$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa File: 70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa (raw, json) Hash identifier: ygQbMbBLlVfObMvdwwjFzfdS3L/jiYrPk7vEMG0wC/g= Subject key identifier: 0E:43:CC:85:90:4F:20:7E:99:9F:A1:07:95:26:FA:13:A6:33:C8:3F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E1E445686EA40750238E3B000 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 16839 IP address blocks: 132.192.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:56:86:ea:40:75:02:38:e3:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=e374d687-6cda-4bca-9aff-7d4be61fc824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:54:66:2b:c0:3e:4f:86:a9:f2:2b:c9:96:69: 60:3c:9e:6f:ee:a1:4a:2c:49:ed:1c:eb:84:64:34: 89:37:2d:d7:97:7a:c3:6f:ef:73:c6:89:ac:85:3a: bb:ec:39:e7:6a:25:58:99:5f:93:4d:3d:d3:99:51: d2:c5:9c:86:58:ec:2f:b4:eb:47:55:2b:e5:3c:88: 46:ee:d7:97:c9:b9:56:67:a2:77:9f:bb:ba:5e:0d: 6e:9c:1e:a5:31:db:a8:54:3e:03:83:9d:4d:c8:21: e0:7a:ac:02:ad:0f:a1:c7:f9:80:10:1e:c5:ed:c4: a4:67:39:6f:b5:35:86:db:99:cc:45:04:f0:69:73: 1e:44:49:fa:94:cf:58:f6:25:36:af:77:15:4b:1b: da:fc:bf:2d:af:61:0a:ec:e7:e2:eb:0f:5f:40:a5: d3:f1:71:63:c3:a8:cf:c4:74:54:0d:30:3a:5c:e2: ff:49:ac:f4:ec:02:7a:84:6b:2c:68:11:d5:d4:1b: 66:5b:db:b0:4f:e6:7a:04:91:ce:f7:f6:66:ac:4f: 26:fb:67:81:28:93:be:99:b7:c6:bd:2b:6d:f4:eb: 3b:78:e5:38:b6:56:c0:f3:e2:09:26:22:fa:8a:b2: 6f:31:3f:06:d7:12:9d:ca:b9:83:88:7f:20:b7:ff: 59:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:43:CC:85:90:4F:20:7E:99:9F:A1:07:95:26:FA:13:A6:33:C8:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 132.192.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7b:c5:80:f9:ac:62:ca:b1:58:3d:3e:c6:b3:92:10:d3:76: 8d:40:7b:2a:8c:77:57:d2:1b:d4:eb:24:3c:b9:5d:26:3e:7c: ef:18:fe:c6:13:6d:52:02:87:5c:0c:65:ad:e0:e5:f7:82:50: 30:d1:47:f7:f8:b2:46:3b:6b:e1:d7:a3:5d:39:23:65:5d:4f: 84:b3:80:de:30:7f:80:d3:40:3e:78:1f:da:b1:5b:90:92:be: cc:6c:78:28:66:17:a4:95:39:93:da:aa:e8:e4:3a:de:c7:e6: 40:63:44:b3:48:a7:0c:7d:3b:11:d3:89:59:59:93:4d:8b:2b: dc:d5:19:17:24:27:28:60:00:38:3e:9b:c1:e4:00:d4:5d:10: 2c:01:22:b7:33:06:1f:53:07:94:28:44:ac:d2:cb:16:45:33: 7f:b4:de:d4:11:43:29:f0:9f:39:fc:a1:f9:9f:69:b4:dd:a4: eb:a6:50:70:8e:4f:a4:1d:f1:d9:38:f5:c6:38:20:2d:8f:e4: e3:d6:3e:bb:5b:32:8d:01:29:91:20:51:9a:f1:42:25:fe:f6: d4:11:6a:df:76:db:1a:e6:d8:1c:bb:4d:b8:cb:6b:b0:aa:14: 8a:78:f4:d9:82:0d:53:b7:4d:b4:f8:50:57:f4:f5:95:d1:b5: 68:4e:7a:d2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4eRFaG6kB1AjjjsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZTM3NGQ2ODctNmNkYS00YmNhLTlhZmYtN2Q0YmU2MWZjODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lRmK8A+T4ap8ivJlmlgPJ5v7qFKLEntHOuE ZDSJNy3Xl3rDb+9zxomshTq77DnnaiVYmV+TTT3TmVHSxZyGWOwvtOtHVSvlPIhG 7teXyblWZ6J3n7u6Xg1unB6lMduoVD4Dg51NyCHgeqwCrQ+hx/mAEB7F7cSkZzlv tTWG25nMRQTwaXMeREn6lM9Y9iU2r3cVSxva/L8tr2EK7Ofi6w9fQKXT8XFjw6jP xHRUDTA6XOL/Saz07AJ6hGssaBHV1BtmW9uwT+Z6BJHO9/ZmrE8m+2eBKJO+mbfG vStt9Os7eOU4tlbA8+IJJiL6irJvMT8G1xKdyrmDiH8gt/9Z5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA5DzIWQTyB+mZ+hB5Um+hOmM8g/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzBjYmQzNTQtMjRhMi0z NDYxLWE1ZmUtZGRkNGUwNGU1OWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhMAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAW3vFgPmsYsqxWD0+xrOSENN2jUB7Kox3V9Ib1OskPLldJj587xj+xhNt UgKHXAxlreDl94JQMNFH9/iyRjtr4dejXTkjZV1PhLOA3jB/gNNAPngf2rFbkJK+ zGx4KGYXpJU5k9qq6OQ63sfmQGNEs0inDH07EdOJWVmTTYsr3NUZFyQnKGAAOD6b weQA1F0QLAEitzMGH1MHlChErNLLFkUzf7Te1BFDKfCfOfyh+Z9ptN2k66ZQcI5P pB3x2Tj1xjggLY/k49Y+u1syjQEpkSBRmvFCJf721BFq33bbGubYHLtNuMtrsKoU inj02YINU7dNtPhQV/T1ldG1aE560g== -----END CERTIFICATE-----Generated at Sat Jun 13 20:02:15 2026 by rpki-client