$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa File: 138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa (raw, json) Hash identifier: dmxgrOUvKWMWozhjG3uUMlaqzvCg1YcjHH5H8L58Cww= Subject key identifier: 54:B2:B2:C7:38:2A:E8:73:83:90:13:C5:12:F0:AD:0A:6F:A0:94:96 Certificate issuer: /CN=04bd1965-5757-479c-b2af-44967b5e0539 Certificate serial: 010D0C9F4328584DFA70784413AD0C4847F01180 Authority key identifier: B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 400671 IP address blocks: 206.168.193.0/24 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:78:44:13:ad:0c:48:47:f0:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bd1965-5757-479c-b2af-44967b5e0539 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=f2dbb92a-919f-43c3-8f9b-7e3bc524a8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:80:52:5b:da:5a:3e:c5:78:c4:00:82:dc: 69:5e:a1:12:47:d4:d9:39:01:38:52:f8:ce:40:61: 15:09:61:93:ab:7e:69:f3:03:ed:5c:19:25:da:0a: 47:be:2c:4e:fe:5f:24:dc:eb:7b:29:9a:d0:09:99: 28:ae:30:73:0a:10:70:48:44:a7:b7:69:59:bd:a2: f0:05:a0:8f:cf:92:1b:af:9f:5b:05:bf:89:d9:be: 82:bb:51:ee:f7:90:14:a7:ee:9a:9c:0e:f6:2e:26: 34:0f:8a:20:96:82:fe:d7:0b:58:4f:97:82:05:38: 54:7a:9c:2c:f5:4c:60:59:a4:83:85:41:d2:ac:67: 05:a6:0c:62:db:cf:35:04:b3:b7:68:ce:d6:d5:5f: 12:7c:52:a3:60:9b:de:01:57:42:ef:ce:e7:aa:8d: 9b:36:13:65:94:2e:92:9e:93:d7:11:c7:e0:08:4b: 1a:b1:8a:98:63:54:d8:ac:d9:c9:d8:e4:f1:5b:70: cc:bd:8f:8e:12:2d:a2:6d:5c:c4:1d:a5:74:da:5e: a7:d3:57:4d:81:7e:dd:51:86:16:35:62:8a:a3:25: 31:d3:11:99:f9:34:ba:e0:f8:f0:c5:b7:1e:7b:73: b8:1d:18:04:27:38:d9:d3:91:a3:19:47:dc:01:69: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B2:B2:C7:38:2A:E8:73:83:90:13:C5:12:F0:AD:0A:6F:A0:94:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl X509v3 Authority Key Identifier: keyid:B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer sbgp-ipAddrBlock: critical IPv4: 206.168.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6e:d4:ac:1b:47:cd:fd:9e:d0:b5:6b:cb:06:f0:4b:58:42: ec:11:4c:c3:50:8e:a4:b7:ad:47:a9:26:00:22:53:48:24:42: cd:95:ad:6b:a0:11:cb:09:fb:a5:cb:20:8b:cc:fe:90:d3:53: 38:88:95:b3:44:b2:69:21:31:85:4e:37:d5:92:25:ab:b6:b3: c9:9a:09:24:0d:15:0a:34:b5:0f:76:6f:10:1f:f2:b9:da:f0: b4:02:f3:c1:27:3d:11:68:32:44:ae:dc:61:40:52:c1:02:83: 0e:12:68:4b:71:af:a2:66:00:99:5f:83:8f:4f:94:2a:a7:ad: 93:91:a2:41:e2:b0:a4:de:3d:83:3e:c0:81:53:d1:d7:b3:0b: 63:e7:7d:53:7a:84:87:9e:64:30:3c:d3:fd:17:5c:64:fa:0c: 52:32:78:61:b4:31:d5:02:1d:dc:bf:b7:4c:2d:07:c2:98:3c: b9:e7:cd:40:89:92:0f:43:71:ff:30:e5:5a:cd:03:36:f0:cb: 91:95:33:21:f7:36:e8:20:c0:ef:08:6d:7f:a5:80:a0:64:93: 2b:76:6e:9a:43:5d:62:07:3d:6a:20:dd:bf:3f:d1:be:12:7b: cc:ba:30:76:a7:8f:6a:a1:72:c9:4a:67:87:f9:8b:6b:95:48: 12:d3:28:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHhEE60MSEfwEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRiZDE5NjUtNTc1Ny00NzljLWIyYWYtNDQ5NjdiNWUw NTM5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZjJkYmI5MmEtOTE5Zi00M2MzLThmOWItN2UzYmM1MjRhOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsSAUlvaWj7FeMQAgtxpXqESR9TZOQE4UvjO QGEVCWGTq35p8wPtXBkl2gpHvixO/l8k3Ot7KZrQCZkorjBzChBwSESnt2lZvaLw BaCPz5Ibr59bBb+J2b6Cu1Hu95AUp+6anA72LiY0D4ogloL+1wtYT5eCBThUepws 9UxgWaSDhUHSrGcFpgxi2881BLO3aM7W1V8SfFKjYJveAVdC787nqo2bNhNllC6S npPXEcfgCEsasYqYY1TYrNnJ2OTxW3DMvY+OEi2ibVzEHaV02l6n01dNgX7dUYYW NWKKoyUx0xGZ+TS64Pjwxbcee3O4HRgEJzjZ05GjGUfcAWnPxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSyssc4Kuhzg5ATxRLwrQpvoJSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNGJk MTk2NS01NzU3LTQ3OWMtYjJhZi00NDk2N2I1ZTA1MzkvMTM4YTc1YzQtYzUxMi0z ZGEzLTlhODMtZDFjMmQyZTdhMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDRiZDE5NjUtNTc1Ny00NzljLWIy YWYtNDQ5NjdiNWUwNTM5LzA0YmQxOTY1LTU3NTctNDc5Yy1iMmFmLTQ0OTY3YjVl MDUzOS5jcmwwHwYDVR0jBBgwFoAUtXgtVXqgUargFWS7QBUIjTRU/5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNGJkMTk2NS01NzU3LTQ3OWMtYjJhZi00NDk2 N2I1ZTA1MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqjBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9u1KwbR839ntC1a8sG8EtYQuwRTMNQjqS3rUepJgAiU0gkQs2VrWug EcsJ+6XLIIvM/pDTUziIlbNEsmkhMYVON9WSJau2s8maCSQNFQo0tQ92bxAf8rna 8LQC88EnPRFoMkSu3GFAUsECgw4SaEtxr6JmAJlfg49PlCqnrZORokHisKTePYM+ wIFT0dezC2PnfVN6hIeeZDA80/0XXGT6DFIyeGG0MdUCHdy/t0wtB8KYPLnnzUCJ kg9Dcf8w5VrNAzbwy5GVMyH3NuggwO8IbX+lgKBkkyt2bppDXWIHPWog3b8/0b4S e8y6MHanj2qhcslKZ4f5i2uVSBLTKKg= -----END CERTIFICATE-----Generated at Sun Jun 14 05:46:47 2026 by rpki-client