$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa File: bb5fb053-0a17-3122-970c-cf4d60448f9d.roa (raw, json) Hash identifier: iBP6N6hRkh/AFHnKL5Mya2qbzW0vDfTRxqtVZR6atEs= Subject key identifier: B4:59:5D:E7:0C:6D:3B:78:68:74:5B:C8:AC:23:CE:E6:E9:C7:8A:DC Certificate issuer: /CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Certificate serial: 010D0C9F4328584DFBD5E44470BD72961E1ED340 Authority key identifier: 0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 23265 IP address blocks: 67.158.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:e4:44:70:bd:72:96:1e:1e:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=244ba907-84c2-4e48-ab52-b3d23f50194b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:ce:e2:b4:34:1e:b0:c3:cd:73:3c:4c:44: 99:69:1b:7c:bb:fc:45:63:b8:e4:ef:85:de:45:73: f0:70:e8:a1:27:b4:c1:dc:96:f7:38:e1:b8:51:e4: 97:6f:c0:63:b0:28:68:fe:33:cf:3e:ac:2d:79:c6: df:44:c6:12:9f:04:0b:e5:20:3b:7b:f5:f8:9d:b1: f8:98:96:3d:b0:3f:fe:12:d4:43:2b:f9:c2:9c:48: 25:61:30:09:04:12:2b:1f:21:b2:c6:3e:54:6c:ee: 93:05:b0:b0:25:63:10:28:9b:46:e9:35:b3:83:30: 7a:6b:26:19:76:68:14:2b:df:0d:8f:68:f9:60:a3: c1:58:85:09:88:bd:4d:a4:0b:f6:89:90:50:3e:14: bd:b6:58:b5:8e:a9:87:e9:7c:29:db:06:55:48:96: ea:13:ba:0f:dc:98:5b:7d:6c:8f:27:76:6d:25:02: f5:52:27:a2:c9:37:91:b1:a7:d2:7f:da:ef:44:a4: 26:78:bd:3b:5d:50:69:38:92:0b:3d:60:c1:ee:bf: 35:db:53:5e:72:89:86:52:da:f0:c0:f2:93:52:1e: 1b:59:3e:91:cc:22:c9:45:b8:2d:7b:d1:f0:b9:b9: bb:da:65:83:0a:24:fe:1d:f8:9e:8a:4d:81:88:54: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:59:5D:E7:0C:6D:3B:78:68:74:5B:C8:AC:23:CE:E6:E9:C7:8A:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl X509v3 Authority Key Identifier: keyid:0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer sbgp-ipAddrBlock: critical IPv4: 67.158.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:14:f3:e8:07:d8:bf:12:f6:ce:88:41:6e:b3:27:a7:a8:90: 46:05:b8:80:e0:3b:ca:d5:c4:69:87:fb:25:d3:69:8e:57:e6: df:c5:79:5a:ba:1d:8a:e1:ca:4f:ca:df:e0:4f:b9:1b:91:59: e6:bc:eb:c4:31:8f:83:d0:2f:af:d2:b6:5e:1f:05:ff:b4:15: cc:66:56:ea:9a:2e:3f:75:3d:d7:b0:de:13:7a:2d:c5:4f:f5: ec:05:0f:e8:7e:f3:27:34:3a:c0:a5:cc:83:c3:34:7f:ce:a0: e7:4e:7d:e5:26:80:27:07:c0:01:1f:4e:64:2f:f9:c4:88:8c: b3:08:0d:04:5b:87:f7:ca:68:c5:88:5f:4e:55:9e:e5:95:f7: 43:1d:f3:26:e5:84:d4:48:62:68:d8:97:12:41:df:1b:66:61: 9d:39:7d:12:d3:11:b1:1c:e9:00:1b:9b:25:6c:5e:e4:19:ee: f3:5c:54:62:ca:c0:39:e8:f8:d2:65:96:33:51:e8:4e:1f:3b: e1:b1:f6:2b:76:49:c9:7b:5b:f4:1a:63:52:cf:3f:23:d1:c4: dc:a0:5b:42:d7:0c:e7:f2:d6:60:44:f0:a5:0c:ea:fa:af:a9: 34:0c:11:3d:43:d9:8d:24:99:cb:41:09:0d:85:f0:e2:af:5c: af:ae:07:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371eREcL1ylh4e00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY1OWUzNWQtZmFmMi00Njg1LWIzMjItZTU0ZmJlM2E0 MWU5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk MjQ0YmE5MDctODRjMi00ZTQ4LWFiNTItYjNkMjNmNTAxOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1zO4rQ0HrDDzXM8TESZaRt8u/xFY7jk74Xe RXPwcOihJ7TB3Jb3OOG4UeSXb8BjsCho/jPPPqwtecbfRMYSnwQL5SA7e/X4nbH4 mJY9sD/+EtRDK/nCnEglYTAJBBIrHyGyxj5UbO6TBbCwJWMQKJtG6TWzgzB6ayYZ dmgUK98Nj2j5YKPBWIUJiL1NpAv2iZBQPhS9tli1jqmH6Xwp2wZVSJbqE7oP3Jhb fWyPJ3ZtJQL1UieiyTeRsafSf9rvRKQmeL07XVBpOJILPWDB7r8121NecomGUtrw wPKTUh4bWT6RzCLJRbgte9Hwubm72mWDCiT+Hfieik2BiFTM8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRZXecMbTt4aHRbyKwjzubpx4rcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5 ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRmYmUzYTQxZTkvYmI1ZmIwNTMtMGExNy0z MTIyLTk3MGMtY2Y0ZDYwNDQ4ZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY1OWUzNWQtZmFmMi00Njg1LWIz MjItZTU0ZmJlM2E0MWU5L2U2NTllMzVkLWZhZjItNDY4NS1iMzIyLWU1NGZiZTNh NDFlOS5jcmwwHwYDVR0jBBgwFoAUDiKaS+tez7Fmq6j15YghKTUSWvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRm YmUzYTQxZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ57gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwU8+gH2L8S9s6IQW6zJ6eokEYFuIDgO8rVxGmH+yXTaY5X5t/FeVq6 HYrhyk/K3+BPuRuRWea868Qxj4PQL6/Stl4fBf+0FcxmVuqaLj91Pdew3hN6LcVP 9ewFD+h+8yc0OsClzIPDNH/OoOdOfeUmgCcHwAEfTmQv+cSIjLMIDQRbh/fKaMWI X05VnuWV90Md8yblhNRIYmjYlxJB3xtmYZ05fRLTEbEc6QAbmyVsXuQZ7vNcVGLK wDno+NJlljNR6E4fO+Gx9it2Scl7W/QaY1LPPyPRxNygW0LXDOfy1mBE8KUM6vqv qTQMET1D2Y0kmctBCQ2F8OKvXK+uB+c= -----END CERTIFICATE-----Generated at Sat Jun 13 17:44:33 2026 by rpki-client