$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/aa7cb7d1-9168-3fd8-a0de-26a4e7536506.roa File: aa7cb7d1-9168-3fd8-a0de-26a4e7536506.roa (raw, json) Hash identifier: rJqxhFS+kvL61BctzlRZi8+QopG+96yCrTdHcnfMEFE= Subject key identifier: 4A:12:A0:F0:A8:06:36:0C:ED:D1:86:7E:39:E1:2C:4F:27:B8:29:5D Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E0D0B30FD08250D454DA8A080 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/aa7cb7d1-9168-3fd8-a0de-26a4e7536506.roa Signing time: Wed 03 Jun 2026 16:56:34 +0000 ROA not before: Wed 03 Jun 2026 16:56:34 +0000 ROA not after: Tue 01 Sep 2026 16:56:34 +0000 asID: 151389 IP address blocks: 192.48.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:0b:30:fd:08:25:0d:45:4d:a8:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jun 3 16:56:34 2026 GMT Not After : Sep 1 16:56:34 2026 GMT Subject: CN=679696ec-36ed-4e50-80f3-f36c1c7ee2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:0d:b8:23:8a:13:af:69:6a:a0:9f:53:65: 7c:77:bc:11:57:dd:b6:52:14:30:a0:fb:23:8b:1b: ad:6c:f5:0a:7f:81:df:5e:8f:a7:da:b1:72:ad:c6: 8f:70:8b:d2:68:98:de:69:41:39:2f:fe:01:12:75: cf:bc:48:69:3e:1a:f6:77:c1:3a:67:a7:c7:02:52: 7a:26:cb:bf:52:4e:9e:16:d9:58:bf:5a:1a:a7:46: 7f:7a:c2:b5:1b:af:0b:d3:8c:a3:b0:69:86:0e:06: cb:87:dc:cb:81:88:cc:e3:56:a8:64:8d:43:bd:2a: db:11:d0:39:b3:a0:47:59:ed:67:f0:d7:70:94:3b: c4:0c:de:b8:8d:05:1f:55:db:fa:ce:54:5c:a2:d8: 65:c0:2b:a8:69:84:c2:71:ce:22:b7:21:a9:a5:fe: 1e:21:b4:62:43:40:7f:ae:2e:50:e9:d0:f4:12:64: bc:6d:52:c1:f8:f0:c4:1c:0e:fd:f7:1c:c8:0a:43: 99:14:5b:c8:63:df:57:bf:8d:b0:a9:49:9a:86:7d: eb:de:f6:7f:4e:93:a5:83:7a:ad:11:e3:2c:56:f7: 45:ab:a4:57:cc:16:6c:69:c3:d6:65:ca:3c:7a:d1: f6:7f:44:97:c5:eb:f1:19:ce:b6:5f:b7:cf:ca:84: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:12:A0:F0:A8:06:36:0C:ED:D1:86:7E:39:E1:2C:4F:27:B8:29:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/aa7cb7d1-9168-3fd8-a0de-26a4e7536506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 192.48.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c3:a3:56:ac:a1:44:1b:61:a0:53:9d:78:ba:c2:6f:71:ad: 7e:94:73:be:09:65:9e:d6:87:b3:7e:48:75:02:35:18:f1:53: e5:fa:10:af:19:0e:3f:14:ea:97:83:f9:34:7f:c8:66:cb:6f: 50:00:4a:3f:50:ce:8d:47:d5:e7:37:ca:d9:5f:a6:7d:07:1c: 53:dd:e5:7d:04:0b:0d:9f:8b:77:af:db:64:4a:30:f3:db:91: 58:16:b9:7d:e1:75:2d:37:53:5f:59:24:31:8f:bf:b2:d0:37: 69:75:00:bf:bf:b5:91:fd:30:3f:ed:68:00:8e:1e:e2:78:64: 19:b3:b8:e0:ee:f6:78:10:77:24:a8:6b:e8:11:1c:e8:bf:7a: a4:be:c9:19:c3:cb:db:ae:a0:0d:36:72:62:d6:06:a3:8a:1d: 61:af:ff:2d:7e:29:f6:25:56:73:35:64:85:4a:85:50:fa:35: 58:11:80:0f:0f:c4:d8:15:8c:35:b4:96:63:af:5c:82:ff:83: b7:e4:8b:b6:7a:f6:4b:fb:5e:16:c4:0e:2f:a1:31:b9:3b:75: 3a:7e:0a:f8:79:35:1a:d4:f7:90:44:e9:cc:6c:00:50:cb:bc: 7c:9e:04:4e:58:f7:87:a5:de:8b:e9:36:59:dd:64:9e:13:78: a0:b5:db:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NCzD9CCUNRU2ooIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDYwMzE2NTYzNFoXDTI2MDkwMTE2NTYzNFowLzEtMCsGA1UEAxMk Njc5Njk2ZWMtMzZlZC00ZTUwLTgwZjMtZjM2YzFjN2VlMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYwNuCOKE69paqCfU2V8d7wRV922UhQwoPsj ixutbPUKf4HfXo+n2rFyrcaPcIvSaJjeaUE5L/4BEnXPvEhpPhr2d8E6Z6fHAlJ6 Jsu/Uk6eFtlYv1oap0Z/esK1G68L04yjsGmGDgbLh9zLgYjM41aoZI1DvSrbEdA5 s6BHWe1n8NdwlDvEDN64jQUfVdv6zlRcothlwCuoaYTCcc4ityGppf4eIbRiQ0B/ ri5Q6dD0EmS8bVLB+PDEHA799xzICkOZFFvIY99Xv42wqUmahn3r3vZ/TpOlg3qt EeMsVvdFq6RXzBZsacPWZco8etH2f0SXxevxGc62X7fPyoQwnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoSoPCoBjYM7dGGfjnhLE8nuCldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvYWE3Y2I3ZDEtOTE2OC0z ZmQ4LWEwZGUtMjZhNGU3NTM2NTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnDo1asoUQbYaBTnXi6wm9xrX6Uc74JZZ7Wh7N+SHUCNRjxU+X6EK8Z Dj8U6peD+TR/yGbLb1AASj9Qzo1H1ec3ytlfpn0HHFPd5X0ECw2fi3ev22RKMPPb kVgWuX3hdS03U19ZJDGPv7LQN2l1AL+/tZH9MD/taACOHuJ4ZBmzuODu9ngQdySo a+gRHOi/eqS+yRnDy9uuoA02cmLWBqOKHWGv/y1+KfYlVnM1ZIVKhVD6NVgRgA8P xNgVjDW0lmOvXIL/g7fki7Z69kv7XhbEDi+hMbk7dTp+Cvh5NRrU95BE6cxsAFDL vHyeBE5Y94el3ovpNlndZJ4TeKC12wc= -----END CERTIFICATE-----Generated at Sat Jun 13 09:06:32 2026 by rpki-client