$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85851a65-b763-3dd8-b61e-a616327d8536.roa File: 85851a65-b763-3dd8-b61e-a616327d8536.roa (raw, json) Hash identifier: 4v2zOJoapBqYU4zNXBDYZsYKXK+DAjqtP8jRy1bjgpA= Subject key identifier: 4C:71:A8:F7:25:BA:BD:9C:69:20:2F:34:1E:6A:33:03:49:91:A9:1E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE85F305D6C27081BB973F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85851a65-b763-3dd8-b61e-a616327d8536.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 22909 IP address blocks: 107.3.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:85:f3:05:d6:c2:70:81:bb:97:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=5f2b4cf3-712d-4510-9fd1-1c71c7b34f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:0a:1b:67:83:68:f9:47:65:54:2a:af:55: 05:d2:20:df:31:24:4d:17:fa:13:0d:51:33:fa:98: ec:06:fa:24:f2:18:bd:3e:06:dd:ec:ac:13:76:63: 84:1b:12:10:89:06:eb:19:45:4f:95:84:57:16:e4: 1e:a1:79:3a:73:1e:2d:bc:62:54:92:89:f5:24:69: 2e:64:17:b0:fe:c8:fb:b1:65:c3:61:20:df:c8:c0: 47:ed:c6:72:17:0e:93:42:cc:6f:3e:e1:8a:bf:dc: fa:06:5c:a6:a1:59:05:2f:c6:61:64:3c:d9:16:32: 80:10:28:9c:98:77:45:c1:2f:03:1c:14:1f:34:b2: 65:6b:53:c8:b9:43:87:4a:f4:ac:b1:58:01:9a:63: 8b:a9:9c:b3:de:e5:3e:ca:80:9b:6f:13:ed:e0:02: 32:e0:d8:d1:95:3d:78:e6:0b:5f:6a:97:24:eb:16: fe:8b:b1:6d:5a:b3:0c:d5:e9:1f:dc:17:e6:59:33: 3d:c3:21:71:0b:04:97:f6:df:94:8c:fc:c5:64:66: f6:2a:9b:af:a7:c5:01:fb:8d:c8:6b:a7:dc:ab:9a: 72:1c:61:f8:59:1c:b6:4c:21:5e:d4:31:56:2e:6e: d5:34:8b:8b:de:7e:b0:d9:ef:ee:3b:84:ca:c0:e2: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:71:A8:F7:25:BA:BD:9C:69:20:2F:34:1E:6A:33:03:49:91:A9:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85851a65-b763-3dd8-b61e-a616327d8536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.3.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:6e:fa:67:89:9d:12:15:de:4d:e6:05:f5:e6:8b:29:c8:d9: ee:b0:2d:bd:e6:1d:90:d0:67:b7:36:c5:a2:66:5b:29:fc:b9: d9:61:94:72:2f:cc:b8:99:e9:d6:31:33:78:3c:c7:6e:ba:21: 83:75:11:1c:7a:49:30:01:51:16:5f:cf:7f:88:06:36:fb:1f: 82:07:0d:17:de:5e:2f:8e:db:48:41:0d:64:9b:b0:c2:fd:94: ee:d1:76:ec:18:89:f7:16:41:9e:b7:61:96:f1:69:cc:ad:e3: 78:52:33:a3:fb:b3:15:a0:63:05:0a:52:ed:56:00:d1:53:4c: 8a:4f:0c:52:a1:ea:94:0a:4b:18:5f:e1:30:f2:1b:ec:4c:73: fa:7c:fc:d9:ca:2b:29:52:90:b7:1e:89:45:00:bd:fc:26:06: a6:56:86:09:07:f9:ce:d9:f4:85:3a:7b:31:da:8f:ac:97:34: a7:1a:07:19:70:f8:93:49:8f:86:ea:cd:c7:87:ad:76:4c:7d: d8:ef:6a:d3:0b:46:aa:af:40:d4:42:00:7e:a3:04:93:32:97: 41:6d:ec:75:2d:8b:2f:d8:b3:7a:aa:b7:a7:32:ea:4e:ec:bd: 6b:03:c6:ac:b7:99:d4:56:18:a0:a6:5d:10:34:78:65:7a:a1: da:22:87:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehfMF1sJwgbuXPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk NWYyYjRjZjMtNzEyZC00NTEwLTlmZDEtMWM3MWM3YjM0ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQoKG2eDaPlHZVQqr1UF0iDfMSRNF/oTDVEz +pjsBvok8hi9Pgbd7KwTdmOEGxIQiQbrGUVPlYRXFuQeoXk6cx4tvGJUkon1JGku ZBew/sj7sWXDYSDfyMBH7cZyFw6TQsxvPuGKv9z6BlymoVkFL8ZhZDzZFjKAECic mHdFwS8DHBQfNLJla1PIuUOHSvSssVgBmmOLqZyz3uU+yoCbbxPt4AIy4NjRlT14 5gtfapck6xb+i7FtWrMM1ekf3BfmWTM9wyFxCwSX9t+UjPzFZGb2Kpuvp8UB+43I a6fcq5pyHGH4WRy2TCFe1DFWLm7VNIuL3n6w2e/uO4TKwOLj+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExxqPclur2caSAvNB5qMwNJkakeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU4NTFhNjUtYjc2My0z ZGQ4LWI2MWUtYTYxNjMyN2Q4NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1u+meJnRIV3k3mBfXmiynI2e6wLb3mHZDQZ7c2xaJmWyn8udlhlHIv zLiZ6dYxM3g8x266IYN1ERx6STABURZfz3+IBjb7H4IHDRfeXi+O20hBDWSbsML9 lO7RduwYifcWQZ63YZbxacyt43hSM6P7sxWgYwUKUu1WANFTTIpPDFKh6pQKSxhf 4TDyG+xMc/p8/NnKKylSkLceiUUAvfwmBqZWhgkH+c7Z9IU6ezHaj6yXNKcaBxlw +JNJj4bqzceHrXZMfdjvatMLRqqvQNRCAH6jBJMyl0Ft7HUtiy/Ys3qqt6cy6k7s vWsDxqy3mdRWGKCmXRA0eGV6odoih4M= -----END CERTIFICATE-----Generated at Sat Jun 13 21:40:25 2026 by rpki-client