$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa File: 3495d15c-fa42-330f-b8d8-37281c835c5c.roa (raw, json) Hash identifier: SyedlQnP0Gy8wfs10JKR90kFNV8rHT7IYmt76mV4wLo= Subject key identifier: 31:92:F3:88:FF:79:C9:AD:E4:A6:57:8A:0C:EA:42:F6:E3:3B:5F:F2 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E4AEF3D819B6CF83ED58B5080 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 22612 IP address blocks: 209.188.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:3d:81:9b:6c:f8:3e:d5:8b:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=cb6269ea-7469-4c24-af06-4a6591b66766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:fe:0b:0a:fe:b6:4a:e0:b1:52:9e:bf:db: f5:f9:bd:91:95:53:b5:94:bf:24:d4:38:47:4d:c9: c5:be:c0:53:47:ef:43:29:68:ee:61:70:72:4b:7c: 0d:9f:0c:6d:30:fa:51:be:c3:60:6b:c7:d4:c1:f0: 62:64:fe:c8:31:e7:cc:32:b4:fb:c6:cf:80:80:9c: 13:74:7d:05:ea:f5:65:e0:95:d7:06:78:6d:9a:a9: 55:4d:15:a3:9b:70:0c:6e:50:7f:cd:f1:ac:ba:44: bc:07:44:c0:10:05:d9:28:e6:cd:cf:fb:1c:f9:7b: 6c:62:65:82:be:f9:a4:43:b5:36:a9:68:05:8f:68: 90:af:89:91:ce:b5:c9:8d:c1:40:7b:d0:6c:d9:c3: 65:f0:e7:96:1f:b2:4f:ad:7d:b5:2d:fe:b5:c6:d1: 18:57:04:45:05:6d:39:05:07:8a:37:8b:9b:b0:2b: e2:50:bc:ad:36:90:97:7a:b2:48:ca:f2:de:a4:6c: 1e:80:18:a3:39:39:7d:f6:bc:c8:3c:c7:e9:51:81: 3d:7a:b2:e0:76:4d:35:31:5a:59:9c:0d:14:1d:fa: 04:0e:4d:67:a6:0c:8d:98:03:eb:c6:2e:45:eb:0d: 73:b3:a4:33:74:1b:75:ea:1b:8c:5d:16:ef:39:1f: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:92:F3:88:FF:79:C9:AD:E4:A6:57:8A:0C:EA:42:F6:E3:3B:5F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:64:ac:1c:e1:3c:38:0b:5c:9c:2c:fd:a9:84:3e:52:ce:1b: c0:53:13:87:7c:0a:fc:82:04:0a:50:49:db:ec:9b:05:8d:51: 59:53:97:73:c5:ca:35:a7:b9:bd:66:60:6e:da:bd:46:34:5b: 64:35:59:32:9f:7e:5b:c3:ab:51:78:4d:10:06:7d:70:e0:0b: 36:00:82:13:c7:82:7a:71:b4:24:49:c8:36:34:cc:b4:e3:33: dc:c0:9c:c9:a2:2f:eb:67:ee:34:36:ff:9a:79:55:4f:24:39: d4:fa:de:4d:12:f0:b9:e9:73:9b:9e:c5:08:2e:e7:53:37:3b: bd:99:87:e5:ad:2b:33:8d:1d:ec:01:0e:4f:63:d0:f9:86:d4: 99:84:9a:7c:12:50:ed:0b:8d:94:3b:78:2a:a1:6f:74:b0:39: 45:05:25:82:14:69:ef:05:08:e4:21:d9:3d:95:48:93:fa:6c: 6d:3e:b0:4d:5f:90:14:46:25:ce:8d:56:52:0a:cb:da:21:10: a8:b5:20:19:34:4a:ba:c3:1d:63:06:7f:fe:5c:0a:c0:69:c1: b9:09:47:e5:d2:97:82:1b:03:78:2f:98:7e:9b:bd:74:8d:4d: a3:14:33:8f:22:0a:c3:3f:ba:fd:f1:c7:83:d9:0a:6b:6a:09: ce:20:a0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7z2Bm2z4PtWLUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk Y2I2MjY5ZWEtNzQ2OS00YzI0LWFmMDYtNGE2NTkxYjY2NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtr+Cwr+tkrgsVKev9v1+b2RlVO1lL8k1DhH TcnFvsBTR+9DKWjuYXByS3wNnwxtMPpRvsNga8fUwfBiZP7IMefMMrT7xs+AgJwT dH0F6vVl4JXXBnhtmqlVTRWjm3AMblB/zfGsukS8B0TAEAXZKObNz/sc+XtsYmWC vvmkQ7U2qWgFj2iQr4mRzrXJjcFAe9Bs2cNl8OeWH7JPrX21Lf61xtEYVwRFBW05 BQeKN4ubsCviULytNpCXerJIyvLepGwegBijOTl99rzIPMfpUYE9erLgdk01MVpZ nA0UHfoEDk1npgyNmAPrxi5F6w1zs6QzdBt16huMXRbvOR+lbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGS84j/ecmt5KZXigzqQvbjO1/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzQ5NWQxNWMtZmE0Mi0z MzBmLWI4ZDgtMzcyODFjODM1YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChkrBzhPDgLXJws/amEPlLOG8BTE4d8CvyCBApQSdvsmwWNUVlTl3PF yjWnub1mYG7avUY0W2Q1WTKfflvDq1F4TRAGfXDgCzYAghPHgnpxtCRJyDY0zLTj M9zAnMmiL+tn7jQ2/5p5VU8kOdT63k0S8Lnpc5uexQgu51M3O72Zh+WtKzONHewB Dk9j0PmG1JmEmnwSUO0LjZQ7eCqhb3SwOUUFJYIUae8FCOQh2T2VSJP6bG0+sE1f kBRGJc6NVlIKy9ohEKi1IBk0SrrDHWMGf/5cCsBpwbkJR+XSl4IbA3gvmH6bvXSN TaMUM48iCsM/uv3xx4PZCmtqCc4goJo= -----END CERTIFICATE-----Generated at Wed Jul 1 21:50:20 2026 by rpki-client