$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa File: cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa (raw, json) Hash identifier: zYm3SyFpQ7sFb8UygniyAXr55LFpN9oczViADA5h2i8= Subject key identifier: 7F:D0:5F:1B:82:86:21:18:8E:E7:B1:A2:4B:74:94:B6:C5:9B:50:C9 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E5A49FF5D46BF61351ADA6B00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 13576 IP address blocks: 209.151.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:ff:5d:46:bf:61:35:1a:da:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=2d1fbc43-32b5-4cd9-a2a3-43c7a9855d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:37:97:c1:20:96:70:f1:f4:96:99:76:a0: e5:4a:6e:5c:5c:fa:1b:76:a3:81:e4:ae:45:57:5e: c3:17:63:24:da:08:93:8c:49:dd:3b:80:76:c3:3b: e5:08:9f:92:dd:e0:26:a3:79:1b:b2:24:3c:d2:69: 0f:9b:a0:59:33:fc:eb:71:31:42:13:4a:02:e9:f9: 86:f2:c8:53:4d:86:74:f5:35:9c:f7:88:78:a4:03: 36:32:71:1b:e5:b2:40:1b:01:12:38:55:8a:e9:4f: 03:8a:3f:fc:ec:ee:b1:c1:37:be:da:70:65:3f:a3: 15:08:69:b0:d6:cd:37:b8:e6:22:91:29:dd:a7:78: ba:c2:6b:3f:83:ce:64:b3:a7:b0:a1:f9:d6:1c:b1: f7:0a:9d:61:e0:72:dc:42:63:5d:08:b4:1f:8c:4d: 02:61:b7:80:66:44:80:1d:1f:1a:cd:bb:83:df:dd: 24:cf:8e:ed:95:e1:4c:66:11:40:4e:ae:16:8b:24: 00:00:f6:82:82:51:1d:56:2f:fa:46:33:e1:1c:b4: 97:27:d4:3b:8e:bc:aa:ac:0a:bf:d6:6f:06:d7:61: e4:75:fd:af:7b:68:f0:b9:4e:28:17:0c:34:07:fd: f7:2e:b1:1b:41:dd:4b:2e:5d:13:f6:6c:93:8d:6c: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D0:5F:1B:82:86:21:18:8E:E7:B1:A2:4B:74:94:B6:C5:9B:50:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:21:d5:f4:90:c7:ba:f5:ba:35:48:4b:50:40:35:99:82:cb: db:59:f9:6b:cd:0e:bb:a3:2d:18:42:de:32:ba:f3:ca:4e:34: c9:fd:9c:3f:7b:1f:8e:69:c7:bc:24:1c:39:fd:bb:a6:95:ce: b1:b4:91:a4:71:08:9d:b4:02:38:d8:81:b2:fa:8a:b3:93:42: 3a:d2:e5:6e:45:54:64:b4:bf:81:36:88:c0:ce:1e:d4:8e:fb: 98:d8:30:1d:53:cc:f3:0d:09:19:cf:d0:9a:97:d3:5d:f4:31: 67:a1:66:24:95:58:dd:95:92:4e:37:9e:d5:80:0e:d4:15:d0: 32:7f:08:2f:fd:0c:df:be:b3:6b:77:48:73:66:97:99:36:4d: 5b:d2:dc:b7:42:f3:96:42:01:44:0d:90:63:96:a3:33:47:a2: d1:1a:c5:89:6d:f1:5e:57:b8:75:d6:59:e3:aa:44:d0:2b:f3: 3c:47:67:08:02:30:a7:21:81:38:1e:c5:dd:6c:35:65:dc:23: 3f:85:5c:00:34:a2:ef:58:77:dc:95:97:af:1e:1f:cb:b3:07: 98:bc:6e:be:61:23:bf:21:1b:dd:01:2a:73:bb:c7:67:40:6f: 3a:e1:b8:f5:2b:85:a9:ac:58:8f:2f:3e:03:38:2c:76:52:9b: ed:3c:d4:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSf9dRr9hNRraawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk MmQxZmJjNDMtMzJiNS00Y2Q5LWEyYTMtNDNjN2E5ODU1ZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbo3l8EglnDx9JaZdqDlSm5cXPobdqOB5K5F V17DF2Mk2giTjEndO4B2wzvlCJ+S3eAmo3kbsiQ80mkPm6BZM/zrcTFCE0oC6fmG 8shTTYZ09TWc94h4pAM2MnEb5bJAGwESOFWK6U8Dij/87O6xwTe+2nBlP6MVCGmw 1s03uOYikSndp3i6wms/g85ks6ewofnWHLH3Cp1h4HLcQmNdCLQfjE0CYbeAZkSA HR8azbuD390kz47tleFMZhFATq4WiyQAAPaCglEdVi/6RjPhHLSXJ9Q7jryqrAq/ 1m8G12Hkdf2ve2jwuU4oFww0B/33LrEbQd1LLl0T9myTjWxOIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/QXxuChiEYjuexokt0lLbFm1DJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2ZiMjU5MzgtMWZlOC0z ZmVmLThkMzctYjdkMWNkZGFmYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ze1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgh1fSQx7r1ujVIS1BANZmCy9tZ+WvNDrujLRhC3jK688pONMn9nD97 H45px7wkHDn9u6aVzrG0kaRxCJ20AjjYgbL6irOTQjrS5W5FVGS0v4E2iMDOHtSO +5jYMB1TzPMNCRnP0JqX0130MWehZiSVWN2Vkk43ntWADtQV0DJ/CC/9DN++s2t3 SHNml5k2TVvS3LdC85ZCAUQNkGOWozNHotEaxYlt8V5XuHXWWeOqRNAr8zxHZwgC MKchgTgexd1sNWXcIz+FXAA0ou9Yd9yVl68eH8uzB5i8br5hI78hG90BKnO7x2dA bzrhuPUrhamsWI8vPgM4LHZSm+081Ls= -----END CERTIFICATE-----Generated at Wed Jul 22 02:07:41 2026 by rpki-client