$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/958d5329-4a53-3291-82c3-9333e0a732f1.roa File: 958d5329-4a53-3291-82c3-9333e0a732f1.roa (raw, json) Hash identifier: iON2JW50mhP0tXhyFIfSYKa3PIOVdyLtAccyvw5VhiM= Subject key identifier: 2C:9C:66:6C:E5:2E:17:A8:6C:9C:FC:04:92:B7:73:35:8E:0F:52:1E Certificate issuer: /CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b Certificate serial: 010D0C9F4328584DF635AB1B862A616EE441EE00 Authority key identifier: B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/958d5329-4a53-3291-82c3-9333e0a732f1.roa Signing time: Tue 26 May 2026 12:38:34 +0000 ROA not before: Tue 26 May 2026 12:38:34 +0000 ROA not after: Mon 24 Aug 2026 12:38:34 +0000 asID: 6079 IP address blocks: 209.20.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:35:ab:1b:86:2a:61:6e:e4:41:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b Validity Not Before: May 26 12:38:34 2026 GMT Not After : Aug 24 12:38:34 2026 GMT Subject: CN=08880c56-93b4-4f72-90d6-452a9b4f64af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:50:55:cc:6c:7e:08:9f:25:70:b4:0d:31:37: 18:5a:54:4e:2a:43:39:47:d4:9f:12:c1:40:05:42: 4c:d6:91:bb:25:48:c4:1d:f1:cf:83:b7:fc:41:52: aa:7f:bb:06:f9:8f:41:12:83:03:af:75:27:df:45: 1f:fe:7c:4a:bd:25:83:57:ea:2f:14:29:f3:90:d8: 40:a8:7d:d0:6d:55:e7:98:8a:51:02:2d:64:16:e4: 9e:fc:8d:87:5c:9d:ac:ae:33:c7:44:50:a6:a8:09: 4e:7a:b5:1d:5c:36:f4:29:86:87:63:48:ae:ee:08: ce:00:68:17:21:8b:20:9a:11:f2:50:31:3d:3f:3d: b7:1c:13:e6:7c:db:ef:e9:78:f5:69:f9:14:f9:1a: a5:ff:6f:31:0d:3b:67:6c:0b:d0:0e:6b:35:bd:ef: 18:f3:30:83:fd:18:fa:1b:fd:09:77:eb:21:f3:3e: f0:63:a4:24:72:ed:e1:40:80:ce:d9:3e:ae:37:89: 07:af:9c:08:ae:f5:4f:d4:8e:e0:45:e8:dc:58:1d: ab:07:61:56:f2:6c:bd:b8:26:48:bc:7a:cb:55:97: 52:fd:18:73:a0:78:05:14:21:a8:37:d2:9c:33:b4: 4d:70:70:e1:b4:1e:7b:ff:62:91:7c:1d:44:78:40: 91:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9C:66:6C:E5:2E:17:A8:6C:9C:FC:04:92:B7:73:35:8E:0F:52:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/958d5329-4a53-3291-82c3-9333e0a732f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.crl X509v3 Authority Key Identifier: keyid:B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:cf:0a:fb:1e:8d:00:ca:87:d3:7f:7c:81:04:f1:2e:f1:ec: e8:33:98:4f:77:b0:27:2a:36:62:49:e2:a0:40:91:80:5e:91: 95:9c:11:f0:83:8a:a3:31:69:85:77:cb:cd:ea:b1:ec:d5:22: b8:ff:2b:2e:a0:23:bc:e7:61:33:c7:f0:1d:e8:58:1f:c6:a0: 9f:89:86:08:42:09:21:7a:e0:aa:91:92:4f:f0:18:c3:cc:4b: fa:7c:2a:02:c3:02:da:93:06:f7:92:39:ec:3a:3f:80:15:a9: ef:64:a2:4d:3a:54:6a:db:83:b7:cb:a1:07:e4:36:23:4f:c1: c4:ca:47:ac:98:3d:aa:e9:3d:23:49:16:63:88:73:b2:1c:6a: 8e:08:75:14:07:2b:1b:e1:47:38:e6:30:bb:f6:ad:13:74:56: 20:8f:99:7e:aa:38:48:b4:71:4b:6e:1a:bf:6a:f6:ea:68:86: b5:55:88:15:3d:d0:9e:89:3c:a4:96:e6:58:a5:5f:f2:7d:94: ed:c4:b9:3b:23:19:50:66:d7:ae:57:b0:57:65:a5:6e:61:df: 62:da:d5:88:c4:b6:1d:4e:84:e5:52:3d:6f:85:8e:03:ac:c9: 51:92:92:41:98:21:db:79:41:db:48:7e:d2:93:f1:32:a2:53: 1b:55:e0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32NasbhiphbuRB7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA5NGZmNDgtMmNkYy00ZWUwLTg3OWItOGNjMjVkZGI4 NTViMB4XDTI2MDUyNjEyMzgzNFoXDTI2MDgyNDEyMzgzNFowLzEtMCsGA1UEAxMk MDg4ODBjNTYtOTNiNC00ZjcyLTkwZDYtNDUyYTliNGY2NGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VBVzGx+CJ8lcLQNMTcYWlROKkM5R9SfEsFA BUJM1pG7JUjEHfHPg7f8QVKqf7sG+Y9BEoMDr3Un30Uf/nxKvSWDV+ovFCnzkNhA qH3QbVXnmIpRAi1kFuSe/I2HXJ2srjPHRFCmqAlOerUdXDb0KYaHY0iu7gjOAGgX IYsgmhHyUDE9Pz23HBPmfNvv6Xj1afkU+Rql/28xDTtnbAvQDms1ve8Y8zCD/Rj6 G/0Jd+sh8z7wY6Qkcu3hQIDO2T6uN4kHr5wIrvVP1I7gRejcWB2rB2FW8my9uCZI vHrLVZdS/RhzoHgFFCGoN9KcM7RNcHDhtB57/2KRfB1EeECR7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCycZmzlLheobJz8BJK3czWOD1IeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82MDk0 ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2MyNWRkYjg1NWIvOTU4ZDUzMjktNGE1My0z MjkxLTgyYzMtOTMzM2UwYTczMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjA5NGZmNDgtMmNkYy00ZWUwLTg3 OWItOGNjMjVkZGI4NTViLzYwOTRmZjQ4LTJjZGMtNGVlMC04NzliLThjYzI1ZGRi ODU1Yi5jcmwwHwYDVR0jBBgwFoAUtgZnKGSWCj2z9xgmS747n195KzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82MDk0ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2My NWRkYjg1NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPPCvsejQDKh9N/fIEE8S7x7OgzmE93sCcqNmJJ4qBAkYBekZWcEfCD iqMxaYV3y83qsezVIrj/Ky6gI7znYTPH8B3oWB/GoJ+JhghCCSF64KqRkk/wGMPM S/p8KgLDAtqTBveSOew6P4AVqe9kok06VGrbg7fLoQfkNiNPwcTKR6yYParpPSNJ FmOIc7Icao4IdRQHKxvhRzjmMLv2rRN0ViCPmX6qOEi0cUtuGr9q9upohrVViBU9 0J6JPKSW5lilX/J9lO3EuTsjGVBm165XsFdlpW5h32La1YjEth1OhOVSPW+FjgOs yVGSkkGYIdt5QdtIftKT8TKiUxtV4P0= -----END CERTIFICATE-----Generated at Wed Jun 3 08:31:15 2026 by rpki-client