$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa File: c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa (raw, json) Hash identifier: KnO4nBgHBosj+2BXPR9lIsfRfRdYkgyFVQfp58s6yj8= Subject key identifier: BC:BF:C3:39:74:A5:96:78:DD:3F:65:EE:DD:D2:42:97:B6:66:98:C7 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E4129DAAE04C30EBFB1805680 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 20014 IP address blocks: 209.151.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:da:ae:04:c3:0e:bf:b1:80:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=d904f8df-133d-4a2d-8387-79d5def75178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d9:6c:6f:64:0b:20:9a:85:06:25:b1:9c:7b: a9:39:fc:39:0f:52:98:9c:46:ba:a3:37:ee:b5:69: 2f:bd:f4:1d:37:e9:6d:a9:0c:eb:e9:e3:68:bc:a5: 5b:fc:1d:5e:79:d3:a8:4d:7a:35:88:ab:86:c6:e5: 88:ca:a7:26:89:8e:7b:ab:55:8c:9a:04:04:7f:a7: 88:a1:60:98:90:b3:36:38:34:1f:d1:c9:79:55:f2: 2d:23:da:51:ef:74:7e:f9:a8:80:f9:98:67:44:06: 47:7b:ce:9f:b0:a7:3e:85:cc:72:36:4c:5e:a6:1e: cf:f5:0f:c6:4f:9b:93:62:5c:fb:7b:42:61:e9:f1: 6b:75:39:3f:8c:f2:1e:d6:eb:66:bb:69:d8:f0:03: 72:de:ac:67:32:f8:18:3d:9e:26:25:81:a1:82:13: 1d:4b:88:3d:35:84:bc:93:28:e3:75:87:78:c7:ba: 12:f1:7b:a6:02:e3:f2:5c:0f:8f:0f:f3:40:b0:66: 18:71:98:c2:53:b6:58:33:39:28:dd:c5:66:96:0a: ec:10:85:51:bd:55:c9:25:08:fe:84:29:ca:fa:34: 6a:48:c5:dc:97:f3:3a:41:43:2e:42:ca:34:b6:48: 57:a1:68:17:8d:be:64:1b:cf:e9:96:53:6a:78:85: 6d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BF:C3:39:74:A5:96:78:DD:3F:65:EE:DD:D2:42:97:B6:66:98:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e8:39:f0:51:ed:2b:fa:3f:74:d4:1c:9a:94:8e:58:6b:b7: 25:44:41:ed:4f:11:cd:61:a1:da:52:e8:ea:ca:19:fd:e6:79: a9:b9:d0:f6:65:ca:39:58:6a:cc:de:50:aa:6a:ae:c7:09:50: ff:f5:25:a4:ad:46:15:3b:46:d3:f1:01:54:6f:55:f2:02:fc: 53:c4:4e:dd:4f:50:05:07:02:72:fe:c3:46:dd:59:5d:6c:dc: fd:00:c0:e0:36:41:d6:d3:dc:5d:3f:f0:30:59:46:8e:ef:53: 15:31:c2:35:07:f4:e4:1d:33:58:e1:1d:50:17:bb:73:f9:fd: 87:73:5f:3b:2f:cf:24:fa:6e:fa:69:78:21:0b:0a:62:b2:1d: 92:25:d6:eb:5b:28:5d:93:19:2e:f1:5e:af:0e:fe:ab:5f:64: e9:ab:43:2f:c2:b0:b1:82:80:a0:c7:c4:7e:22:2d:20:a6:5e: 5a:c5:68:44:28:e7:56:20:e4:32:25:d3:7a:8f:31:e1:de:e3: d7:19:9a:eb:5d:72:9c:a2:5e:db:8c:e0:b4:79:35:42:fe:1b: 28:e0:2b:a1:e6:34:63:7b:74:fb:a3:fb:b1:1c:7e:91:16:8e: 3a:51:e8:06:96:72:9c:44:a4:bf:b9:6b:d8:f6:78:bc:3d:f1: 53:03:8e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdquBMMOv7GAVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZDkwNGY4ZGYtMTMzZC00YTJkLTgzODctNzlkNWRlZjc1MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9lsb2QLIJqFBiWxnHupOfw5D1KYnEa6ozfu tWkvvfQdN+ltqQzr6eNovKVb/B1eedOoTXo1iKuGxuWIyqcmiY57q1WMmgQEf6eI oWCYkLM2ODQf0cl5VfItI9pR73R++aiA+ZhnRAZHe86fsKc+hcxyNkxeph7P9Q/G T5uTYlz7e0Jh6fFrdTk/jPIe1utmu2nY8ANy3qxnMvgYPZ4mJYGhghMdS4g9NYS8 kyjjdYd4x7oS8XumAuPyXA+PD/NAsGYYcZjCU7ZYMzko3cVmlgrsEIVRvVXJJQj+ hCnK+jRqSMXcl/M6QUMuQso0tkhXoWgXjb5kG8/pllNqeIVtLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy/wzl0pZZ43T9l7t3SQpe2ZpjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzkxYjFiZGUtMDRiOC0z Yzc2LWI2ZjUtMzU4NzdhNWVkMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZexMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHboOfBR7Sv6P3TUHJqUjlhrtyVEQe1PEc1hodpS6OrKGf3meam50PZl yjlYaszeUKpqrscJUP/1JaStRhU7RtPxAVRvVfIC/FPETt1PUAUHAnL+w0bdWV1s 3P0AwOA2QdbT3F0/8DBZRo7vUxUxwjUH9OQdM1jhHVAXu3P5/YdzXzsvzyT6bvpp eCELCmKyHZIl1utbKF2TGS7xXq8O/qtfZOmrQy/CsLGCgKDHxH4iLSCmXlrFaEQo 51Yg5DIl03qPMeHe49cZmutdcpyiXtuM4LR5NUL+GyjgK6HmNGN7dPuj+7EcfpEW jjpR6AaWcpxEpL+5a9j2eLw98VMDjoA= -----END CERTIFICATE-----Generated at Wed Jul 22 01:14:04 2026 by rpki-client