$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be7f70ff-db45-3a57-8564-03fce405750e.roa File: be7f70ff-db45-3a57-8564-03fce405750e.roa (raw, json) Hash identifier: RU9WtzFNqvR0V4giG21W3myJcFwfTmfUJlN2bYDDBG0= Subject key identifier: A3:FD:39:69:1D:19:E1:AA:02:5F:3F:B2:2E:1D:43:F4:FD:2C:25:77 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B2E74A9D5915A26C607E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be7f70ff-db45-3a57-8564-03fce405750e.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 150.195.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:2e:74:a9:d5:91:5a:26:c6:07:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d8633117-9a97-4621-965d-4a7fb8947b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:41:6e:52:b8:7c:a5:40:3a:38:30:b3:9e: 71:88:9e:57:d5:29:97:15:91:17:de:c6:7d:5f:8b: 4c:cb:1b:30:bf:30:ce:3c:a4:3d:39:76:9d:c8:29: ad:2d:ba:53:70:10:16:47:0a:bd:23:7e:9a:ce:55: b9:36:bd:76:ab:9f:1c:c8:da:73:17:fe:ce:cb:78: a3:7f:59:69:7a:cb:2f:a4:31:a9:54:7d:fa:6c:91: 38:e4:d5:f6:53:d2:47:31:90:ab:24:ec:27:6f:de: ec:10:8b:61:71:ca:4b:4d:74:ec:96:ad:d1:22:5c: 62:56:be:6f:d6:76:88:e9:df:94:6e:db:0b:da:14: 05:bb:de:69:41:69:71:0e:2e:d0:18:30:a5:b6:67: 90:58:4b:43:36:8d:e8:18:d1:96:d5:04:88:a5:d4: 40:10:19:3f:16:1b:00:e6:98:7e:ea:ef:1e:a0:03: d5:66:c2:69:63:e8:9a:f3:33:a4:7a:f5:62:c2:a6: 03:35:37:06:f1:ff:1b:4a:fb:4b:f9:d0:c5:dd:e8: a7:c5:e8:47:d8:03:3f:1e:a9:06:b9:05:e6:40:8f: d9:26:ea:d0:4c:67:4c:92:f4:49:7a:db:eb:75:15: 48:17:7b:65:19:cb:b6:db:2f:1b:5b:26:44:48:14: 92:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FD:39:69:1D:19:E1:AA:02:5F:3F:B2:2E:1D:43:F4:FD:2C:25:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be7f70ff-db45-3a57-8564-03fce405750e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:da:a1:53:4f:db:6f:35:7d:2d:bf:48:07:ef:0d:6e:32:1a: f0:59:cb:6b:a7:1c:8f:fa:c6:bc:b2:39:9e:b2:ab:f6:40:81: 94:38:8b:9f:3a:c3:3c:73:74:27:b6:93:73:ae:af:6c:8e:ce: 5d:ac:3b:95:44:ec:89:03:5d:94:2e:b6:99:7d:d8:65:c8:3a: 0b:52:36:14:25:49:8e:21:80:35:ee:25:8d:38:21:ef:9a:2e: 80:0b:32:77:8e:f7:39:18:27:46:ac:9a:95:15:53:d3:75:94: 12:fa:6e:17:0d:39:55:a9:4f:6f:d8:5a:25:84:a9:fb:28:ed: fa:4a:f1:df:7d:d5:c3:b1:aa:bf:b8:fb:13:e0:9e:e7:43:6a: f2:55:2a:0f:25:80:01:32:17:9f:de:a1:b5:77:8f:23:75:da: aa:ee:f6:9a:2d:b6:d4:e6:29:33:e0:71:90:60:ad:72:b7:e6: 2a:6a:47:44:f9:4b:db:10:83:4b:db:32:2f:ce:f1:1e:d2:3b: 67:74:a0:25:f3:47:5e:a0:7d:60:7f:95:5e:31:35:62:5c:5f: ea:15:05:a0:1f:c0:a4:fe:72:4c:f5:a5:9b:6b:49:d4:1f:92: 85:be:e1:c3:03:0d:93:6b:57:d9:1c:5b:c1:ba:00:8e:0e:bd: a5:95:a6:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fmy50qdWRWibGB+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDg2MzMxMTctOWE5Ny00NjIxLTk2NWQtNGE3ZmI4OTQ3YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfJBblK4fKVAOjgws55xiJ5X1SmXFZEX3sZ9 X4tMyxswvzDOPKQ9OXadyCmtLbpTcBAWRwq9I36azlW5Nr12q58cyNpzF/7Oy3ij f1lpessvpDGpVH36bJE45NX2U9JHMZCrJOwnb97sEIthccpLTXTslq3RIlxiVr5v 1naI6d+UbtsL2hQFu95pQWlxDi7QGDCltmeQWEtDNo3oGNGW1QSIpdRAEBk/FhsA 5ph+6u8eoAPVZsJpY+ia8zOkevViwqYDNTcG8f8bSvtL+dDF3einxehH2AM/HqkG uQXmQI/ZJurQTGdMkvRJetvrdRVIF3tlGcu22y8bWyZESBSSUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP9OWkdGeGqAl8/si4dQ/T9LCV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmU3ZjcwZmYtZGI0NS0z YTU3LTg1NjQtMDNmY2U0MDU3NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsNCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABraoVNP2281fS2/SAfvDW4yGvBZy2unHI/6xryyOZ6yq/ZAgZQ4i586 wzxzdCe2k3Our2yOzl2sO5VE7IkDXZQutpl92GXIOgtSNhQlSY4hgDXuJY04Ie+a LoALMneO9zkYJ0asmpUVU9N1lBL6bhcNOVWpT2/YWiWEqfso7fpK8d991cOxqr+4 +xPgnudDavJVKg8lgAEyF5/eobV3jyN12qru9potttTmKTPgcZBgrXK35ipqR0T5 S9sQg0vbMi/O8R7SO2d0oCXzR16gfWB/lV4xNWJcX+oVBaAfwKT+ckz1pZtrSdQf koW+4cMDDZNrV9kcW8G6AI4OvaWVplY= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:21 2026 by rpki-client