$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa File: 509971a2-2e61-329b-aabd-5f74f8132974.roa (raw, json) Hash identifier: 6DTZKktvGslEuPuIP3rnjLg9fgtcdHcccWsVvHsuqfI= Subject key identifier: 8A:18:89:BD:D2:BD:CB:54:1C:04:DB:D2:68:02:D1:F5:1C:BC:F9:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E7634F25A6CFA46B676BCF240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 7342 IP address blocks: 209.131.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:f2:5a:6c:fa:46:b6:76:bc:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=bc8b6fac-f4e3-45c5-a332-6a4130f81da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:1c:06:d1:4d:fd:78:a1:e6:d6:d1:a9:4f: c3:9c:63:b5:f0:42:51:ce:95:d0:c5:b7:78:d9:3f: ad:93:e3:cf:c3:69:03:21:d5:54:55:04:7f:8a:06: 3f:08:02:1f:53:0d:2a:58:81:22:50:31:57:ca:9d: 71:3a:f6:35:09:b9:4c:28:61:c3:2a:6e:46:61:72: b2:48:b6:17:94:cb:06:c2:92:bd:a7:1e:b7:ed:31: 24:c0:e2:ed:50:8b:4d:f9:4f:58:d1:cd:b6:ce:72: 16:48:cb:6b:34:0f:88:9e:80:af:f6:f4:ce:8a:59: 8f:31:60:3f:20:21:dc:69:af:70:21:85:a2:be:04: ec:aa:3e:3a:d0:c8:ef:0d:ce:29:eb:b5:64:1f:bc: 4c:28:71:8f:34:62:42:ea:0f:d7:8c:11:75:8b:4e: e3:b2:f4:8b:e2:72:76:95:86:c6:6e:6b:da:15:4b: 3c:6f:8b:6f:db:d2:79:ad:19:cf:f0:ce:fa:5f:73: 30:59:66:da:68:65:6b:4d:36:80:b4:f6:18:91:91: 8f:aa:5d:49:41:55:cc:5c:23:8e:de:68:49:8b:d1: 28:07:55:8c:6b:c7:16:45:0b:bc:0d:af:b0:f4:e7: cb:77:31:71:8e:90:a2:38:7c:08:32:8a:d0:ce:22: 72:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:18:89:BD:D2:BD:CB:54:1C:04:DB:D2:68:02:D1:F5:1C:BC:F9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:bb:df:19:12:50:b5:5b:f8:50:cb:03:bc:0a:99:94:ac:ad: 66:f2:f2:9f:b2:2e:8a:bb:ac:29:e0:a5:b1:57:d0:d1:06:a7: f1:23:ba:6d:74:cf:a2:43:39:dd:ca:33:95:92:2b:33:89:5f: 54:77:26:40:11:f4:2b:f5:39:17:c8:43:9c:c2:fd:c2:bd:38: 96:b1:ba:34:3f:f4:70:73:f3:de:49:40:46:53:a9:32:e3:92: 99:3b:3c:d0:a3:09:6b:57:69:a8:d7:47:eb:d5:be:bb:6a:ba: 15:1d:6f:9c:18:1f:1f:d9:51:88:0f:1a:9b:cd:3d:6c:64:90: ae:fa:b1:a4:c6:d3:d6:c8:89:69:22:a6:61:ca:a2:00:a5:0f: 32:c2:5c:b7:c0:16:9a:12:ca:ca:15:5e:6a:9d:36:c8:57:ab: 48:06:a7:11:ab:3e:4e:a2:d5:31:6c:ba:8b:ff:c0:0e:2b:3a: 5e:cd:13:25:66:78:12:94:07:04:9e:f3:3b:6b:97:af:0a:90: 83:23:5a:82:c6:6f:6a:3d:fb:38:10:09:8b:54:5d:fe:d8:d0: 37:ed:2c:63:48:f5:c2:25:c4:1b:5a:f4:ac:46:b5:69:1b:19: f7:b2:50:34:97:50:04:4e:8b:3a:8b:b2:86:c5:96:9c:d4:a6: 67:7d:a2:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPJabPpGtna88kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YmM4YjZmYWMtZjRlMy00NWM1LWEzMzItNmE0MTMwZjgxZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmYcBtFN/Xih5tbRqU/DnGO18EJRzpXQxbd4 2T+tk+PPw2kDIdVUVQR/igY/CAIfUw0qWIEiUDFXyp1xOvY1CblMKGHDKm5GYXKy SLYXlMsGwpK9px637TEkwOLtUItN+U9Y0c22znIWSMtrNA+InoCv9vTOilmPMWA/ ICHcaa9wIYWivgTsqj460MjvDc4p67VkH7xMKHGPNGJC6g/XjBF1i07jsvSL4nJ2 lYbGbmvaFUs8b4tv29J5rRnP8M76X3MwWWbaaGVrTTaAtPYYkZGPql1JQVXMXCOO 3mhJi9EoB1WMa8cWRQu8Da+w9OfLdzFxjpCiOHwIMorQziJyLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoYib3SvctUHATb0mgC0fUcvPlpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTA5OTcxYTItMmU2MS0z MjliLWFhYmQtNWY3NGY4MTMyOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ273xkSULVb+FDLA7wKmZSsrWby8p+yLoq7rCngpbFX0NEGp/Ejum10 z6JDOd3KM5WSKzOJX1R3JkAR9Cv1ORfIQ5zC/cK9OJaxujQ/9HBz895JQEZTqTLj kpk7PNCjCWtXaajXR+vVvrtquhUdb5wYHx/ZUYgPGpvNPWxkkK76saTG09bIiWki pmHKogClDzLCXLfAFpoSysoVXmqdNshXq0gGpxGrPk6i1TFsuov/wA4rOl7NEyVm eBKUBwSe8ztrl68KkIMjWoLGb2o9+zgQCYtUXf7Y0DftLGNI9cIlxBta9KxGtWkb GfeyUDSXUAROizqLsobFlpzUpmd9ovg= -----END CERTIFICATE-----Generated at Fri Jul 24 09:09:03 2026 by rpki-client