$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa File: dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa (raw, json) Hash identifier: ALeeHgtWwGTCwfTTvlwPQtqLpglHzl2BrJSVa25u2MA= Subject key identifier: 10:A3:4B:C2:ED:E3:86:77:31:AC:9F:F4:C7:F4:9A:1F:80:FC:1A:89 Certificate issuer: /CN=e8522b95-144f-483f-bbfb-bec0605ebf8c Certificate serial: 010D0C9F4328584E5084937153D3A32EFEAAE140 Authority key identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 11023 IP address blocks: 209.251.32.0/20 maxlen: 20 209.251.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:93:71:53:d3:a3:2e:fe:aa:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8522b95-144f-483f-bbfb-bec0605ebf8c Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=6d6b5385-4c04-4d87-9da2-d2dfff3d0ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:97:b9:e1:67:59:64:6f:0f:21:49:0e:ec:6f: 56:4a:d5:fc:f7:b4:7d:1e:14:9d:55:02:01:73:e3: 17:3a:ad:1a:50:dd:66:89:ee:d0:08:5c:94:7c:21: 42:60:a8:21:0c:74:bf:d3:2b:d7:b4:20:58:4e:c0: 54:41:b6:47:7f:fb:1e:f1:3f:07:f9:d9:25:07:d9: 07:80:65:03:fd:f6:3b:b5:4d:01:bd:19:4d:55:3a: 97:cc:16:a1:d6:fe:69:a4:b2:63:71:7b:65:18:cf: c7:05:76:c5:24:a5:40:2e:0d:c2:83:5c:b6:78:cd: 5f:d2:a0:e5:2c:24:ef:4d:fb:f7:38:9a:49:fa:db: 91:a2:09:db:3a:ba:71:e6:d4:74:81:d4:30:cc:47: 3b:5f:2a:22:27:11:9d:bf:5d:e2:a4:57:f4:a3:80: d0:10:49:0a:e7:17:3c:49:91:f2:73:48:23:06:92: 45:81:19:9e:3f:bc:74:4d:a8:a3:f0:9d:99:b0:a6: 6f:51:02:38:fc:cd:d6:81:c2:d6:b4:14:52:4e:24: 25:57:81:19:20:e7:e7:76:aa:12:23:61:42:21:cc: 84:23:47:5d:3c:f4:f5:ff:37:7c:7a:93:f3:99:f3: 3a:c7:1c:c3:c6:ba:4a:18:bb:53:1e:de:b9:61:ac: 71:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A3:4B:C2:ED:E3:86:77:31:AC:9F:F4:C7:F4:9A:1F:80:FC:1A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl X509v3 Authority Key Identifier: keyid:01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer sbgp-ipAddrBlock: critical IPv4: 209.251.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:2f:50:f3:93:61:23:9d:87:87:43:1a:bd:99:52:21:a3:7c: f3:6d:df:03:13:51:35:1c:97:0a:d0:f9:4e:5b:ef:ae:1f:0d: d5:b6:c3:5b:22:60:50:ad:08:71:8d:5e:e3:98:6d:b6:e2:be: 80:62:1d:26:d0:33:86:1c:04:19:db:40:9f:f8:43:09:50:55: 32:7b:34:0b:91:32:56:22:ab:11:0e:a0:0f:c2:01:1b:4e:8c: fd:f9:42:8d:36:34:6b:47:84:68:43:84:4a:4d:e5:be:a6:01: 4b:20:58:a8:2a:f6:d9:f3:93:a9:c5:44:ba:00:d1:b5:ca:7f: f2:6f:6e:73:4b:58:c8:a7:67:fe:84:c1:5e:53:02:ae:dd:ec: 81:ec:42:38:6b:08:30:26:ae:a1:8f:d5:c2:28:d1:bc:d0:33: 2c:79:ca:0f:a5:eb:ce:8c:5c:90:bf:64:e1:b5:61:7c:e2:c3: f0:4c:f2:57:c7:5a:e2:2e:63:30:c3:a3:2a:7f:01:ef:06:20: 73:29:52:6b:1e:e7:a4:97:bc:98:05:b4:bc:d4:d6:c6:e9:78: 46:80:8b:cc:45:4d:fc:de:45:a2:7d:ce:fd:f4:9e:70:a1:cc: 60:5e:3b:8f:a1:82:33:ba:42:e6:5e:8c:5c:93:4d:a4:f5:09: f0:1c:0f:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhJNxU9OjLv6q4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg1MjJiOTUtMTQ0Zi00ODNmLWJiZmItYmVjMDYwNWVi ZjhjMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk NmQ2YjUzODUtNGMwNC00ZDg3LTlkYTItZDJkZmZmM2QwZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Je54WdZZG8PIUkO7G9WStX897R9HhSdVQIB c+MXOq0aUN1mie7QCFyUfCFCYKghDHS/0yvXtCBYTsBUQbZHf/se8T8H+dklB9kH gGUD/fY7tU0BvRlNVTqXzBah1v5ppLJjcXtlGM/HBXbFJKVALg3Cg1y2eM1f0qDl LCTvTfv3OJpJ+tuRognbOrpx5tR0gdQwzEc7XyoiJxGdv13ipFf0o4DQEEkK5xc8 SZHyc0gjBpJFgRmeP7x0Taij8J2ZsKZvUQI4/M3WgcLWtBRSTiQlV4EZIOfndqoS I2FCIcyEI0ddPPT1/zd8epPzmfM6xxzDxrpKGLtTHt65Yaxx5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCjS8Lt44Z3Mayf9Mf0mh+A/BqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lODUy MmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMwNjA1ZWJmOGMvZGJiZDc3ODItOWViMC0z NGUxLWJlMjEtYThiMmY0NDIzNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTg1MjJiOTUtMTQ0Zi00ODNmLWJi ZmItYmVjMDYwNWViZjhjL2U4NTIyYjk1LTE0NGYtNDgzZi1iYmZiLWJlYzA2MDVl YmY4Yy5jcmwwHwYDVR0jBBgwFoAUAR18+sVY6EiJayDd19XPFdMOIFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lODUyMmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMw NjA1ZWJmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0fsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwvUPOTYSOdh4dDGr2ZUiGjfPNt3wMTUTUclwrQ+U5b764fDdW2w1si YFCtCHGNXuOYbbbivoBiHSbQM4YcBBnbQJ/4QwlQVTJ7NAuRMlYiqxEOoA/CARtO jP35Qo02NGtHhGhDhEpN5b6mAUsgWKgq9tnzk6nFRLoA0bXKf/JvbnNLWMinZ/6E wV5TAq7d7IHsQjhrCDAmrqGP1cIo0bzQMyx5yg+l686MXJC/ZOG1YXziw/BM8lfH WuIuYzDDoyp/Ae8GIHMpUmse56SXvJgFtLzU1sbpeEaAi8xFTfzeRaJ9zv30nnCh zGBeO4+hgjO6QuZejFyTTaT1CfAcDyA= -----END CERTIFICATE-----Generated at Sun Jun 28 17:17:55 2026 by rpki-client