$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e12bae3a-41bf-3764-9627-56878551ee9e.roa File: e12bae3a-41bf-3764-9627-56878551ee9e.roa (raw, json) Hash identifier: p1Rzakl2xCV/QpcwVzpRIikZVfj8QRSfhUbsJQFirrM= Subject key identifier: 15:2D:64:42:29:E0:C0:6F:A1:34:36:80:24:C6:D5:B3:92:E1:4F:E4 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E07E2C7ADE805747618C73C80 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e12bae3a-41bf-3764-9627-56878551ee9e.roa Signing time: Mon 01 Jun 2026 20:36:06 +0000 ROA not before: Mon 01 Jun 2026 20:36:06 +0000 ROA not after: Fri 28 Aug 2026 00:03:03 +0000 asID: 203113 IP address blocks: 192.48.158.0/24 maxlen: 24 198.29.68.0/24 maxlen: 24 198.29.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:e2:c7:ad:e8:05:74:76:18:c7:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jun 1 20:36:06 2026 GMT Not After : Aug 28 00:03:03 2026 GMT Subject: CN=2ab057fe-e073-4976-8e81-f786d6771a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cb:74:be:2d:8e:19:23:20:f8:f1:e5:a8:53: 41:ae:b0:83:bc:1d:6f:4c:90:75:04:29:ec:a8:3c: 10:13:d3:ac:53:5a:44:42:51:fa:5e:45:af:e1:62: ba:70:64:29:3e:a7:23:be:65:47:5c:f9:94:df:d9: b0:bb:5d:e9:62:cd:0e:82:9c:e5:60:5d:a7:1b:b2: 04:95:cb:4a:66:0f:99:13:c5:a2:ee:77:68:35:13: 35:1f:20:92:db:54:9d:82:ef:ee:fc:ac:a7:ae:81: 6f:72:4e:53:64:54:0f:e1:4d:dd:83:1b:be:a5:00: ba:41:1b:c4:b3:44:e5:bb:f5:1c:a4:53:7a:76:3b: b5:83:00:f8:e4:f3:e4:76:f9:6d:72:b3:36:de:aa: b5:9e:93:11:5f:71:a3:5b:67:31:3e:f6:69:83:a4: 05:f7:9c:24:86:a6:da:01:f5:1f:0b:9a:90:47:a2: 5c:e0:4c:2c:e9:8f:67:b4:36:03:53:aa:d1:59:22: 25:60:a2:77:d7:96:f1:3d:5b:2a:5e:d2:7c:bb:6c: 3e:f5:f5:c6:84:a9:56:ad:bd:fa:16:3e:5b:df:d4: e8:0e:40:a5:2f:0e:0d:61:63:e5:4d:87:69:07:9d: f8:92:27:f0:da:12:d3:e6:9f:68:e6:5c:53:01:92: 0e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2D:64:42:29:E0:C0:6F:A1:34:36:80:24:C6:D5:B3:92:E1:4F:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e12bae3a-41bf-3764-9627-56878551ee9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 192.48.158.0/24 198.29.68.0/24 198.29.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5f:95:78:d8:b7:9b:0e:38:c7:88:a1:6d:bc:4d:52:b0:54: b3:b1:a2:7c:f7:b7:e0:0d:50:75:74:c0:37:81:8c:fe:0a:95: 4b:0b:0b:05:59:0b:2c:be:69:0c:55:f5:82:8d:7d:44:02:e5: 80:47:41:9a:c6:57:71:1c:4e:55:49:4b:c9:b5:5d:c7:ea:77: 93:1b:96:2e:69:41:53:c4:18:b6:9a:17:a7:bf:71:1d:43:e8: d2:68:6a:63:ff:e2:88:fd:fc:f1:62:fb:4d:2e:d7:b3:36:c0: d8:03:f5:ba:b4:02:f9:e9:31:15:03:cf:b2:4b:27:a8:e9:84: 6b:7b:9e:24:3a:0a:ce:c3:25:d7:99:0a:20:b8:e1:d7:3a:c5: 6b:15:58:63:57:29:cc:e3:d2:fe:d9:c2:dd:0a:d8:11:79:9c: 17:9d:c7:6f:13:a8:16:1a:d8:af:71:d1:db:9d:96:26:fc:bd: 29:48:e8:c2:23:0b:f8:49:85:01:04:24:84:00:66:68:7a:33: 3b:be:f5:f8:fd:d1:03:8e:50:c9:1f:fd:d8:34:9d:e2:ce:b6: 99:46:bf:01:b1:21:e0:4a:a9:1f:dd:38:65:65:cf:ad:37:6d: cf:e3:fd:55:d2:17:e0:55:5a:ed:6f:35:5c:f4:95:88:ae:ff: 9c:36:1b:54 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE4H4set6AV0dhjHPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDYwMTIwMzYwNloXDTI2MDgyODAwMDMwM1owLzEtMCsGA1UEAxMk MmFiMDU3ZmUtZTA3My00OTc2LThlODEtZjc4NmQ2NzcxYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8t0vi2OGSMg+PHlqFNBrrCDvB1vTJB1BCns qDwQE9OsU1pEQlH6XkWv4WK6cGQpPqcjvmVHXPmU39mwu13pYs0OgpzlYF2nG7IE lctKZg+ZE8Wi7ndoNRM1HyCS21Sdgu/u/KynroFvck5TZFQP4U3dgxu+pQC6QRvE s0Tlu/UcpFN6dju1gwD45PPkdvltcrM23qq1npMRX3GjW2cxPvZpg6QF95wkhqba AfUfC5qQR6Jc4Ews6Y9ntDYDU6rRWSIlYKJ315bxPVsqXtJ8u2w+9fXGhKlWrb36 Fj5b39ToDkClLw4NYWPlTYdpB534kifw2hLT5p9o5lxTAZIO3wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBUtZEIp4MBvoTQ2gCTG1bOS4U/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZTEyYmFlM2EtNDFiZi0z NzY0LTk2MjctNTY4Nzg1NTFlZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwDCeAwQA xh1EAwQAxh1HMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADJflXjYt5sOOMeIoW28TVKwVLOxonz3t+ANUHV0 wDeBjP4KlUsLCwVZCyy+aQxV9YKNfUQC5YBHQZrGV3EcTlVJS8m1Xcfqd5Mbli5p QVPEGLaaF6e/cR1D6NJoamP/4oj9/PFi+00u17M2wNgD9bq0AvnpMRUDz7JLJ6jp hGt7niQ6Cs7DJdeZCiC44dc6xWsVWGNXKczj0v7Zwt0K2BF5nBedx28TqBYa2K9x 0dudlib8vSlI6MIjC/hJhQEEJIQAZmh6Mzu+9fj90QOOUMkf/dg0neLOtplGvwGx IeBKqR/dOGVlz603bc/j/VXSF+BVWu1vNVz0lYiu/5w2G1Q= -----END CERTIFICATE-----Generated at Sat Jun 13 18:29:28 2026 by rpki-client