$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa File: a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa (raw, json) Hash identifier: qbWOIvVc+RLP3BvZVK4OPDMt5H5PB3tRcrd6bN350/I= Subject key identifier: 58:08:06:49:3E:CC:83:D5:8C:6E:3B:48:4A:39:FC:9F:55:FF:F7:9B Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584DE2B5E7F9BCEDD42CD5CDF040 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 13768 IP address blocks: 65.39.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:e7:f9:bc:ed:d4:2c:d5:cd:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=2536abc4-be9b-40a4-b7dc-1cd37bc9e697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:31:b0:55:9c:58:b6:f4:e7:5c:00:ca:2c: e1:77:e2:1c:f0:6f:e7:dd:5a:e5:62:ab:93:64:43: 50:8b:b4:49:e5:f1:13:b2:3b:8e:3d:34:9c:c8:90: 77:5f:3a:99:82:01:1a:c0:f9:9b:a0:57:e5:33:e1: 0f:99:b5:05:e9:02:bd:61:0f:3d:ae:f9:1d:5a:4d: b0:8b:73:04:a9:c6:b5:43:51:40:c1:9b:12:48:20: 8b:f9:d7:5f:e8:5f:b7:27:2d:d6:96:8a:41:85:95: 48:5c:00:96:10:06:32:ee:cf:76:11:08:9d:04:ea: a8:24:28:f9:d3:8b:44:3e:30:78:54:ca:7c:c5:a6: dd:03:e1:32:77:68:bb:71:fc:2a:d1:13:aa:00:26: 9b:88:37:9b:51:41:52:87:70:5e:71:af:e7:2e:c1: fd:a4:6a:17:e5:3f:8f:56:fd:35:88:04:bb:8e:1e: 40:91:72:80:7f:45:87:cf:49:0e:8e:e8:c1:bb:4e: 23:9f:72:57:7c:82:12:8a:20:71:a6:05:08:a3:a1: 9b:dc:0b:58:97:eb:9f:ef:78:34:b0:0d:1a:51:36: b2:cc:40:b2:60:9e:a9:e5:ad:64:1b:b8:d2:b2:8d: e4:56:03:0b:9b:83:b6:95:59:67:e3:79:7d:53:5d: 35:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:08:06:49:3E:CC:83:D5:8C:6E:3B:48:4A:39:FC:9F:55:FF:F7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:75:d2:f2:d2:a7:46:65:7e:ec:b5:17:7f:5e:e2:d1:43:b1: b7:9e:2f:4d:97:0f:98:f7:cf:4f:c3:b8:fd:94:f4:5c:d5:22: ea:b8:e1:dc:77:db:1c:50:55:ad:e0:77:7a:d8:f6:2c:e2:99: 6a:f7:9d:30:bb:69:9b:12:84:ac:43:8d:e6:2f:9b:b3:1c:c4: c6:41:77:0d:9e:ca:cf:d3:a2:ab:59:96:0a:d1:5b:66:a2:20: 4f:30:49:ca:a7:42:72:9a:f0:8b:21:4d:19:21:8a:0d:e7:40: 2c:5d:4d:5c:2f:fb:31:10:33:81:b6:03:fd:68:45:c7:d0:ec: b1:39:a9:02:df:ed:c8:35:17:c2:7d:20:51:df:cb:80:cd:25: 14:74:50:26:b6:14:a2:6d:a9:5f:82:0e:3a:68:d8:9d:9b:5d: 22:47:04:99:3f:dc:86:c2:f0:10:ea:3b:22:67:0c:68:b4:96: 41:e9:29:0c:de:64:d8:b5:78:f5:e3:fa:e7:05:db:44:7e:e6: 54:26:b2:58:6c:99:a3:f9:09:98:a8:64:dc:86:bd:75:19:d1: 1e:b4:59:96:44:5e:30:b0:ea:3d:b1:a2:71:4c:a7:ed:16:94: 8a:d2:98:2d:57:02:46:ed:08:bc:70:d8:94:47:73:69:cb:a2: 8b:17:32:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itef5vO3ULNXN8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MjUzNmFiYzQtYmU5Yi00MGE0LWI3ZGMtMWNkMzdiYzllNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJMxsFWcWLb051wAyizhd+Ic8G/n3VrlYquT ZENQi7RJ5fETsjuOPTScyJB3XzqZggEawPmboFflM+EPmbUF6QK9YQ89rvkdWk2w i3MEqca1Q1FAwZsSSCCL+ddf6F+3Jy3WlopBhZVIXACWEAYy7s92EQidBOqoJCj5 04tEPjB4VMp8xabdA+Eyd2i7cfwq0ROqACabiDebUUFSh3Beca/nLsH9pGoX5T+P Vv01iAS7jh5AkXKAf0WHz0kOjujBu04jn3JXfIISiiBxpgUIo6Gb3AtYl+uf73g0 sA0aUTayzECyYJ6p5a1kG7jSso3kVgMLm4O2lVln43l9U101SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgIBkk+zIPVjG47SEo5/J9V//ebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYTYxNzRkZDktYzg5YS0z NjdmLWEyYzUtOTZmOTM0NGU1MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQSeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh10vLSp0Zlfuy1F39e4tFDsbeeL02XD5j3z0/DuP2U9FzVIuq44dx3 2xxQVa3gd3rY9izimWr3nTC7aZsShKxDjeYvm7McxMZBdw2eys/ToqtZlgrRW2ai IE8wScqnQnKa8IshTRkhig3nQCxdTVwv+zEQM4G2A/1oRcfQ7LE5qQLf7cg1F8J9 IFHfy4DNJRR0UCa2FKJtqV+CDjpo2J2bXSJHBJk/3IbC8BDqOyJnDGi0lkHpKQze ZNi1ePXj+ucF20R+5lQmslhsmaP5CZioZNyGvXUZ0R60WZZEXjCw6j2xonFMp+0W lIrSmC1XAkbtCLxw2JRHc2nLoosXMvQ= -----END CERTIFICATE-----Generated at Sat Jun 13 13:35:19 2026 by rpki-client