$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5cc10a3-74b0-3642-8a0b-e5de0b4e8702.roa File: c5cc10a3-74b0-3642-8a0b-e5de0b4e8702.roa (raw, json) Hash identifier: jZwguZZn+Q4iwMEAPLIF0Wc7NXNDEvoCIY7RmqVvzyg= Subject key identifier: 4D:D3:56:82:7B:6D:7D:37:65:CA:C1:C7:EE:F6:E6:21:EA:ED:7A:9B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E50DFFFA03773F45D88373980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5cc10a3-74b0-3642-8a0b-e5de0b4e8702.roa Signing time: Sun 28 Jun 2026 00:04:31 +0000 ROA not before: Sun 28 Jun 2026 00:04:31 +0000 ROA not after: Sat 26 Sep 2026 00:04:31 +0000 asID: 834 IP address blocks: 209.101.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:df:ff:a0:37:73:f4:5d:88:37:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 28 00:04:31 2026 GMT Not After : Sep 26 00:04:31 2026 GMT Subject: CN=80ac3e63-dc78-4a0e-99c0-aedc6717e952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f2:27:cc:57:37:0a:7c:e7:d0:7b:6b:44:24: 65:03:c7:b8:cb:86:b6:48:ff:b4:d0:f6:95:a8:06: 32:4d:60:d8:bc:01:85:5f:a7:11:0c:f1:d9:27:0a: 7e:7b:ac:9f:59:4e:d7:40:b6:9f:15:3f:6a:98:a4: cb:c3:2a:e8:33:c6:13:c2:39:ca:13:50:aa:5b:b4: a9:a6:bf:7d:bc:47:05:95:27:27:a1:2d:b2:08:f0: 36:45:42:9d:97:3d:df:a3:9b:0c:b5:40:74:80:63: 5d:8a:9b:9a:57:21:46:be:97:49:d9:18:d7:2a:3b: 86:63:95:50:37:59:94:db:41:33:f1:43:48:83:82: 38:a6:d0:4b:9b:d7:44:e2:1f:00:78:5b:d8:89:0d: 5a:28:d8:dc:01:19:01:aa:fd:fa:3e:3e:9e:6b:65: ab:b4:ba:4e:f6:ea:6e:fb:14:6d:cf:40:26:1d:de: ba:68:0f:20:7b:98:53:35:4f:f1:dc:4f:2c:8e:6b: 3f:99:1e:a0:9a:25:3a:d5:e5:0a:ef:db:aa:3b:fb: 56:29:3d:d2:e8:2e:5e:d7:21:da:6c:a6:ef:78:83: 1c:af:dd:af:9e:1d:a5:7e:8c:10:56:6d:eb:2b:f6: 54:2c:ef:b9:b8:c8:05:ad:a1:e2:e4:66:12:e4:b2: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D3:56:82:7B:6D:7D:37:65:CA:C1:C7:EE:F6:E6:21:EA:ED:7A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5cc10a3-74b0-3642-8a0b-e5de0b4e8702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5e:1b:9b:87:2a:aa:85:db:ad:81:e8:64:30:12:e6:44:4d: 7f:bc:fb:ff:6a:42:ce:4b:b0:aa:4a:5b:6d:f0:a1:bd:33:ca: 09:5c:30:9e:c0:5a:cf:84:0e:39:de:71:9e:af:52:7f:a5:53: ee:29:ef:b6:56:5e:5f:c4:22:f7:15:89:9f:3b:01:40:49:b8: 0f:b2:a7:1c:9f:36:24:78:c7:61:0c:5a:f6:58:26:65:b6:bf: 12:91:c5:f1:9f:c9:af:a4:39:2b:58:23:ac:c7:04:1e:49:00: 3f:27:95:0b:84:bd:4b:b5:03:96:34:04:6b:12:1d:46:f5:1c: 33:36:3b:3e:15:17:85:d4:f6:e4:86:38:7b:7f:1a:85:d6:f3: ad:93:e6:1f:d8:c6:5e:dd:f2:2b:99:11:cc:ef:5e:58:ab:06: af:88:49:85:49:cb:69:1b:e6:9d:8e:65:b3:6c:6d:0f:74:b7: 29:0b:bb:19:99:91:80:93:af:8d:c5:40:47:c2:cf:38:92:bd: 49:58:98:66:ad:a9:8d:4f:e3:1d:57:0d:56:9f:46:b1:26:c6: 64:42:36:a3:e1:2d:55:50:3f:c8:5b:1e:cb:44:ff:05:ce:62: eb:2e:b6:b3:57:2d:83:56:fb:61:cf:43:aa:96:b3:63:da:56: 4a:00:fe:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Q3/+gN3P0XYg3OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYyODAwMDQzMVoXDTI2MDkyNjAwMDQzMVowLzEtMCsGA1UEAxMk ODBhYzNlNjMtZGM3OC00YTBlLTk5YzAtYWVkYzY3MTdlOTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvInzFc3Cnzn0HtrRCRlA8e4y4a2SP+00PaV qAYyTWDYvAGFX6cRDPHZJwp+e6yfWU7XQLafFT9qmKTLwyroM8YTwjnKE1CqW7Sp pr99vEcFlScnoS2yCPA2RUKdlz3fo5sMtUB0gGNdipuaVyFGvpdJ2RjXKjuGY5VQ N1mU20Ez8UNIg4I4ptBLm9dE4h8AeFvYiQ1aKNjcARkBqv36Pj6ea2WrtLpO9upu +xRtz0AmHd66aA8ge5hTNU/x3E8sjms/mR6gmiU61eUK79uqO/tWKT3S6C5e1yHa bKbveIMcr92vnh2lfowQVm3rK/ZULO+5uMgFraHi5GYS5LJZXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3TVoJ7bX03ZcrBx+725iHq7XqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzVjYzEwYTMtNzRiMC0z NjQyLThhMGItZTVkZTBiNGU4NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHteG5uHKqqF262B6GQwEuZETX+8+/9qQs5LsKpKW23wob0zyglcMJ7A Ws+EDjnecZ6vUn+lU+4p77ZWXl/EIvcViZ87AUBJuA+ypxyfNiR4x2EMWvZYJmW2 vxKRxfGfya+kOStYI6zHBB5JAD8nlQuEvUu1A5Y0BGsSHUb1HDM2Oz4VF4XU9uSG OHt/GoXW862T5h/Yxl7d8iuZEczvXlirBq+ISYVJy2kb5p2OZbNsbQ90tykLuxmZ kYCTr43FQEfCzziSvUlYmGatqY1P4x1XDVafRrEmxmRCNqPhLVVQP8hbHstE/wXO YusutrNXLYNW+2HPQ6qWs2PaVkoA/i4= -----END CERTIFICATE-----Generated at Mon Jun 29 10:00:07 2026 by rpki-client