$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa File: 3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa (raw, json) Hash identifier: vg8HaylnY82Ka0kvMgUxvKakL3OSDjUUua7N7I43lBA= Subject key identifier: DA:20:05:B8:15:AC:82:32:C6:F9:C7:64:95:98:04:58:DD:D9:C1:F6 Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F4328584E1FA9A4E03561F9ED6FC183FD Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 395077 IP address blocks: 199.34.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:a4:e0:35:61:f9:ed:6f:c1:83:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=11b1e3a7-fddc-4d30-8e69-0887abf153c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:de:7a:1c:b2:6c:4c:2f:97:24:61:c5:57:13: 37:f2:6b:af:c2:f7:b6:fb:6f:b1:c2:a5:80:06:45: 17:35:e8:db:97:78:88:1d:a9:08:39:da:6b:0c:a2: 32:f6:d1:1a:81:5d:52:7d:ed:18:ca:64:34:a4:18: 11:dd:59:3b:30:01:ac:88:80:84:d6:20:f5:3b:9f: 20:a5:8c:8a:69:85:9e:27:83:f8:87:c7:08:58:8f: dc:17:9c:aa:79:d1:02:37:df:a0:4a:a7:5b:5b:80: 2b:98:d4:65:18:da:fd:76:6e:9a:63:ef:40:7e:68: 33:78:ae:bd:e9:dc:25:67:e0:dc:ed:d6:ea:70:09: 0f:1b:b3:f4:62:30:0c:62:f6:d1:38:06:b7:d7:24: 09:e9:fb:37:a6:00:12:31:f3:3c:97:30:6f:05:47: 64:61:96:bc:01:8e:53:72:6f:ba:31:1f:be:f2:3a: fa:17:ed:a8:4c:77:e7:4c:5a:cc:9f:a5:a5:1d:15: de:ec:e2:3c:11:23:9d:0c:98:99:c2:65:cb:d0:3d: f7:6c:72:c7:06:b3:b3:84:b5:ab:d1:b3:67:11:98: f7:73:39:6a:5c:d7:04:14:da:06:88:03:69:eb:e8: 87:eb:ba:cd:3d:58:37:55:e9:77:aa:9b:47:d2:3c: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:20:05:B8:15:AC:82:32:C6:F9:C7:64:95:98:04:58:DD:D9:C1:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: 199.34.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:06:47:21:6c:37:8d:a5:e6:03:06:82:7b:a0:cb:10:0b:ab: 40:cd:7f:ec:42:d5:82:13:e4:f7:ff:4b:c6:be:f1:8c:86:4f: bf:57:47:8d:98:44:0e:c9:6f:9f:bd:1c:6a:4f:f1:c8:81:15: c6:26:e7:40:af:40:18:9e:06:4d:ef:85:a0:25:1c:62:a7:76: bd:bc:bd:85:2a:93:ef:28:24:ea:fe:f5:ac:fa:7f:b9:a9:dd: 3c:64:39:53:5d:6a:1e:cd:5f:db:4f:12:96:59:b0:d2:72:32: a6:4d:6d:1d:99:6b:6d:2d:d4:ba:ff:bd:ae:b1:50:4b:36:c0: 53:6d:c8:ef:dc:4e:ec:7c:e9:d3:db:74:4d:d0:8c:41:ba:51: c2:70:c6:dd:b3:04:6c:90:cc:e2:4e:e3:a2:2d:3b:63:53:40: 99:a5:e6:89:af:8c:80:af:f4:d8:d3:23:dc:b2:8e:27:15:fe: a7:d5:0a:04:0b:81:6a:1d:97:ac:13:b7:6d:e3:19:c5:31:3c: 56:d1:c9:4f:b8:46:49:a2:53:b8:99:d8:8b:65:21:a5:04:ae: 7b:2b:b1:dd:3d:4a:48:a8:09:9e:21:87:36:be:9e:04:af:6e: 5c:77:15:91:c4:b5:86:8b:a3:17:95:89:23:28:1a:70:aa:70: 80:ad:9c:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqaTgNWH57W/Bg/0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk MTFiMWUzYTctZmRkYy00ZDMwLThlNjktMDg4N2FiZjE1M2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd56HLJsTC+XJGHFVxM38muvwve2+2+xwqWA BkUXNejbl3iIHakIOdprDKIy9tEagV1Sfe0YymQ0pBgR3Vk7MAGsiICE1iD1O58g pYyKaYWeJ4P4h8cIWI/cF5yqedECN9+gSqdbW4ArmNRlGNr9dm6aY+9AfmgzeK69 6dwlZ+Dc7dbqcAkPG7P0YjAMYvbROAa31yQJ6fs3pgASMfM8lzBvBUdkYZa8AY5T cm+6MR++8jr6F+2oTHfnTFrMn6WlHRXe7OI8ESOdDJiZwmXL0D33bHLHBrOzhLWr 0bNnEZj3czlqXNcEFNoGiANp6+iH67rNPVg3Vel3qptH0jz+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNogBbgVrIIyxvnHZJWYBFjd2cH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvM2VmYTY5YjktMzk4YS0z N2QwLThlNGEtYzhjODFhOWU1NjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwGRyFsN42l5gMGgnugyxALq0DNf+xC1YIT5Pf/S8a+8YyGT79XR42Y RA7Jb5+9HGpP8ciBFcYm50CvQBieBk3vhaAlHGKndr28vYUqk+8oJOr+9az6f7mp 3TxkOVNdah7NX9tPEpZZsNJyMqZNbR2Za20t1Lr/va6xUEs2wFNtyO/cTux86dPb dE3QjEG6UcJwxt2zBGyQzOJO46ItO2NTQJml5omvjICv9NjTI9yyjicV/qfVCgQL gWodl6wTt23jGcUxPFbRyU+4RkmiU7iZ2ItlIaUErnsrsd09SkioCZ4hhza+ngSv blx3FZHEtYaLoxeViSMoGnCqcICtnH0= -----END CERTIFICATE-----Generated at Sun Jun 14 00:21:10 2026 by rpki-client