$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa File: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (raw, json) Hash identifier: ekq9nKrVtZYF9w60sbzjJJMcgMi3x81YyLDCLvtnGaY= Subject key identifier: 2B:35:30:34:39:96:BD:27:3D:45:A3:0B:0F:10:91:76:FC:98:8B:86 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584E147ED7D2911909DB799E1480 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 21519 IP address blocks: 208.73.28.0/22 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:d7:d2:91:19:09:db:79:9e:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=4de7a92e-60ff-41c4-86ce-29ca7daf8370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:41:f7:fd:17:9c:b6:d8:87:21:a7:79:66: 13:3c:91:b8:c6:7a:1c:e0:df:0d:8b:69:23:42:44: 54:a7:6b:18:3b:8a:d0:fc:b2:9c:5a:a2:d7:f9:05: aa:0e:9e:15:c4:f6:21:f8:da:80:da:1a:f5:7b:d3: ed:64:6b:a4:dc:6f:e4:5b:71:17:21:3a:6a:c7:55: 33:a7:f2:f4:cd:bd:6c:0a:f6:e8:e7:56:98:84:7f: 06:9e:15:a1:da:be:cf:9a:d6:30:6d:09:e6:f3:44: a2:39:8b:a7:93:8b:8f:de:ca:c0:dd:81:f6:93:b3: b6:2b:a7:73:6e:b6:4a:9f:bc:7d:2d:18:ea:34:31: 62:84:98:49:18:ba:e2:b1:c7:ed:f6:3a:e1:7a:d9: f3:78:13:25:51:17:2e:26:16:06:ad:e4:04:31:08: 4a:74:5c:a3:d2:57:cb:02:74:21:be:06:13:6b:84: 71:40:1c:54:ae:fc:47:a5:c8:b1:94:52:2c:e3:05: c0:a1:97:bf:12:0a:bd:6c:b0:de:51:19:cf:de:70: fc:d1:3f:f1:fa:7e:21:5a:29:20:99:e3:89:49:26: 07:02:5e:b5:e4:0b:f9:04:de:05:38:f3:14:5c:3e: 0f:4c:97:7d:e5:1e:cc:c5:23:d4:42:4f:89:cd:be: 41:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:35:30:34:39:96:BD:27:3D:45:A3:0B:0F:10:91:76:FC:98:8B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 208.73.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5c:96:ef:ab:7d:5f:42:96:5f:78:5d:a2:a4:28:d8:8f:10: bf:0f:bb:da:ce:7d:5f:b6:38:50:37:44:20:26:7d:da:07:ab: a7:3a:1f:97:2c:49:09:2a:79:b0:23:37:3c:02:f3:f0:7b:ef: 9a:cf:96:ed:f4:5c:b2:20:3c:dd:be:01:3e:39:14:d2:5c:8a: 04:c6:b3:8e:10:45:8b:e7:bb:76:d8:ae:5d:e2:b2:00:37:8d: 65:e6:97:a7:f2:09:45:d9:7a:2e:16:cc:60:4e:62:65:5e:87: a9:6f:95:ef:71:a2:24:dc:5e:02:13:a2:e6:11:71:bd:cc:89: c0:3f:f4:69:0e:0a:ea:f5:fd:24:cc:40:4f:83:68:f0:08:c1: 52:b7:4f:88:31:36:d2:a6:37:d9:27:db:50:ff:13:79:85:c4: 51:44:bd:19:0a:cc:2b:c2:ee:ee:83:e2:81:a8:d2:6f:2f:da: 45:a8:d8:b3:e1:1d:86:21:49:b5:1d:dd:65:70:70:e2:93:91: c3:4d:1e:c0:e6:72:a0:b2:9f:f8:17:2e:ce:fb:b3:15:e3:05: c7:62:c6:03:6b:c6:fb:92:23:d4:b9:a7:07:18:6f:2d:8b:60: a9:57:3e:8b:d6:54:cc:cb:be:a1:50:67:b2:42:9f:37:9d:76: 5a:85:9d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftfSkRkJ23meFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk NGRlN2E5MmUtNjBmZi00MWM0LTg2Y2UtMjljYTdkYWY4MzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBdB9/0XnLbYhyGneWYTPJG4xnoc4N8Ni2kj QkRUp2sYO4rQ/LKcWqLX+QWqDp4VxPYh+NqA2hr1e9PtZGuk3G/kW3EXITpqx1Uz p/L0zb1sCvbo51aYhH8GnhWh2r7PmtYwbQnm80SiOYunk4uP3srA3YH2k7O2K6dz brZKn7x9LRjqNDFihJhJGLriscft9jrhetnzeBMlURcuJhYGreQEMQhKdFyj0lfL AnQhvgYTa4RxQBxUrvxHpcixlFIs4wXAoZe/Egq9bLDeURnP3nD80T/x+n4hWikg meOJSSYHAl615Av5BN4FOPMUXD4PTJd95R7MxSPUQk+Jzb5BswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCs1MDQ5lr0nPUWjCw8QkXb8mIuGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDg5OTU2MjUtZDk1Yy0z MmY4LWJkNzktODk5YTVmYzc4ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhclu+rfV9Cll94XaKkKNiPEL8Pu9rOfV+2OFA3RCAmfdoHq6c6H5cs SQkqebAjNzwC8/B775rPlu30XLIgPN2+AT45FNJcigTGs44QRYvnu3bYrl3isgA3 jWXml6fyCUXZei4WzGBOYmVeh6lvle9xoiTcXgITouYRcb3MicA/9GkOCur1/STM QE+DaPAIwVK3T4gxNtKmN9kn21D/E3mFxFFEvRkKzCvC7u6D4oGo0m8v2kWo2LPh HYYhSbUd3WVwcOKTkcNNHsDmcqCyn/gXLs77sxXjBcdixgNrxvuSI9S5pwcYby2L YKlXPovWVMzLvqFQZ7JCnzeddlqFnWs= -----END CERTIFICATE-----Generated at Sat Jun 13 16:28:35 2026 by rpki-client