$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa File: 22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa (raw, json) Hash identifier: ZxjOYOs4I0gLLrA5KGPkB7yl/V0Y+XuMY5QJ/JBU9vI= Subject key identifier: 55:20:C5:7F:4F:96:63:14:7B:56:1D:EA:FE:7A:E2:01:7F:42:FD:DD Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584E3764687E01F26D1845FB7500 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 13984 IP address blocks: 209.151.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:68:7e:01:f2:6d:18:45:fb:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=103d805e-216e-4d7f-87c1-79eb22fe8cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:41:ea:b2:73:fa:95:c9:01:a4:41:ff:9b: bc:c9:23:82:c8:f4:f0:5f:ef:eb:b4:fd:0e:26:09: 4e:51:ce:93:a8:7c:8e:7a:48:64:f7:0d:89:ab:5b: 77:3c:0a:b9:91:75:1e:0b:d8:22:04:4e:ae:54:42: ab:ba:54:5d:c3:0a:bd:1b:5a:b9:37:2b:ce:b2:11: ff:0e:0d:85:2d:88:1b:f1:6a:b3:ca:74:c5:02:79: 3e:7b:e4:a7:c0:a3:91:f8:c7:b3:3c:f5:74:6a:f2: 3b:0b:18:06:b7:a0:d4:51:3e:25:36:b3:3d:ee:de: fe:08:57:cc:35:ed:bf:5c:40:a8:bf:4d:40:de:49: 53:ae:bd:a9:69:c4:a2:65:c5:ab:b1:a8:02:66:5d: 40:4a:ea:dc:43:69:e6:67:74:be:bc:85:9d:85:22: 0a:31:0b:33:b6:ee:ef:1b:ba:e2:c0:7f:90:df:4f: f0:88:b3:e8:05:63:a2:4c:ca:46:e1:b8:25:b6:c1: 32:d9:fb:d6:3d:b5:8b:e7:c8:14:80:d4:cc:38:d9: a6:d8:75:05:87:69:2d:fa:53:47:40:26:2d:64:7a: d8:a1:a0:5f:c9:d2:76:9e:60:20:2b:53:b0:0e:69: c3:01:f5:93:a0:00:e4:e9:cc:4b:df:f5:74:b6:72: 3d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:20:C5:7F:4F:96:63:14:7B:56:1D:EA:FE:7A:E2:01:7F:42:FD:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 209.151.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8a:18:96:9a:33:25:89:ce:ff:69:f6:7c:93:5d:54:b9:65: 89:4b:34:c9:14:66:7e:4a:4e:68:df:7a:9a:75:a7:17:d7:b2: d0:40:1a:7b:98:05:b7:6f:df:36:55:5d:3f:2c:28:c5:cb:49: d7:3c:c6:ec:87:1c:bc:1f:58:2c:30:66:f9:79:89:4b:d5:28: ca:bf:84:66:0b:84:96:86:5c:c6:f2:b9:f4:19:c3:50:bd:c0: e4:49:4a:ca:6a:af:ee:0b:b1:93:c5:38:9d:f9:21:eb:5f:8b: 2c:ce:3c:d2:68:6b:da:82:54:76:95:51:cc:79:70:25:43:13: f1:f2:63:b8:cf:c5:43:60:17:ab:51:1e:94:32:a8:fc:3f:ce: bc:72:41:63:7c:1b:22:9c:7d:ad:27:a3:8d:78:02:1c:12:55: 3b:ee:cc:1c:20:d4:f1:00:4d:9c:3f:d9:91:4e:0a:37:85:62: f7:e3:50:a5:dd:d8:d6:0b:06:36:94:84:fb:87:6d:a4:1a:8d: fd:9a:51:49:b3:6d:1f:8c:78:51:9f:94:08:0b:0e:9e:fc:32: df:d9:13:31:a1:2b:48:22:b0:de:dc:40:fc:dc:db:68:d1:bc: 80:5f:ca:55:0f:df:80:55:9b:65:3d:25:71:74:4e:65:aa:10: 39:19:4e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZGh+AfJtGEX7dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk MTAzZDgwNWUtMjE2ZS00ZDdmLTg3YzEtNzllYjIyZmU4Y2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ZB6rJz+pXJAaRB/5u8ySOCyPTwX+/rtP0O JglOUc6TqHyOekhk9w2Jq1t3PAq5kXUeC9giBE6uVEKrulRdwwq9G1q5NyvOshH/ Dg2FLYgb8WqzynTFAnk+e+SnwKOR+MezPPV0avI7CxgGt6DUUT4lNrM97t7+CFfM Ne2/XECov01A3klTrr2pacSiZcWrsagCZl1ASurcQ2nmZ3S+vIWdhSIKMQsztu7v G7riwH+Q30/wiLPoBWOiTMpG4bgltsEy2fvWPbWL58gUgNTMONmm2HUFh2kt+lNH QCYtZHrYoaBfydJ2nmAgK1OwDmnDAfWToADk6cxL3/V0tnI9bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUgxX9PlmMUe1Yd6v564gF/Qv3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvMjJjOWUxZjgtMjRhOS0z ZjdhLWFkOGQtZmYzNDZlMTE3Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCKGJaaMyWJzv9p9nyTXVS5ZYlLNMkUZn5KTmjfepp1pxfXstBAGnuY Bbdv3zZVXT8sKMXLSdc8xuyHHLwfWCwwZvl5iUvVKMq/hGYLhJaGXMbyufQZw1C9 wORJSspqr+4LsZPFOJ35IetfiyzOPNJoa9qCVHaVUcx5cCVDE/HyY7jPxUNgF6tR HpQyqPw/zrxyQWN8GyKcfa0no414AhwSVTvuzBwg1PEATZw/2ZFOCjeFYvfjUKXd 2NYLBjaUhPuHbaQajf2aUUmzbR+MeFGflAgLDp78Mt/ZEzGhK0gisN7cQPzc22jR vIBfylUP34BVm2U9JXF0TmWqEDkZTsM= -----END CERTIFICATE-----Generated at Wed Jun 24 15:49:37 2026 by rpki-client