$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1200383a-e4a8-331f-b95c-374c500c479f.roa File: 1200383a-e4a8-331f-b95c-374c500c479f.roa (raw, json) Hash identifier: gQmlLZ9K4oZ7fLWTEgEDZn0pGeikWAd32vGfAdoZQGA= Subject key identifier: DA:A7:CD:89:AC:0F:DA:67:89:8F:58:B0:94:86:95:50:22:71:D7:DA Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E0751EFD19C93772DA4F9A3C0 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1200383a-e4a8-331f-b95c-374c500c479f.roa Signing time: Mon 01 Jun 2026 15:44:16 +0000 ROA not before: Mon 01 Jun 2026 15:44:16 +0000 ROA not after: Sun 30 Aug 2026 15:44:16 +0000 asID: 203113 IP address blocks: 198.29.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:51:ef:d1:9c:93:77:2d:a4:f9:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jun 1 15:44:16 2026 GMT Not After : Aug 30 15:44:16 2026 GMT Subject: CN=5aca2506-7677-4c2e-afee-54cdaf7e9a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:4f:65:f7:84:cd:80:db:94:f2:75:60:ad: 1f:cc:49:22:ec:c8:0d:f6:1f:8d:d0:78:ad:b9:01: 8e:b0:b8:57:62:27:47:8f:fb:5e:c7:9a:08:92:81: 96:7e:fa:58:a3:a4:17:f7:62:e1:21:0d:11:c7:dd: b9:6c:93:91:1a:65:73:a5:c5:8a:34:59:95:d4:7b: 8c:42:06:60:fa:8d:32:9f:97:6c:95:68:75:e4:cf: 62:f9:ba:df:12:cd:ac:e3:d0:32:77:90:19:f6:2c: f1:36:a2:0b:dd:7b:12:32:54:30:0a:06:06:0c:59: d9:a3:44:75:7a:82:5a:7f:00:e4:da:7d:55:62:1b: 16:56:28:d5:3a:88:61:12:40:51:92:63:e0:77:8d: 32:f6:be:87:86:e1:00:36:54:ce:78:3c:16:e7:56: f3:05:22:28:d5:a4:33:ee:ea:62:e4:c5:58:11:24: 30:2f:14:67:e9:1c:61:4e:86:f8:b4:ba:b6:fd:0b: a0:cf:57:af:64:5b:d4:07:14:01:4b:d5:dc:de:23: 54:83:65:ab:78:da:7b:2f:72:a0:b8:60:81:cf:4e: dc:59:cc:a3:71:5b:5b:88:7d:35:27:38:72:8d:8b: e0:22:e3:c1:f5:12:92:4f:9d:dd:6f:b2:63:bb:9f: 24:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A7:CD:89:AC:0F:DA:67:89:8F:58:B0:94:86:95:50:22:71:D7:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1200383a-e4a8-331f-b95c-374c500c479f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 198.29.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:4e:ed:f5:b9:d7:47:f3:54:4c:04:c4:d4:37:a6:a6:d9:cc: 5f:11:32:7a:ff:b5:0f:c7:09:54:f8:d2:ef:1f:2b:e1:cb:84: ba:53:1a:9d:18:b2:92:8f:f2:97:b0:55:84:e6:28:b4:e2:c9: bb:f8:14:c9:42:90:4e:a2:86:58:47:a2:14:42:0e:7d:93:da: a3:ba:51:0e:1a:80:16:49:dd:c1:90:2e:b0:28:4c:3e:c3:ff: f3:d8:ee:c2:1b:26:c0:50:9f:75:79:f2:9d:62:05:14:c4:e3: 64:18:ec:ec:ab:54:11:6c:55:b1:e6:86:99:d1:24:c7:dc:03: 21:70:bb:15:61:29:36:a8:39:d3:79:a2:af:6d:19:34:58:8a: 10:e2:17:7d:ac:02:96:d4:43:5a:5b:45:1c:46:2a:9d:9d:1b: 5b:30:9c:fe:0e:38:3d:d8:71:b8:05:ce:06:77:c2:48:96:d8: 61:ec:1e:39:57:2d:97:a3:c8:52:00:65:aa:f4:d6:23:63:5b: 1e:53:10:c8:e5:b4:d0:2c:94:f0:f5:11:01:f9:d1:78:08:55: 1f:1f:2a:ef:00:eb:da:7d:59:f0:73:a7:a3:be:76:f4:68:c9: 1d:97:9d:e0:5c:96:94:d1:1f:48:5b:ac:77:cd:ac:26:82:d9: df:36:4b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HUe/RnJN3LaT5o8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDYwMTE1NDQxNloXDTI2MDgzMDE1NDQxNlowLzEtMCsGA1UEAxMk NWFjYTI1MDYtNzY3Ny00YzJlLWFmZWUtNTRjZGFmN2U5YTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv35PZfeEzYDblPJ1YK0fzEki7MgN9h+N0Hit uQGOsLhXYidHj/tex5oIkoGWfvpYo6QX92LhIQ0Rx925bJORGmVzpcWKNFmV1HuM QgZg+o0yn5dslWh15M9i+brfEs2s49Ayd5AZ9izxNqIL3XsSMlQwCgYGDFnZo0R1 eoJafwDk2n1VYhsWVijVOohhEkBRkmPgd40y9r6HhuEANlTOeDwW51bzBSIo1aQz 7upi5MVYESQwLxRn6RxhTob4tLq2/Qugz1evZFvUBxQBS9Xc3iNUg2WreNp7L3Kg uGCBz07cWcyjcVtbiH01JzhyjYvgIuPB9RKST53db7Jju58kRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqnzYmsD9pniY9YsJSGlVAicdfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvMTIwMDM4M2EtZTRhOC0z MzFmLWI5NWMtMzc0YzUwMGM0NzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxh1KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVO7fW510fzVEwExNQ3pqbZzF8RMnr/tQ/HCVT40u8fK+HLhLpTGp0Y spKP8pewVYTmKLTiybv4FMlCkE6ihlhHohRCDn2T2qO6UQ4agBZJ3cGQLrAoTD7D //PY7sIbJsBQn3V58p1iBRTE42QY7OyrVBFsVbHmhpnRJMfcAyFwuxVhKTaoOdN5 oq9tGTRYihDiF32sApbUQ1pbRRxGKp2dG1swnP4OOD3YcbgFzgZ3wkiW2GHsHjlX LZejyFIAZar01iNjWx5TEMjltNAslPD1EQH50XgIVR8fKu8A69p9WfBzp6O+dvRo yR2XneBclpTRH0hbrHfNrCaC2d82S1Q= -----END CERTIFICATE-----Generated at Sat Jun 13 15:41:37 2026 by rpki-client