$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa File: 657752d5-7987-30fd-a6c9-761b35585226.roa (raw, json) Hash identifier: OuMafLKY/D6+yvt1okmi2oG4jENG++w1JXL+87Dr1+Q= Subject key identifier: 75:76:79:17:1A:7A:0D:48:59:3B:2D:E4:39:1B:AC:BB:BB:2C:0C:1C Certificate issuer: /CN=9cae117d-b11f-4787-b860-f4d311531af3 Certificate serial: 010D0C9F4328584E2D9F42DFCF043A3C23172198 Authority key identifier: 8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 36352 IP address blocks: 146.71.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:42:df:cf:04:3a:3c:23:17:21:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cae117d-b11f-4787-b860-f4d311531af3 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=b3e3d7da-8f72-4b00-878d-7dc42e3cf180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5b:d9:ba:67:5c:9d:22:8e:53:82:f9:86:00: f4:d2:13:1b:91:d9:6f:e7:ff:f9:7f:a3:cf:7b:06: 2d:4d:c1:4d:ee:50:6a:7d:9c:60:a7:82:17:c8:8b: a0:2e:db:cb:79:0d:c3:60:fa:2b:c2:3a:1f:9c:1d: b1:74:aa:ae:f5:44:a5:f9:37:7e:87:d4:bd:62:35: 2c:30:c8:43:e8:39:be:51:3a:44:e3:9d:6d:4f:55: f2:dd:51:7c:89:e3:d7:f7:0d:e6:15:f9:e8:e9:b7: 9c:bf:8a:27:80:13:7e:79:82:c8:6c:10:92:05:71: ba:b6:8f:90:4f:65:1e:57:29:ba:92:60:48:65:b7: 42:cf:7b:09:b2:e6:ee:66:f8:05:43:64:c1:25:65: fa:dc:5b:79:2d:a3:7c:5d:de:80:aa:0b:ad:39:ce: 5b:74:40:93:c3:99:d4:c7:16:8c:3d:45:0d:01:4f: f5:a4:cf:0a:dd:c9:ce:12:f9:97:4a:6b:c6:28:b4: 65:d4:ff:ad:8f:a9:b8:9e:64:90:23:fa:ad:51:b8: f6:0a:08:7d:87:5a:4b:7e:78:22:e0:47:60:b1:05: b9:ce:2c:51:b8:55:39:7f:c4:d1:b8:91:58:2c:ca: 9a:de:8b:f1:61:b5:22:67:7a:07:e0:5b:73:4a:0b: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:76:79:17:1A:7A:0D:48:59:3B:2D:E4:39:1B:AC:BB:BB:2C:0C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl X509v3 Authority Key Identifier: keyid:8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer sbgp-ipAddrBlock: critical IPv4: 146.71.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e1:39:fb:51:6a:96:95:d5:bc:22:dc:c9:fa:75:ac:79:f7: eb:2d:9a:fa:56:5a:14:57:bd:3f:20:76:a5:77:d2:af:0f:8d: 50:26:b3:f0:b5:bf:5b:21:1e:39:e0:b6:47:66:67:dc:bb:20: 28:17:2b:c6:57:6b:e0:57:0c:af:b0:bc:56:f3:0f:48:48:45: 2e:57:ca:c2:8a:09:e3:a7:7e:ad:a1:df:03:5b:17:71:60:58: 4a:13:5d:e5:84:ca:a3:22:b5:cc:ad:4b:b0:dc:e8:4d:9f:3f: a8:c5:eb:92:c9:25:04:8a:5e:47:f9:52:6b:94:2a:38:1b:c6: d5:e0:12:97:2c:c2:88:04:fe:09:04:1b:58:17:d2:1f:11:77: 8b:54:c1:5d:9d:13:ae:1e:d1:cf:50:1b:ec:49:1f:01:8d:c9: 87:02:07:a8:78:87:ba:4d:17:7a:7d:c6:2f:d2:31:a4:3e:26: be:56:81:4c:5a:78:ae:cc:32:0e:90:4b:ff:90:e2:ac:a0:22: 3e:19:46:24:cf:04:67:54:08:21:75:bb:61:b7:2d:42:9f:bf: 2c:90:c4:71:88:d1:0b:2e:9d:22:4b:04:d3:14:85:e0:2c:48: ad:0a:52:b4:61:ff:df:d7:8f:0a:4d:23:d5:2d:c8:70:43:ca: 55:56:4d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tn0LfzwQ6PCMXIZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZTExN2QtYjExZi00Nzg3LWI4NjAtZjRkMzExNTMx YWYzMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk YjNlM2Q3ZGEtOGY3Mi00YjAwLTg3OGQtN2RjNDJlM2NmMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1vZumdcnSKOU4L5hgD00hMbkdlv5//5f6PP ewYtTcFN7lBqfZxgp4IXyIugLtvLeQ3DYPorwjofnB2xdKqu9USl+Td+h9S9YjUs MMhD6Dm+UTpE451tT1Xy3VF8iePX9w3mFfno6becv4ongBN+eYLIbBCSBXG6to+Q T2UeVym6kmBIZbdCz3sJsubuZvgFQ2TBJWX63Ft5LaN8Xd6AqgutOc5bdECTw5nU xxaMPUUNAU/1pM8K3cnOEvmXSmvGKLRl1P+tj6m4nmSQI/qtUbj2Cgh9h1pLfngi 4EdgsQW5zixRuFU5f8TRuJFYLMqa3ovxYbUiZ3oH4FtzSgtTAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV2eRcaeg1IWTst5DkbrLu7LAwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2Fl MTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQzMTE1MzFhZjMvNjU3NzUyZDUtNzk4Ny0z MGZkLWE2YzktNzYxYjM1NTg1MjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWNhZTExN2QtYjExZi00Nzg3LWI4 NjAtZjRkMzExNTMxYWYzLzljYWUxMTdkLWIxMWYtNDc4Ny1iODYwLWY0ZDMxMTUz MWFmMy5jcmwwHwYDVR0jBBgwFoAUj6rzDO6xgvLw1Z81seSdp5C+lbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2FlMTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQz MTE1MzFhZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzhOftRapaV1bwi3Mn6dax59+stmvpWWhRXvT8gdqV30q8PjVAms/C1 v1shHjngtkdmZ9y7ICgXK8ZXa+BXDK+wvFbzD0hIRS5XysKKCeOnfq2h3wNbF3Fg WEoTXeWEyqMitcytS7Dc6E2fP6jF65LJJQSKXkf5UmuUKjgbxtXgEpcswogE/gkE G1gX0h8Rd4tUwV2dE64e0c9QG+xJHwGNyYcCB6h4h7pNF3p9xi/SMaQ+Jr5WgUxa eK7MMg6QS/+Q4qygIj4ZRiTPBGdUCCF1u2G3LUKfvyyQxHGI0QsunSJLBNMUheAs SK0KUrRh/9/XjwpNI9UtyHBDylVWTUo= -----END CERTIFICATE-----Generated at Sat Jun 20 03:00:35 2026 by rpki-client