$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa File: 8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa (raw, json) Hash identifier: x1rQ0QPuC5OxmVPrUuOixTL24zBtSknxvRmwEN18BdI= Subject key identifier: C1:35:AC:A8:4A:24:70:8B:9D:C7:02:55:6B:15:1F:AC:71:F1:F2:DA Certificate issuer: /CN=5dc12714-5247-41c5-b244-d0edceb32982 Certificate serial: 010D0C9F4328584E0865E8DEAA6E7276C0750280 Authority key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 22856 IP address blocks: 209.237.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:e8:de:aa:6e:72:76:c0:75:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc12714-5247-41c5-b244-d0edceb32982 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=04763648-5f9b-46c3-b357-e24476a4a2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:33:b1:c5:31:f7:c9:d9:8f:d8:56:c7:3d: b8:c6:7c:e2:df:14:2f:08:63:55:ed:65:81:36:0f: bd:1e:19:a5:b1:a1:b7:53:17:6c:7d:10:c5:87:8d: fd:e4:96:86:7a:b6:e4:8f:7c:5e:7c:e8:59:e5:5e: 78:07:22:4f:14:2e:5d:bf:b4:68:a5:30:0b:53:83: 1e:17:fc:4f:92:c3:9a:af:38:b1:37:65:cc:ee:28: 9e:41:86:cd:08:9b:76:23:41:16:2a:c0:e2:48:c5: d8:6f:d6:62:1e:95:55:7c:1b:ae:45:43:5f:5b:bd: 0b:d5:91:a0:b8:b2:e6:97:df:e7:2e:b9:c7:2a:8f: 9f:2e:5d:37:0b:a7:7e:4e:86:b9:27:3e:ca:03:da: e5:b7:29:19:d7:2d:7f:f2:c0:3a:22:b7:f2:4a:59: c5:24:66:f5:68:b1:eb:7d:8e:3b:cb:26:7b:01:01: fb:05:aa:0e:1f:8e:28:88:30:4b:a8:a6:ba:2e:27: c1:42:33:f4:10:9e:1a:d7:2d:f3:4b:40:52:7e:a6: 69:04:99:c5:f5:9f:15:0f:13:84:9a:ae:a0:d7:16: fe:ab:54:92:98:ea:47:9e:c4:4f:f5:1c:74:bf:5e: 00:a2:9f:64:48:60:8d:a4:c6:a3:81:43:c1:b8:44: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:35:AC:A8:4A:24:70:8B:9D:C7:02:55:6B:15:1F:AC:71:F1:F2:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl X509v3 Authority Key Identifier: keyid:1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer sbgp-ipAddrBlock: critical IPv4: 209.237.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:4b:2c:c1:fc:fe:af:94:56:de:1a:a6:6a:65:da:e7:36:79: 5c:84:42:e6:4f:8f:11:2d:0c:9f:3b:25:6d:44:e2:a4:62:db: af:03:fd:cc:0c:cc:66:d8:a3:9d:75:f2:35:3c:7b:1f:86:cd: a4:23:ec:3d:60:a0:80:c2:87:f7:4e:12:be:55:8e:df:b9:7c: 97:9c:c4:68:8b:53:7a:87:f4:f1:bd:46:b0:23:5d:ad:86:96: 86:72:50:c4:e0:75:86:89:6a:1b:7f:27:dd:36:14:ea:24:2f: 34:c0:84:03:a6:31:67:ba:b7:57:68:05:b0:4f:35:e8:1a:c1: 8b:a5:8d:c5:b9:4a:bc:46:dd:36:95:72:11:f0:51:a1:24:71: 3d:4c:38:bd:13:90:88:c8:71:ea:8d:21:a5:d2:90:0b:1f:46: 99:b5:5c:87:fc:f7:06:f4:19:5b:f1:01:62:7d:ba:34:12:a3: 7d:e3:e3:fb:4e:81:2f:5b:b2:3b:43:5d:1e:41:9a:e4:ec:fd: 2e:c1:8e:c7:0f:6c:15:60:be:aa:07:55:cc:dd:2f:b7:88:ec: 71:73:19:51:2d:30:3c:02:da:c1:c4:e3:01:79:a0:cd:85:54: 99:0f:e0:f9:fe:c1:e6:86:69:4d:35:37:fb:cf:51:ab:0e:d4: eb:3d:a1:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZejeqm5ydsB1AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjMTI3MTQtNTI0Ny00MWM1LWIyNDQtZDBlZGNlYjMy OTgyMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MDQ3NjM2NDgtNWY5Yi00NmMzLWIzNTctZTI0NDc2YTRhMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5EzscUx98nZj9hWxz24xnzi3xQvCGNV7WWB Ng+9HhmlsaG3UxdsfRDFh4395JaGerbkj3xefOhZ5V54ByJPFC5dv7RopTALU4Me F/xPksOarzixN2XM7iieQYbNCJt2I0EWKsDiSMXYb9ZiHpVVfBuuRUNfW70L1ZGg uLLml9/nLrnHKo+fLl03C6d+Toa5Jz7KA9rltykZ1y1/8sA6IrfySlnFJGb1aLHr fY47yyZ7AQH7BaoOH44oiDBLqKa6LifBQjP0EJ4a1y3zS0BSfqZpBJnF9Z8VDxOE mq6g1xb+q1SSmOpHnsRP9Rx0v14Aop9kSGCNpMajgUPBuER0IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME1rKhKJHCLnccCVWsVH6xx8fLaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZGMx MjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2ViMzI5ODIvOGU1YTA1YTItMGIwYS0z NGJiLTkyZTctOTZkMzhlMWY0MWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWRjMTI3MTQtNTI0Ny00MWM1LWIy NDQtZDBlZGNlYjMyOTgyLzVkYzEyNzE0LTUyNDctNDFjNS1iMjQ0LWQwZWRjZWIz Mjk4Mi5jcmwwHwYDVR0jBBgwFoAUHfJlXfqmlOL4XwL9Qx2u11OXGlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVk Y2ViMzI5ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNLLMH8/q+UVt4apmpl2uc2eVyEQuZPjxEtDJ87JW1E4qRi268D/cwM zGbYo5118jU8ex+GzaQj7D1goIDCh/dOEr5Vjt+5fJecxGiLU3qH9PG9RrAjXa2G loZyUMTgdYaJaht/J902FOokLzTAhAOmMWe6t1doBbBPNegawYuljcW5SrxG3TaV chHwUaEkcT1MOL0TkIjIceqNIaXSkAsfRpm1XIf89wb0GVvxAWJ9ujQSo33j4/tO gS9bsjtDXR5BmuTs/S7BjscPbBVgvqoHVczdL7eI7HFzGVEtMDwC2sHE4wF5oM2F VJkP4Pn+weaGaU01N/vPUasO1Os9oXI= -----END CERTIFICATE-----Generated at Sat Jun 13 13:21:25 2026 by rpki-client