$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/96536b0c-989f-35e3-b9f9-49a8990df0d2.roa File: 96536b0c-989f-35e3-b9f9-49a8990df0d2.roa (raw, json) Hash identifier: 338NLoxOeSi8K12Cf7gj+g0G24gyZtPwPwwfMH3wX64= Subject key identifier: 2E:22:60:1B:5F:B6:56:EE:19:F3:C7:80:3F:68:1E:CC:0B:11:6F:D3 Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584E2D9F3D43D4734078227ABD80 Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/96536b0c-989f-35e3-b9f9-49a8990df0d2.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 17210 IP address blocks: 69.84.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:3d:43:d4:73:40:78:22:7a:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=49baf6d7-e479-402a-bf45-eeed0648f53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b3:80:c0:e3:62:cb:0a:4c:f6:3c:b0:8c:2b: 63:9e:f3:88:99:f1:53:a7:8d:ef:76:b4:4b:12:35: 30:56:7a:3f:d3:1c:be:67:bb:4b:e4:0c:9c:da:8b: 80:05:63:4f:1a:06:17:ae:2e:93:b1:31:60:29:f0: ce:d4:86:e7:19:e0:d0:bb:a9:9c:53:58:be:ef:07: 40:03:0b:13:38:2d:77:a0:39:71:cd:47:e7:7d:fd: fc:4a:f0:40:f5:07:ff:97:01:55:6a:78:a0:87:fd: af:fd:70:e7:a3:bd:18:8c:8b:32:a0:11:27:53:c1: a7:0d:b1:ca:e6:65:ce:80:76:92:02:c9:ac:31:35: e6:91:91:54:a1:56:fb:0c:23:24:ef:44:02:24:25: ba:f5:6b:8d:c2:8f:29:87:0b:23:8d:44:1c:c0:13: cc:83:b1:97:a1:3b:75:29:72:18:9b:d1:05:eb:5e: fa:5c:69:11:f3:42:f5:00:54:88:27:d4:d5:b4:7c: c5:8f:78:be:47:33:98:66:ba:45:ac:0d:41:72:c0: 2c:98:a9:16:fe:00:de:9d:74:9d:52:45:ff:1a:30: 7f:3b:18:6a:b5:39:d6:b3:53:6d:58:d9:6d:5a:94: 38:ed:0c:a3:32:aa:5d:9c:ff:fa:2e:a6:95:1a:1f: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:22:60:1B:5F:B6:56:EE:19:F3:C7:80:3F:68:1E:CC:0B:11:6F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/96536b0c-989f-35e3-b9f9-49a8990df0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: 69.84.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:71:ce:13:8e:79:eb:7a:7b:ae:04:13:86:1c:70:6a:c4:df: 09:03:27:0a:99:9c:78:cf:17:29:08:f5:5b:47:3e:05:17:00: 80:4b:81:a8:01:4a:35:d9:f7:e4:dc:86:48:83:85:8a:86:35: 36:f7:1f:da:b2:ab:da:73:f1:ab:67:ba:c1:61:f4:51:1a:13: 24:a5:cb:14:eb:d7:6e:32:9d:c7:e7:51:f8:c5:23:6a:a6:4d: 8c:d6:c6:e5:01:f9:bf:5c:f1:45:4f:26:36:13:27:cc:9a:39: c0:45:7f:bc:34:16:f6:d1:f4:cf:62:1c:a0:63:2e:02:26:be: 3b:4f:84:3c:d4:04:20:b6:4b:69:ed:b3:a9:2d:84:fd:f6:c3: ae:0a:b8:73:a4:9f:11:cc:ae:82:ac:4c:e1:fc:e9:30:e1:4a: be:10:7c:25:87:5a:44:bf:23:d5:a3:f9:cb:a0:00:c5:ad:bd: 18:0b:0a:73:7c:30:52:24:cd:69:90:8b:ff:fc:d2:2e:5a:c3: dd:90:46:5a:83:63:3e:fa:c2:32:6e:db:7e:48:32:ca:3c:37: e7:95:49:d7:0b:a8:e3:64:82:67:d6:6d:a7:eb:aa:db:6c:18: 5a:38:46:12:4f:46:9b:5c:cd:ae:a1:ff:e8:b6:96:26:92:8a: 2b:53:83:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnz1D1HNAeCJ6vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk NDliYWY2ZDctZTQ3OS00MDJhLWJmNDUtZWVlZDA2NDhmNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrOAwONiywpM9jywjCtjnvOImfFTp43vdrRL EjUwVno/0xy+Z7tL5Ayc2ouABWNPGgYXri6TsTFgKfDO1IbnGeDQu6mcU1i+7wdA AwsTOC13oDlxzUfnff38SvBA9Qf/lwFVanigh/2v/XDno70YjIsyoBEnU8GnDbHK 5mXOgHaSAsmsMTXmkZFUoVb7DCMk70QCJCW69WuNwo8phwsjjUQcwBPMg7GXoTt1 KXIYm9EF6176XGkR80L1AFSIJ9TVtHzFj3i+RzOYZrpFrA1BcsAsmKkW/gDenXSd UkX/GjB/OxhqtTnWs1NtWNltWpQ47QyjMqpdnP/6LqaVGh89FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4iYBtftlbuGfPHgD9oHswLEW/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvOTY1MzZiMGMtOTg5Zi0z NWUzLWI5ZjktNDlhODk5MGRmMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtxzhOOeet6e64EE4YccGrE3wkDJwqZnHjPFykI9VtHPgUXAIBLgagB SjXZ9+TchkiDhYqGNTb3H9qyq9pz8atnusFh9FEaEySlyxTr124yncfnUfjFI2qm TYzWxuUB+b9c8UVPJjYTJ8yaOcBFf7w0FvbR9M9iHKBjLgImvjtPhDzUBCC2S2nt s6kthP32w64KuHOknxHMroKsTOH86TDhSr4QfCWHWkS/I9Wj+cugAMWtvRgLCnN8 MFIkzWmQi//80i5aw92QRlqDYz76wjJu235IMso8N+eVSdcLqONkgmfWbafrqtts GFo4RhJPRptcza6h/+i2liaSiitTg24= -----END CERTIFICATE-----Generated at Sat Jun 20 17:27:04 2026 by rpki-client