$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/31f547f0-5e98-3a6f-a158-ea22001e9fa7.roa File: 31f547f0-5e98-3a6f-a158-ea22001e9fa7.roa (raw, json) Hash identifier: nyOi5hpKwBGy04LA5/FA+fuk++9ElM3FzhUL04Vd/lg= Subject key identifier: 82:97:E3:F3:7E:C0:53:03:3B:2E:72:04:35:C4:25:08:77:4C:5E:61 Certificate issuer: /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Certificate serial: 010D0C9F4328584DEC7B24EE62879746528295FA Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/31f547f0-5e98-3a6f-a158-ea22001e9fa7.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 14523 IP address blocks: 199.188.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:24:ee:62:87:97:46:52:82:95:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=07974d1f-2e3e-4e0f-bb14-d216f742a6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c5:f2:d4:0e:02:5e:cf:74:09:36:cf:dd:7b: 39:d2:00:3e:72:f7:05:5c:c2:dd:6a:63:c2:89:28: 61:ad:97:ee:8c:ae:1c:93:5a:25:08:71:5c:0b:12: af:4c:d8:93:ff:b0:9e:31:35:fc:e2:19:cb:e5:9b: 7f:2e:ea:85:97:ea:3c:6a:37:ff:1a:46:d2:f7:00: 09:8a:6a:2c:d6:fc:48:06:85:ee:f3:73:f1:da:a8: de:cd:02:6d:fa:03:72:91:a9:2a:d6:14:fb:42:1f: fd:83:97:42:22:7a:95:5f:0c:f8:31:41:42:4a:4e: 92:6c:d0:5b:2d:b9:25:6e:49:20:63:8e:e6:38:62: 93:a3:d7:c3:f4:6e:6b:ea:12:f9:a3:c4:ff:f6:ae: 1b:3e:bf:41:63:f5:03:9d:f5:dd:cb:a1:21:13:e6: 06:a5:7c:c7:9c:c3:fc:ad:f9:54:84:e4:9d:b7:26: 35:0f:00:5c:89:c5:8e:45:0c:c5:29:3b:e5:29:70: 78:2b:49:6c:c4:a9:81:72:25:59:da:bd:74:dc:2c: 1a:35:29:e5:02:fd:bc:47:a5:67:c3:87:dc:10:67: 04:0d:51:d0:b3:80:1c:56:27:00:0f:b4:e3:e9:74: 9c:e5:0e:bd:5d:68:10:70:d4:6b:dc:15:c4:29:7e: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:97:E3:F3:7E:C0:53:03:3B:2E:72:04:35:C4:25:08:77:4C:5E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/31f547f0-5e98-3a6f-a158-ea22001e9fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl X509v3 Authority Key Identifier: keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer sbgp-ipAddrBlock: critical IPv4: 199.188.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:33:12:df:40:6a:6c:e1:d5:a6:c7:95:48:4d:fb:e6:34:94: 07:33:92:ba:58:f0:be:04:0a:7b:f3:63:c6:e8:66:b7:ea:68: a2:bd:a2:b2:37:32:d6:06:a5:73:4a:f5:94:a4:b3:79:3c:07: 0f:14:86:3c:df:55:3d:f3:39:03:04:e7:9d:81:1e:f9:2b:a0: cf:ed:02:7c:c0:4e:dd:2b:9f:87:41:66:cc:df:76:e8:4e:af: 5b:c8:2d:bb:ae:3a:a6:ef:21:e2:c6:b7:d9:e1:e8:33:03:4a: fb:7b:af:68:18:51:08:f3:d9:f8:8d:cf:09:32:93:92:d1:51: 12:00:f8:9d:5e:6f:f8:f5:97:14:dc:fd:46:0a:78:03:d4:fb: 94:38:09:3a:b5:81:fd:86:99:44:25:fd:8b:17:cf:e3:74:18: 1f:4e:41:e8:c9:89:eb:e6:60:b4:d7:ee:31:87:8e:6e:97:fb: 0b:04:96:c7:4a:d7:be:ab:3a:33:ba:bf:58:c0:d2:e8:44:fa: 74:53:f8:b1:d4:8c:cc:8c:b8:c2:38:05:93:2c:15:bb:06:77: 44:98:cb:52:67:98:36:6c:3a:d1:f4:9c:2f:0b:53:e0:ff:ae: f4:46:6b:f2:5b:55:ea:84:b0:41:39:83:e8:a0:0b:d1:da:3d: 6f:80:3c:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3seyTuYoeXRlKClfowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwYThhOWItMzY0NS00MzhhLWE2ZTYtZTAzODViZmZj ZmVmMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk MDc5NzRkMWYtMmUzZS00ZTBmLWJiMTQtZDIxNmY3NDJhNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMXy1A4CXs90CTbP3Xs50gA+cvcFXMLdamPC iShhrZfujK4ck1olCHFcCxKvTNiT/7CeMTX84hnL5Zt/LuqFl+o8ajf/GkbS9wAJ imos1vxIBoXu83Px2qjezQJt+gNykakq1hT7Qh/9g5dCInqVXwz4MUFCSk6SbNBb LbklbkkgY47mOGKTo9fD9G5r6hL5o8T/9q4bPr9BY/UDnfXdy6EhE+YGpXzHnMP8 rflUhOSdtyY1DwBcicWORQzFKTvlKXB4K0lsxKmBciVZ2r103CwaNSnlAv28R6Vn w4fcEGcEDVHQs4AcVicAD7Tj6XSc5Q69XWgQcNRr3BXEKX65GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKX4/N+wFMDOy5yBDXEJQh3TF5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjBh OGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4NWJmZmNmZWYvMzFmNTQ3ZjAtNWU5OC0z YTZmLWExNTgtZWEyMjAwMWU5ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2YwYThhOWItMzY0NS00MzhhLWE2 ZTYtZTAzODViZmZjZmVmL2NmMGE4YTliLTM2NDUtNDM4YS1hNmU2LWUwMzg1YmZm Y2ZlZi5jcmwwHwYDVR0jBBgwFoAUjCsazXsGgti+ixRdB44TtZA9XJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjBhOGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4 NWJmZmNmZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7wcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFczEt9Aamzh1abHlUhN++Y0lAczkrpY8L4ECnvzY8boZrfqaKK9orI3 MtYGpXNK9ZSks3k8Bw8UhjzfVT3zOQME552BHvkroM/tAnzATt0rn4dBZszfduhO r1vILbuuOqbvIeLGt9nh6DMDSvt7r2gYUQjz2fiNzwkyk5LRURIA+J1eb/j1lxTc /UYKeAPU+5Q4CTq1gf2GmUQl/YsXz+N0GB9OQejJievmYLTX7jGHjm6X+wsElsdK 176rOjO6v1jA0uhE+nRT+LHUjMyMuMI4BZMsFbsGd0SYy1JnmDZsOtH0nC8LU+D/ rvRGa/JbVeqEsEE5g+igC9HaPW+APCE= -----END CERTIFICATE-----Generated at Sat Jun 13 13:16:21 2026 by rpki-client