$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/40d8614c-804f-30f5-a94e-bbc7b03cc2da.roa File: 40d8614c-804f-30f5-a94e-bbc7b03cc2da.roa (raw, json) Hash identifier: 6+wmFwjR+qtWpzqGWvl2LToLhrTWRWIEmTIAF2TKcHc= Subject key identifier: 17:81:68:A2:29:29:7C:1E:41:F1:72:B5:67:5D:FB:D0:BA:AB:A8:A5 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584E1B7995DA815086573FE8E900 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/40d8614c-804f-30f5-a94e-bbc7b03cc2da.roa Signing time: Mon 08 Jun 2026 21:00:12 +0000 ROA not before: Mon 08 Jun 2026 21:00:12 +0000 ROA not after: Sun 06 Sep 2026 21:00:12 +0000 asID: 63179 IP address blocks: 199.96.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1b:79:95:da:81:50:86:57:3f:e8:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Jun 8 21:00:12 2026 GMT Not After : Sep 6 21:00:12 2026 GMT Subject: CN=35d88ab0-5a1b-40bc-8174-231ffd854be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:d7:6f:bb:5d:8e:80:a7:80:d1:70:4d:94: ff:ca:51:f6:81:52:60:6d:6c:3e:40:2a:3e:b0:12: 35:0f:92:07:bf:6d:4e:34:bd:5f:06:c9:ee:92:15: 52:57:b7:00:94:56:66:b4:e5:b5:9e:43:ea:d4:2d: 34:86:19:27:20:66:29:0e:e9:9e:f9:2a:3a:95:55: a3:af:0f:49:2f:30:14:e3:42:39:be:71:c8:30:0f: c2:d8:00:32:03:31:3f:e0:20:07:3c:32:0c:85:a8: 18:51:d9:33:d3:4e:1d:4a:57:40:33:b7:0d:22:4d: d9:3c:a9:3a:72:3e:37:58:d5:94:91:c8:4b:b3:46: a3:9a:48:ed:72:52:a9:d4:ee:13:08:77:19:ef:5f: 5b:26:0d:51:d5:51:0a:55:4c:27:83:67:c2:b0:c2: 40:72:27:e9:db:e6:7b:4b:2a:c8:ff:6b:9e:07:40: 49:ef:32:b6:d0:c1:62:2f:fc:9a:da:36:8e:26:49: 92:59:f1:2f:07:f8:7b:1d:d7:93:e9:d5:8f:90:fe: 10:f2:cc:de:08:42:8e:ef:fc:7b:3c:07:fb:a7:73: ab:b6:3b:cf:22:f5:65:8f:5b:b1:c9:f6:1b:62:6e: 75:76:e6:0d:ec:63:f5:5f:67:ff:b9:a8:c9:a4:8d: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:81:68:A2:29:29:7C:1E:41:F1:72:B5:67:5D:FB:D0:BA:AB:A8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/40d8614c-804f-30f5-a94e-bbc7b03cc2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.96.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:04:cc:aa:d2:3e:1e:9f:bf:7f:ed:55:2f:e1:ea:fd:2e:60: 94:d6:ba:20:bb:4d:33:e1:7a:94:57:85:19:6f:e7:46:30:cf: 86:52:2d:41:63:d0:a6:57:59:79:73:ac:8e:c2:0c:84:32:0a: 1c:ec:89:7d:c3:f9:e7:66:ce:32:55:9f:59:ec:1b:8f:b2:8e: b1:b5:e7:d3:af:20:c4:6c:c8:41:09:77:0c:79:ee:b5:e9:ca: f6:6b:69:ef:d9:20:d8:5e:89:57:23:f4:d5:3a:77:91:8d:80: 87:c2:17:d1:93:fb:19:2b:c4:52:9d:53:6a:47:69:b2:e3:e8: ca:16:a9:3d:58:ec:c9:41:01:a8:e1:00:b2:9f:bf:89:ae:83: e5:98:dd:16:ba:79:f6:ca:14:f1:8d:7d:16:44:af:51:cb:3f: 39:23:95:bd:d4:ed:b9:8d:2c:83:62:d1:52:cb:ec:09:80:fb: 73:43:d5:db:06:fe:0b:3a:91:81:c2:6e:12:c0:a4:a2:32:08: 8a:b0:cc:a6:39:a0:09:38:54:0f:02:a5:45:b0:95:02:0b:66: 65:a9:b6:ec:d8:80:0a:a9:b1:ad:3b:8f:1b:af:0e:dc:28:51: dd:5b:8d:41:9b:8a:ae:8c:86:5f:bf:91:dc:d5:aa:61:a4:62: 66:f7:a2:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4beZXagVCGVz/o6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk MzVkODhhYjAtNWExYi00MGJjLTgxNzQtMjMxZmZkODU0YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVvXb7tdjoCngNFwTZT/ylH2gVJgbWw+QCo+ sBI1D5IHv21ONL1fBsnukhVSV7cAlFZmtOW1nkPq1C00hhknIGYpDume+So6lVWj rw9JLzAU40I5vnHIMA/C2AAyAzE/4CAHPDIMhagYUdkz004dSldAM7cNIk3ZPKk6 cj43WNWUkchLs0ajmkjtclKp1O4TCHcZ719bJg1R1VEKVUwng2fCsMJAcifp2+Z7 SyrI/2ueB0BJ7zK20MFiL/ya2jaOJkmSWfEvB/h7HdeT6dWPkP4Q8szeCEKO7/x7 PAf7p3OrtjvPIvVlj1uxyfYbYm51duYN7GP1X2f/uajJpI1m0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeBaKIpKXweQfFytWdd+9C6q6ilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDBkODYxNGMtODA0Zi0z MGY1LWE5NGUtYmJjN2IwM2NjMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2A4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEEzKrSPh6fv3/tVS/h6v0uYJTWuiC7TTPhepRXhRlv50Ywz4ZSLUFj 0KZXWXlzrI7CDIQyChzsiX3D+edmzjJVn1nsG4+yjrG159OvIMRsyEEJdwx57rXp yvZrae/ZINheiVcj9NU6d5GNgIfCF9GT+xkrxFKdU2pHabLj6MoWqT1Y7MlBAajh ALKfv4mug+WY3Ra6efbKFPGNfRZEr1HLPzkjlb3U7bmNLINi0VLL7AmA+3ND1dsG /gs6kYHCbhLApKIyCIqwzKY5oAk4VA8CpUWwlQILZmWptuzYgAqpsa07jxuvDtwo Ud1bjUGbiq6Mhl+/kdzVqmGkYmb3otI= -----END CERTIFICATE-----Generated at Sat Jun 13 08:45:43 2026 by rpki-client