$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa File: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (raw, json) Hash identifier: KuxpHHcaDEtTaJzWFPI6IgNB3qaTluV96+r9Ey/9y18= Subject key identifier: 73:E5:F9:3E:2F:4F:63:22:1F:82:90:85:AC:81:42:2A:2D:54:8C:2E Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584DFA7077FE23974ED6F02BB2C0 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 398419 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:77:fe:23:97:4e:d6:f0:2b:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=737c8cc3-95e3-4db3-8373-21e41473e8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:8c:bd:c4:2c:0d:06:ce:04:2d:ca:04:90: c1:6d:35:18:9e:df:ff:15:3e:c7:aa:93:c9:92:2c: 57:5c:4f:03:0b:15:a2:c9:21:14:0e:c6:b7:9b:88: 31:30:bf:57:45:59:33:d4:c7:14:69:46:58:0f:76: 43:bc:be:61:1f:7a:51:fc:86:cb:5b:38:8e:f0:28: 77:60:a3:45:60:2b:33:5e:26:2e:71:9b:f2:9b:4e: d5:b4:9b:1a:6b:c4:e3:e7:b4:83:94:5f:23:5f:49: 5b:08:5b:27:eb:e6:da:a4:89:a5:be:30:43:70:d4: 64:b7:91:59:6d:f0:76:37:bb:a2:a7:67:3e:71:4d: 54:ad:b4:91:5f:9b:45:4e:b8:85:7c:e7:b3:a3:76: 47:5c:52:b2:de:bf:0b:7d:79:58:e8:01:9b:1a:38: bf:4e:66:f4:a2:d2:cd:31:c1:0e:50:86:5e:2a:3c: 45:f4:c0:dc:5e:20:7d:a3:ba:c7:d6:af:84:03:77: 45:17:74:bb:81:96:b3:80:dd:d7:3c:24:32:9e:f0: ba:b7:45:11:97:79:61:6d:c5:9e:2a:86:85:7d:6b: bb:8b:58:84:1d:b0:0c:f8:72:09:c4:4f:98:12:75: 2c:08:22:ed:c8:19:0c:40:ab:af:2e:ad:76:2c:ce: 75:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E5:F9:3E:2F:4F:63:22:1F:82:90:85:AC:81:42:2A:2D:54:8C:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:3b:4f:8e:62:88:d5:49:67:c9:51:fc:2a:47:c8:bb:95:c0: ff:16:3c:f2:e3:48:0e:e7:ac:f4:99:2b:6b:36:df:00:2a:52: 15:92:10:e5:52:b0:02:45:95:7f:74:60:77:27:36:bb:50:ca: af:cf:09:14:9d:7a:6b:fa:2b:ff:fa:d0:53:b9:15:7a:26:dd: 7c:e1:ed:f5:88:3f:99:0b:95:95:a4:88:06:a2:d4:f4:11:73: c7:28:a6:94:46:78:7e:14:f6:64:27:c2:ab:b2:24:b6:0c:ab: 55:7c:71:f2:f3:e8:9b:f0:5e:0f:09:f3:f0:5b:27:f7:3f:32: 68:eb:6d:9b:c1:6c:8c:eb:0b:61:6d:de:c9:d5:eb:93:55:a3: 7f:48:9f:00:d1:6a:3c:e1:0a:a7:7c:23:22:c1:be:7a:d9:ad: e9:87:ff:73:78:e4:f3:8f:42:91:d7:8f:4d:2f:92:67:60:2d: 96:9a:d1:6e:64:16:83:f8:3b:6b:7d:56:71:02:a8:d1:8c:b3: cc:44:5f:b8:b1:4e:1e:df:34:03:de:aa:f1:3d:c7:0f:fd:6d: 47:ce:93:4a:8d:6f:03:b7:88:cc:ee:1f:f9:8e:ae:98:fc:10: 56:4f:26:1d:54:dc:16:dd:fc:78:91:29:6e:ca:0c:03:80:12: 63:d8:28:b9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE36cHf+I5dO1vArssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NzM3YzhjYzMtOTVlMy00ZGIzLTgzNzMtMjFlNDE0NzNlOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWOMvcQsDQbOBC3KBJDBbTUYnt//FT7HqpPJ kixXXE8DCxWiySEUDsa3m4gxML9XRVkz1McUaUZYD3ZDvL5hH3pR/IbLWziO8Ch3 YKNFYCszXiYucZvym07VtJsaa8Tj57SDlF8jX0lbCFsn6+bapImlvjBDcNRkt5FZ bfB2N7uip2c+cU1UrbSRX5tFTriFfOezo3ZHXFKy3r8LfXlY6AGbGji/Tmb0otLN McEOUIZeKjxF9MDcXiB9o7rH1q+EA3dFF3S7gZazgN3XPCQynvC6t0URl3lhbcWe KoaFfWu7i1iEHbAM+HIJxE+YEnUsCCLtyBkMQKuvLq12LM51owIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHPl+T4vT2MiH4KQhayBQiotVIwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmQzNTMwZmMtYWJhNC0z MGFhLWI1ZWUtNGNiNjdiNGU1MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcO0+OYojVSWfJUfwqR8i7lcD/Fjzy40gO 56z0mStrNt8AKlIVkhDlUrACRZV/dGB3Jza7UMqvzwkUnXpr+iv/+tBTuRV6Jt18 4e31iD+ZC5WVpIgGotT0EXPHKKaURnh+FPZkJ8KrsiS2DKtVfHHy8+ib8F4PCfPw Wyf3PzJo622bwWyM6wthbd7J1euTVaN/SJ8A0Wo84QqnfCMiwb562a3ph/9zeOTz j0KR149NL5JnYC2WmtFuZBaD+DtrfVZxAqjRjLPMRF+4sU4e3zQD3qrxPccP/W1H zpNKjW8Dt4jM7h/5jq6Y/BBWTyYdVNwW3fx4kSluygwDgBJj2Ci5 -----END CERTIFICATE-----Generated at Sat Jun 13 15:06:24 2026 by rpki-client