d7: f4:3c:18:75:27:06:fd:ea:ae:6d:38:ff:9d:ea:4a:5b:21:93: a6:24:9f:ea:2a:d0:07:55:0d:89:56:86:b5:b1:68:3e:26:3e: 85:d0:93:21:50:05:0a:3f:83:f5:e7:01:e1:84:f1:71:9b:1f: 7b:2c:68:88:fc:89:28:91:b4:63:da:e3:2d:33:60:35:16:30: 7e:94:51:18:be:6a:9b:4c:ee:4d:6d:9f:55:08:12:43:99:96: 38:b0:0a:16:d1:cb:13:15:5c:7e:1e:09:40:0b:62:21:bd:e9: 9d:55:7e:29:c4:43:3c:cb:e1:48:d5:51:79:07:af:59:ce:ac: 41:57:48:e3:57:83:c0:4b:37:5f:6e:5c:f1:3f:cb:80:b3:a1: 9f:99:f0:c7:fd:e0:4a:93:1c:41:af:c4:7a:62:45:67:b8:5e: f5:50:e0:fd:a9:87:3a:7f:ca:5e:3b:0b:4d:0c:93:da:cc:7a: ae:db:df:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyT5WhHhsXK7yWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MjM0MzI5ODgtNzZiZS00YmJlLWJmODEtNzVkNGM4MjdkMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPCsfxiMCw1kFyuihyYcTzRET7JCxFJ0fOyB 4WaMS0NhY+MN2NMd/yZlZXE/Pdjhuk7N+yEU/8fCxahNW8Ua7ktgpGYEtvbv7ck7 rtEZ6G7PNqYQ/8DpEGbUsY7gezNW3EAhXn+pSTwtyb3y+1vgGhldKMSeYBAN5+2H UYu6UbKAMQQA/FUlYeIuoE33Sv5V5nxsOP6et/sg6DcwCB7RcVgRo9PMpBxVr1ln J9ILK8EDSi/b56k7aRxQtYNhyMTDNyxTCnugxiODxaNylpIOBnAPEo2TYvtOHGXs CdBYOPFxrKZKxouBArDuFbIy0PSKKZ/vNhpSp8nJyyVLrCG9TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBZchbvZi8f/D19hZxmic51bhHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvZGZlZjkxMDMtYjIzYy0z NDJjLTgzZGEtMTU5ZmQ1NzgwZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQf6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhemc8sPnWORPR0eP9BwTPKkTkv9UAQTOt6cvpE+gwuqyxg0lRBFRXD /uxzK8ezXAUdy+hHe7rerKTcBDWDVc5CladQM8WK1/Q8GHUnBv3qrm04/53qSlsh k6Ykn+oq0AdVDYlWhrWxaD4mPoXQkyFQBQo/g/XnAeGE8XGbH3ssaIj8iSiRtGPa 4y0zYDUWMH6UURi+aptM7k1tn1UIEkOZljiwChbRyxMVXH4eCUALYiG96Z1VfinE QzzL4UjVUXkHr1nOrEFXSONXg8BLN19uXPE/y4CzoZ+Z8Mf94EqTHEGvxHpiRWe4 XvVQ4P2phzp/yl47C00Mk9rMeq7b32Q= -----END CERTIFICATE-----Generated at Sun Jun 28 17:23:50 2026 by rpki-client