$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa File: cd93a255-e514-3611-be7c-946b8830ac3e.roa (raw, json) Hash identifier: mZuDs0WXr0USdo7XLE7DTzV5rqSIXVDoWBFLxXm36j4= Subject key identifier: E1:95:66:2B:5A:F1:3C:E1:05:F4:FA:5B:3A:E1:5F:9A:F4:CF:3F:CC Certificate issuer: /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Certificate serial: 010D0C9F4328584E4559E30FB9F922004F1C0680 Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 62827 IP address blocks: 209.209.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:e3:0f:b9:f9:22:00:4f:1c:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=141186b7-a12f-42c2-8c7c-7d937a8b5ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:8d:46:ec:d8:38:3a:23:cc:0f:13:f5:58: 7a:01:8b:87:93:24:dd:8f:91:7e:0e:5d:b5:6e:5b: 78:72:b7:87:d0:fa:88:d7:fd:4e:8d:99:24:63:af: 66:b0:c0:ce:bf:e7:3a:b2:bd:ed:86:54:41:e5:9e: 8b:ce:bf:d6:44:aa:54:7e:33:54:c5:26:10:22:ed: d2:06:0b:35:50:76:95:92:04:d5:9b:37:95:6a:30: 04:cf:13:cd:4b:c3:96:a5:3a:ce:f5:9c:c1:85:f2: 4c:4d:97:bb:9f:49:88:98:34:f1:e1:dd:46:80:01: 60:fe:02:05:a9:c7:b8:65:43:df:b1:90:d6:75:f7: 65:ec:d0:92:3e:4e:5b:58:12:bf:8a:96:8c:97:51: bd:35:bb:5c:88:6e:a9:06:e2:2e:ad:d5:8f:4f:42: d3:57:e1:d7:8d:ec:bb:35:30:13:d7:f2:21:80:8e: 4c:3f:04:37:52:97:43:be:4b:71:ea:6c:33:98:c0: db:02:96:93:6f:20:81:b7:0b:8f:32:61:9f:a6:58: ce:8f:f2:cb:8a:b1:74:09:fd:4c:75:77:dc:80:6a: c9:7f:e1:18:95:ff:f6:f8:93:a5:e9:c5:36:9b:b1: 98:5b:12:85:88:b9:ac:6b:fb:47:dc:32:e0:be:b6: db:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:95:66:2B:5A:F1:3C:E1:05:F4:FA:5B:3A:E1:5F:9A:F4:CF:3F:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl X509v3 Authority Key Identifier: keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer sbgp-ipAddrBlock: critical IPv4: 209.209.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b2:f9:20:c8:6c:4a:24:ea:64:7f:70:df:bb:77:ac:39:61: 70:6d:4b:fd:7f:be:f4:89:67:75:dc:bd:5f:3b:b0:bd:95:e4: 52:37:38:87:b9:c9:d8:34:63:8f:cc:50:23:5b:84:d5:7b:ac: b3:3b:15:47:20:dd:a9:12:d0:78:bb:79:4b:a0:a2:73:a7:4f: ee:3b:ae:47:44:7e:49:1c:17:0d:f1:32:81:e8:9f:4d:2b:08: d2:4e:7b:55:42:86:83:fb:a7:47:ec:6e:fc:54:9e:b8:ea:29: 75:ba:4b:68:31:db:e9:ed:30:13:27:ff:7c:ea:e5:c3:89:de: 33:6d:dd:99:79:ea:5f:f4:22:d9:6e:2e:51:4b:b7:5b:a4:f5: 55:57:f2:37:3e:1a:64:a7:44:3e:20:1d:c0:9e:2e:9e:e3:f4: a9:f9:16:f3:d3:58:bf:45:71:37:85:a9:db:2a:60:f2:4e:40: 35:48:03:f3:c9:40:7d:b9:e4:e8:c6:c7:e4:9a:87:8d:19:9f: ce:49:27:fe:99:3d:4b:4d:dd:43:34:41:6f:7e:da:ec:4c:d0: 45:62:fb:de:31:52:2c:f2:a5:82:1e:4a:0d:3f:5b:61:f5:c9: f2:00:68:1e:c2:6c:8b:f6:f3:4a:68:8a:0a:d9:e3:cf:ba:98: 09:74:36:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWeMPufkiAE8cBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA0YmM3ZmQtNTMzNC00NWVlLTlhNDgtM2ZmYjExN2Fk NGYzMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk MTQxMTg2YjctYTEyZi00MmMyLThjN2MtN2Q5MzdhOGI1Y2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9uNRuzYODojzA8T9Vh6AYuHkyTdj5F+Dl21 blt4creH0PqI1/1OjZkkY69msMDOv+c6sr3thlRB5Z6Lzr/WRKpUfjNUxSYQIu3S Bgs1UHaVkgTVmzeVajAEzxPNS8OWpTrO9ZzBhfJMTZe7n0mImDTx4d1GgAFg/gIF qce4ZUPfsZDWdfdl7NCSPk5bWBK/ipaMl1G9NbtciG6pBuIurdWPT0LTV+HXjey7 NTAT1/IhgI5MPwQ3UpdDvktx6mwzmMDbApaTbyCBtwuPMmGfpljOj/LLirF0Cf1M dXfcgGrJf+EYlf/2+JOl6cU2m7GYWxKFiLmsa/tH3DLgvrbb8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGVZita8TzhBfT6WzrhX5r0zz/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRi YzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3YWQ0ZjMvY2Q5M2EyNTUtZTUxNC0z NjExLWJlN2MtOTQ2Yjg4MzBhYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjA0YmM3ZmQtNTMzNC00NWVlLTlh NDgtM2ZmYjExN2FkNGYzL2YwNGJjN2ZkLTUzMzQtNDVlZS05YTQ4LTNmZmIxMTdh ZDRmMy5jcmwwHwYDVR0jBBgwFoAUe2AW/SJ5rexO1KDn29yN44VzpwYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZi MTE3YWQ0ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOy+SDIbEok6mR/cN+7d6w5YXBtS/1/vvSJZ3XcvV87sL2V5FI3OIe5 ydg0Y4/MUCNbhNV7rLM7FUcg3akS0Hi7eUugonOnT+47rkdEfkkcFw3xMoHon00r CNJOe1VChoP7p0fsbvxUnrjqKXW6S2gx2+ntMBMn/3zq5cOJ3jNt3Zl56l/0Itlu LlFLt1uk9VVX8jc+GmSnRD4gHcCeLp7j9Kn5FvPTWL9FcTeFqdsqYPJOQDVIA/PJ QH255OjGx+Sah40Zn85JJ/6ZPUtN3UM0QW9+2uxM0EVi+94xUizypYIeSg0/W2H1 yfIAaB7CbIv280poigrZ48+6mAl0Nlc= -----END CERTIFICATE-----Generated at Wed Jul 8 15:48:17 2026 by rpki-client