$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa File: f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa (raw, json) Hash identifier: Smj7laKrVLV2qlpUWc2Bkz0ybxoz1ILJ/g6bMuCu1xc= Subject key identifier: 57:AD:B5:57:6F:D4:83:7B:83:0D:1B:A0:36:80:30:63:CD:EC:54:2F Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584E296F12D51EC70CAA7E2A3F00 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 55 IP address blocks: 130.91.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6f:12:d5:1e:c7:0c:aa:7e:2a:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=d0d872c9-e807-40e3-bf7c-b765754f4cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:55:f0:b5:b4:23:33:2e:dd:5a:66:95:77: 36:cd:ed:74:f2:55:52:97:f8:70:1b:11:fe:07:0e: b0:f4:72:32:f4:c9:cf:80:32:86:ae:35:38:16:f8: 51:75:b0:b4:a1:56:fe:81:31:7a:93:71:bc:33:f6: be:e0:ad:f3:6f:c8:96:2a:6d:d8:17:87:c6:d5:fa: 12:f5:9c:10:32:ad:6f:95:19:ea:34:ce:88:67:a9: a3:a2:d5:de:1e:6d:be:75:3e:56:77:f5:dd:1a:34: 1b:71:bd:5f:f2:3c:e1:a1:94:cc:a9:d7:3c:1c:17: ce:e3:66:22:08:16:c2:2f:1c:64:2d:cf:5a:4a:77: b5:52:62:94:36:6a:1d:9c:93:54:d1:40:96:b1:db: 47:a7:1c:21:16:c8:11:22:54:2f:45:89:6a:97:e6: 81:d7:19:9c:3e:6e:12:c5:95:52:6b:7a:4d:86:ae: 80:42:03:53:0e:28:ce:a6:94:d5:cc:d8:f5:90:2a: 44:5b:17:37:c4:23:50:bb:79:36:5d:be:ef:34:26: a3:0c:f6:17:3a:fb:7c:32:38:55:e5:89:c3:80:77: 98:25:db:79:9c:f9:67:71:c4:73:09:e8:df:c5:17: 32:94:0d:5a:b6:a6:4b:a9:56:62:bb:a6:90:2a:ff: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AD:B5:57:6F:D4:83:7B:83:0D:1B:A0:36:80:30:63:CD:EC:54:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 130.91.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7b:57:08:78:86:44:31:f4:9a:ea:d7:df:ca:aa:3f:c9:e3: 30:f1:48:5a:c6:61:44:5f:a3:61:4e:95:7b:4e:61:b1:f5:c5: f2:b8:fc:24:e8:8b:6e:b0:34:dc:ff:7d:79:66:00:2a:a8:eb: b3:fd:99:15:da:16:47:87:74:36:c1:0a:c7:28:79:8f:d5:57: 7f:0a:6d:b0:62:eb:7b:8d:9c:62:cd:bf:28:c8:11:c8:d6:e0: 54:28:58:45:27:a6:a9:23:3f:bc:af:fd:a5:84:a5:dd:83:be: 24:dd:a4:08:07:1f:ae:94:17:e4:cc:27:63:33:5b:4d:7c:d3: 28:93:24:2c:a7:a2:df:15:93:2e:bb:9e:a6:8a:7a:74:93:67: 8d:5f:21:f6:51:a6:29:1f:77:6d:50:d8:a0:86:0b:0b:ad:41: 55:dc:f8:7a:a7:3f:8a:6e:d3:bf:ff:34:e8:f6:60:8a:22:e6: 4c:fc:e6:87:7f:de:8c:e2:e4:78:8f:12:6a:41:51:e4:3a:f4: 4b:52:86:5f:65:f5:9d:9a:b2:3f:ef:c7:db:ce:98:88:72:df: 71:b4:28:73:b1:2c:e4:58:f4:dc:ea:2c:78:5a:ef:9b:47:06: 6c:00:50:36:7d:04:bf:7b:20:a5:0e:dc:83:90:52:11:a2:0b: 5b:a6:6a:d0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4pbxLVHscMqn4qPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk ZDBkODcyYzktZTgwNy00MGUzLWJmN2MtYjc2NTc1NGY0Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGpV8LW0IzMu3VpmlXc2ze108lVSl/hwGxH+ Bw6w9HIy9MnPgDKGrjU4FvhRdbC0oVb+gTF6k3G8M/a+4K3zb8iWKm3YF4fG1foS 9ZwQMq1vlRnqNM6IZ6mjotXeHm2+dT5Wd/XdGjQbcb1f8jzhoZTMqdc8HBfO42Yi CBbCLxxkLc9aSne1UmKUNmodnJNU0UCWsdtHpxwhFsgRIlQvRYlql+aB1xmcPm4S xZVSa3pNhq6AQgNTDijOppTVzNj1kCpEWxc3xCNQu3k2Xb7vNCajDPYXOvt8MjhV 5YnDgHeYJdt5nPlnccRzCejfxRcylA1atqZLqVZiu6aQKv8C+wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFettVdv1IN7gw0boDaAMGPN7FQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvZjI5MGNjZTgtMzMzNi0z YWIzLWIxYzUtZTg0ODkwYzAyYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAglswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUntXCHiGRDH0murX38qqP8njMPFIWsZhRF+jYU6Ve05hsfXF8rj8JOiL brA03P99eWYAKqjrs/2ZFdoWR4d0NsEKxyh5j9VXfwptsGLre42cYs2/KMgRyNbg VChYRSemqSM/vK/9pYSl3YO+JN2kCAcfrpQX5MwnYzNbTXzTKJMkLKei3xWTLrue pop6dJNnjV8h9lGmKR93bVDYoIYLC61BVdz4eqc/im7Tv/806PZgiiLmTPzmh3/e jOLkeI8SakFR5Dr0S1KGX2X1nZqyP+/H286YiHLfcbQoc7Es5Fj03OoseFrvm0cG bABQNn0Ev3sgpQ7cg5BSEaILW6Zq0A== -----END CERTIFICATE-----Generated at Sat Jun 13 23:17:29 2026 by rpki-client