$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/bf27e851-a778-308c-b44c-dc1bb3990a3a.roa File: bf27e851-a778-308c-b44c-dc1bb3990a3a.roa (raw, json) Hash identifier: lxx5NFVZTSKq0RKM1HJEFt4zEWUh/c/+RVSKg/6Frwc= Subject key identifier: A0:38:0F:38:A3:19:34:4C:D1:99:42:93:CE:9F:BB:07:99:C2:3C:A0 Certificate issuer: /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Certificate serial: 010D0C9F4328584E104F3311A27BFEA11241F780 Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/bf27e851-a778-308c-b44c-dc1bb3990a3a.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 393806 IP address blocks: 198.184.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:33:11:a2:7b:fe:a1:12:41:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=26cdfb54-e13d-47d7-a43e-fd80016ecf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:ff:cc:c1:3a:bd:20:44:4c:32:25:38:05: 83:a0:61:bf:ef:98:c2:62:19:d0:2e:d7:63:c2:4f: da:0c:28:07:1e:21:51:31:11:08:1d:d1:1b:16:d7: d3:e8:7e:79:bb:5a:0d:e9:a5:c5:c8:83:18:ad:40: 96:b0:a6:0b:18:da:9d:0b:80:63:8b:e3:05:35:2c: b3:7d:7b:ac:4c:3f:8b:e6:b6:c5:10:10:cc:d2:90: b2:6f:33:17:4a:50:50:6b:d3:68:28:fb:98:bd:9a: f5:74:78:89:db:c9:dc:0e:59:9d:ea:21:19:18:ed: 30:50:71:ae:0d:3d:18:07:48:20:7b:71:c0:5d:69: 75:34:67:85:73:d5:20:8e:a4:07:3d:40:9c:1d:c5: 8d:c0:c4:9b:81:e8:5e:9d:fa:69:06:12:19:ea:06: dd:41:de:60:be:17:92:3f:39:40:ed:eb:cc:0a:8b: 00:aa:39:79:5b:2d:41:3a:88:aa:58:27:72:65:71: 5d:57:2f:ff:b4:3f:f6:16:4b:40:27:e3:6e:c6:84: be:c7:88:64:bf:11:14:54:8e:e4:1a:b7:5e:3c:41: 71:f0:a3:42:2d:df:9e:e4:13:82:5f:b1:ec:d0:7c: c7:e5:be:64:6c:66:99:a1:ad:d1:de:d4:c2:9c:04: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:38:0F:38:A3:19:34:4C:D1:99:42:93:CE:9F:BB:07:99:C2:3C:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/bf27e851-a778-308c-b44c-dc1bb3990a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl X509v3 Authority Key Identifier: keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer sbgp-ipAddrBlock: critical IPv4: 198.184.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:be:c7:5e:d6:ef:eb:22:f4:ed:f8:f4:47:63:8a:f3:a2:9a: 0a:ab:f9:60:3a:24:d4:97:d6:17:18:07:86:ec:f0:ff:c3:74: b4:93:ea:96:36:b8:8c:c8:0b:57:b1:b1:77:cd:a3:83:56:ba: 8f:24:de:14:d4:fa:81:4a:b8:1e:19:16:b2:cd:86:d1:c9:a2: c8:97:5a:45:46:fb:51:96:83:f8:0f:fa:89:85:97:e8:03:e1: 0c:4f:28:1f:6a:fd:0f:4a:92:ff:e6:17:9a:21:65:d9:1d:f8: 12:04:ff:d3:54:c4:13:32:a0:3b:f5:2d:66:03:d3:8c:3a:ac: 81:65:82:0a:4f:28:ee:10:c5:c6:0b:6b:16:af:23:27:89:56: f2:ea:78:1b:10:7a:09:40:d6:f0:21:0d:10:70:f2:e3:64:5f: 9f:40:48:b9:be:0b:f9:69:e6:a2:a7:69:d0:e1:be:50:53:52: bb:20:1b:df:0c:53:15:e4:fb:42:84:50:72:19:05:91:43:b1: ea:b0:2d:27:be:9d:31:78:96:5a:05:28:b8:0c:e0:b7:02:36: 85:a7:5b:59:75:24:d4:d6:d1:22:42:dc:57:69:06:f3:c2:9a: ad:5e:0e:c8:2a:b3:fa:9e:91:41:1d:62:6a:97:dc:10:95:f4: a9:6d:14:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTzMRonv+oRJB94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ3ZjgyN2ItZjU5Yy00MGY0LTgzYTUtY2QwYzRiMTZm NDJlMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MjZjZGZiNTQtZTEzZC00N2Q3LWE0M2UtZmQ4MDAxNmVjZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2T/zME6vSBETDIlOAWDoGG/75jCYhnQLtdj wk/aDCgHHiFRMREIHdEbFtfT6H55u1oN6aXFyIMYrUCWsKYLGNqdC4Bji+MFNSyz fXusTD+L5rbFEBDM0pCybzMXSlBQa9NoKPuYvZr1dHiJ28ncDlmd6iEZGO0wUHGu DT0YB0gge3HAXWl1NGeFc9UgjqQHPUCcHcWNwMSbgehenfppBhIZ6gbdQd5gvheS PzlA7evMCosAqjl5Wy1BOoiqWCdyZXFdVy//tD/2FktAJ+NuxoS+x4hkvxEUVI7k GrdePEFx8KNCLd+e5BOCX7Hs0HzH5b5kbGaZoa3R3tTCnATriwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA4DzijGTRM0ZlCk86fuweZwjygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDdm ODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIxNmY0MmUvYmYyN2U4NTEtYTc3OC0z MDhjLWI0NGMtZGMxYmIzOTkwYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ3ZjgyN2ItZjU5Yy00MGY0LTgz YTUtY2QwYzRiMTZmNDJlLzVkN2Y4MjdiLWY1OWMtNDBmNC04M2E1LWNkMGM0YjE2 ZjQyZS5jcmwwHwYDVR0jBBgwFoAU0/Xs4F4i2c/WNIKI/DiJX+ZXwhcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBj NGIxNmY0MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxriDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy+x17W7+si9O349EdjivOimgqr+WA6JNSX1hcYB4bs8P/DdLST6pY2 uIzIC1exsXfNo4NWuo8k3hTU+oFKuB4ZFrLNhtHJosiXWkVG+1GWg/gP+omFl+gD 4QxPKB9q/Q9Kkv/mF5ohZdkd+BIE/9NUxBMyoDv1LWYD04w6rIFlggpPKO4QxcYL axavIyeJVvLqeBsQeglA1vAhDRBw8uNkX59ASLm+C/lp5qKnadDhvlBTUrsgG98M UxXk+0KEUHIZBZFDseqwLSe+nTF4lloFKLgM4LcCNoWnW1l1JNTW0SJC3FdpBvPC mq1eDsgqs/qekUEdYmqX3BCV9KltFB8= -----END CERTIFICATE-----Generated at Sat Jun 13 15:28:34 2026 by rpki-client