$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f150563-516d-3fdb-aef9-541f51b900e4.roa File: 2f150563-516d-3fdb-aef9-541f51b900e4.roa (raw, json) Hash identifier: l6aRvlL9kM/XRPk7UUPR5RcucF7VKSlZ0hqrZjwdXOw= Subject key identifier: 34:AA:80:FE:C2:4A:49:EB:2D:1E:A0:F9:34:9D:C8:03:37:6F:67:9B Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584E3E5F54E7039544DE53D990C0 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f150563-516d-3fdb-aef9-541f51b900e4.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 6079 IP address blocks: 209.127.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:54:e7:03:95:44:de:53:d9:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=a55794eb-d140-418c-92a9-5e793959abd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:28:ba:54:95:21:7f:26:8e:79:10:94:71: 85:24:20:f3:b3:8c:de:48:b3:13:56:39:50:6e:b1: af:a2:70:10:ff:57:fc:8f:51:98:66:34:dc:42:e7: ae:02:14:d0:70:35:cb:9f:0d:7d:22:3f:1c:b1:cd: 38:b6:42:f4:d8:e7:f8:98:96:cf:b6:c5:3f:89:d9: 1a:2c:ca:ea:9c:39:6f:96:86:6e:9a:3f:b5:93:31: 1e:70:78:92:4b:36:92:7f:d3:02:32:6a:ca:bb:1d: fa:cf:4f:ad:8b:e1:d0:58:bb:0b:79:1b:c2:d5:bc: 95:b1:32:ec:29:27:01:5f:d4:5a:09:71:4b:8a:57: c0:f7:41:6d:29:64:03:30:70:0a:68:20:d3:c2:eb: c3:95:10:f6:ac:a5:75:c6:d4:eb:df:a8:e6:35:07: c1:a7:8f:39:d9:75:02:8c:79:78:fa:62:96:94:37: 2b:bb:42:99:5a:ca:c7:9f:f2:9a:1c:e0:50:4d:d7: 5b:86:5b:2d:c1:a4:e3:5a:24:a0:bd:50:7d:77:98: 83:3e:cb:db:78:cf:95:e6:a1:b7:70:af:13:86:7d: d9:5c:f7:8e:cb:16:2b:c8:ed:fa:e4:3e:70:7c:ac: cc:06:29:8a:0d:1f:a4:0f:4d:7e:df:12:6a:31:7c: b3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AA:80:FE:C2:4A:49:EB:2D:1E:A0:F9:34:9D:C8:03:37:6F:67:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f150563-516d-3fdb-aef9-541f51b900e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:8a:dc:4f:fc:ac:d1:19:e8:6c:5d:16:99:d3:2e:b3:95:0d: 83:68:ff:32:f8:e7:bd:bd:a1:d9:b4:94:1a:ae:fc:5e:c1:7d: ed:d8:20:5f:4a:5e:3d:b5:02:fe:d5:0c:48:68:8c:62:de:21: 0f:9e:00:96:e5:ba:35:d8:cf:78:24:0d:85:c4:d5:61:80:90: d4:dd:87:ca:28:f6:f8:b6:f6:21:13:40:c1:0c:e9:a6:44:e2: 5d:99:5d:5d:04:ff:0d:91:9f:32:8f:7d:67:44:1b:7a:ca:00: 6a:12:c1:2b:50:a2:bf:46:c3:ec:b0:54:34:c1:c2:aa:2c:02: 60:25:6b:9a:04:e5:99:1c:ec:ad:c5:c6:fc:e6:6e:0b:0a:3c: 1f:c9:6c:bd:d7:f2:cf:e7:1b:ae:78:37:b1:dd:89:4c:57:04: 90:ee:1f:c0:fa:15:c2:a5:8d:5d:c9:03:d4:80:3f:21:ae:0f: 15:a4:1b:fb:e6:7d:b9:17:7e:19:24:59:fe:82:87:43:f0:c8: 25:c4:94:22:0e:ef:95:18:84:57:fc:68:f4:f3:91:43:09:b4: 57:1a:fc:ec:9b:dc:60:32:b9:35:4e:77:6e:79:70:e1:a0:64: 43:0f:f9:e2:e4:0a:a7:84:2e:6d:32:b2:e3:2f:c6:e7:29:a1: d7:90:2c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X1TnA5VE3lPZkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk YTU1Nzk0ZWItZDE0MC00MThjLTkyYTktNWU3OTM5NTlhYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQMoulSVIX8mjnkQlHGFJCDzs4zeSLMTVjlQ brGvonAQ/1f8j1GYZjTcQueuAhTQcDXLnw19Ij8csc04tkL02Of4mJbPtsU/idka LMrqnDlvloZumj+1kzEecHiSSzaSf9MCMmrKux36z0+ti+HQWLsLeRvC1byVsTLs KScBX9RaCXFLilfA90FtKWQDMHAKaCDTwuvDlRD2rKV1xtTr36jmNQfBp4852XUC jHl4+mKWlDcru0KZWsrHn/KaHOBQTddbhlstwaTjWiSgvVB9d5iDPsvbeM+V5qG3 cK8Thn3ZXPeOyxYryO365D5wfKzMBimKDR+kD01+3xJqMXyzrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSqgP7CSknrLR6g+TSdyAM3b2ebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMmYxNTA1NjMtNTE2ZC0z ZmRiLWFlZjktNTQxZjUxYjkwMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0X9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANOK3E/8rNEZ6GxdFpnTLrOVDYNo/zL45729odm0lBqu/F7Bfe3YIF9K Xj21Av7VDEhojGLeIQ+eAJblujXYz3gkDYXE1WGAkNTdh8oo9vi29iETQMEM6aZE 4l2ZXV0E/w2RnzKPfWdEG3rKAGoSwStQor9Gw+ywVDTBwqosAmAla5oE5Zkc7K3F xvzmbgsKPB/JbL3X8s/nG654N7HdiUxXBJDuH8D6FcKljV3JA9SAPyGuDxWkG/vm fbkXfhkkWf6Ch0PwyCXElCIO75UYhFf8aPTzkUMJtFca/Oyb3GAyuTVOd255cOGg ZEMP+eLkCqeELm0ysuMvxucpodeQLPw= -----END CERTIFICATE-----Generated at Tue Jul 14 04:22:53 2026 by rpki-client