$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa File: b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa (raw, json) Hash identifier: F142qGvWr9x4Q8tvEEjV0Q4Pv5vERDJqB1/wQBzin84= Subject key identifier: BB:F4:51:E8:60:52:C6:FC:18:5C:49:65:D3:7E:5F:98:34:F1:84:C3 Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584E0E11D371A76F67E0F712F2C0 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa Signing time: Thu 04 Jun 2026 01:45:45 +0000 ROA not before: Thu 04 Jun 2026 01:45:45 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 32435 IP address blocks: 199.189.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0e:11:d3:71:a7:6f:67:e0:f7:12:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Jun 4 01:45:45 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=e769d9e6-b8be-45a9-82bd-ea1b4dff70a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b2:66:74:98:ff:a8:16:5a:08:0a:99:bc:1b: 4b:0b:ef:ee:f6:9a:10:21:58:f4:5c:ed:7a:e6:da: 3f:a4:64:02:e2:f3:84:a3:d8:9a:29:6d:cf:0c:d2: be:33:d0:6d:a7:f4:55:ed:c1:b3:f6:2d:23:f5:fa: 8a:c6:2c:a0:d8:32:1c:07:2f:30:fd:12:33:de:13: b5:28:50:9b:1f:71:9b:d0:1a:43:e2:c6:89:d2:ad: 34:c1:c8:fc:8e:e7:e4:48:ba:24:01:fe:e7:ec:12: 83:e8:f4:b5:2a:72:61:59:d5:99:4e:7f:4d:ff:9b: 18:27:e0:2d:e6:7a:02:2d:d6:dc:0f:7f:09:6d:25: 60:e6:33:d0:d7:63:2e:f0:d0:f1:d3:95:60:94:08: 7a:68:30:6d:61:40:30:73:12:ef:e2:7a:ea:4f:92: 9e:13:47:65:96:c2:dc:e2:38:d8:25:fa:09:13:a6: 7b:ef:54:7c:4c:88:4a:3c:45:17:71:21:bc:71:e6: e1:de:e9:8e:7d:0f:7c:97:d8:f1:36:bb:30:e8:2c: f8:75:22:5d:78:fc:54:96:08:8d:9d:20:b2:b1:3f: 99:ab:b5:33:dd:ec:57:ba:43:c8:21:df:fb:03:79: 5e:29:4d:5e:5a:54:ba:fc:cc:21:28:83:e4:6c:f1: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F4:51:E8:60:52:C6:FC:18:5C:49:65:D3:7E:5F:98:34:F1:84:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:77:2e:c8:a1:a0:5d:8c:9c:3a:ce:1b:8d:ad:13:cd:f4:24: b8:0b:6d:21:ee:23:dd:d3:43:a9:25:08:84:29:a6:73:fc:55: 2e:58:5f:2d:b2:40:7a:d2:35:aa:26:ee:08:b5:b3:46:df:4f: ea:20:bf:e3:8f:ba:e6:17:a5:06:6c:c7:9e:96:e0:84:01:14: 72:10:43:93:c3:79:82:00:95:60:37:78:a2:6d:03:17:f3:92: dd:6f:a0:59:9a:a9:e6:c4:e2:a5:18:01:6a:a3:59:ef:18:99: 32:6e:e9:ce:2d:5c:c1:39:7f:60:4b:ad:1b:0e:e7:2a:ec:23: d1:b1:5c:bc:ce:c6:7d:19:a7:77:e8:e2:cd:fa:36:3b:6b:1c: 25:51:9a:15:de:5b:d1:bd:2e:18:2a:12:c8:18:c0:c6:a7:ec: 41:ad:9c:4d:16:19:e7:b7:b7:8f:e1:6b:d5:e8:6e:c0:19:41: 0c:a6:dd:6c:ab:80:8e:4a:0b:f4:96:c6:29:17:65:21:6f:4d: 67:3c:20:aa:96:2a:13:64:28:dc:0c:47:80:69:ed:ce:28:d3: 88:76:70:49:81:9a:92:e7:7b:36:89:a1:0a:49:53:4b:95:cc: 58:9d:84:2f:16:e4:48:48:49:a6:68:79:55:fa:03:10:c5:ad: 2f:7f:26:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4OEdNxp29n4PcS8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI2MDYwNDAxNDU0NVoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZTc2OWQ5ZTYtYjhiZS00NWE5LTgyYmQtZWExYjRkZmY3MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLJmdJj/qBZaCAqZvBtLC+/u9poQIVj0XO16 5to/pGQC4vOEo9iaKW3PDNK+M9Btp/RV7cGz9i0j9fqKxiyg2DIcBy8w/RIz3hO1 KFCbH3Gb0BpD4saJ0q00wcj8jufkSLokAf7n7BKD6PS1KnJhWdWZTn9N/5sYJ+At 5noCLdbcD38JbSVg5jPQ12Mu8NDx05VglAh6aDBtYUAwcxLv4nrqT5KeE0dllsLc 4jjYJfoJE6Z771R8TIhKPEUXcSG8cebh3umOfQ98l9jxNrsw6Cz4dSJdePxUlgiN nSCysT+Zq7Uz3exXukPIId/7A3leKU1eWlS6/MwhKIPkbPF+KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLv0UehgUsb8GFxJZdN+X5g08YTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvYjdjZmM5NGUtMzg2OC0z YzZkLWFjMDktNWJjZDEyZjBjZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx73IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJN3LsihoF2MnDrOG42tE830JLgLbSHuI93TQ6klCIQppnP8VS5YXy2y QHrSNaom7gi1s0bfT+ogv+OPuuYXpQZsx56W4IQBFHIQQ5PDeYIAlWA3eKJtAxfz kt1voFmaqebE4qUYAWqjWe8YmTJu6c4tXME5f2BLrRsO5yrsI9GxXLzOxn0Zp3fo 4s36NjtrHCVRmhXeW9G9LhgqEsgYwMan7EGtnE0WGee3t4/ha9XobsAZQQym3Wyr gI5KC/SWxikXZSFvTWc8IKqWKhNkKNwMR4Bp7c4o04h2cEmBmpLnezaJoQpJU0uV zFidhC8W5EhISaZoeVX6AxDFrS9/Jic= -----END CERTIFICATE-----Generated at Sat Jun 13 15:49:15 2026 by rpki-client