$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa File: 328a9f9e-f8c1-360f-88b5-5283333c29d7.roa (raw, json) Hash identifier: UfBGpbf67ejCrdM1PY0dcP4/yYBkGFe8bVbZGmVkscU= Subject key identifier: FF:C3:6C:04:41:34:AF:39:D4:6A:C9:13:46:45:EE:A6:61:16:33:AA Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Certificate serial: 010D0C9F4328584E0D84276488AD0685920EF880 Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 46694 IP address blocks: 216.229.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:27:64:88:ad:06:85:92:0e:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=3892cd16-1110-47ea-b196-a2a6fe1e3b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:12:74:73:b3:94:7e:e3:e3:48:b2:e6:eb: b4:ed:cd:1f:2a:23:88:f7:47:14:ea:72:3e:36:e8: 13:ea:6e:09:c5:d8:52:a2:ce:5e:cd:fc:44:c1:92: cb:b7:55:03:6b:05:44:3c:b7:f7:01:ca:97:42:14: b5:de:6c:74:2a:3f:85:56:63:ad:ea:ae:7f:12:81: 8d:4f:1c:15:6c:5f:e1:27:5b:05:c0:b6:32:3a:1a: 9d:92:47:fd:92:41:c5:42:f0:e7:71:20:59:63:9d: 83:5f:91:c6:2f:11:28:67:e7:f3:b0:11:ae:48:29: 8d:fb:cf:37:10:72:dd:9e:04:62:36:32:d9:bc:df: c0:c0:a9:2f:c7:59:2f:e4:95:d6:c5:c1:35:45:14: d3:85:0a:49:c5:8a:e2:e4:06:0b:a7:a4:26:5a:43: cb:aa:d8:03:87:bd:ce:7e:98:ae:d3:1e:59:95:13: 59:46:59:b6:9b:a2:23:ec:9c:72:a2:00:fb:b4:60: 13:20:57:e1:11:13:01:a6:21:6f:8c:7d:45:58:35: 5c:b5:5c:f6:ac:19:ae:0a:33:f0:2b:6a:d6:26:dc: 16:52:c4:64:81:cc:f3:62:c5:7b:db:31:52:55:2d: 53:b6:e2:77:c5:2c:d7:a4:da:6a:6e:44:af:f3:be: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C3:6C:04:41:34:AF:39:D4:6A:C9:13:46:45:EE:A6:61:16:33:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl X509v3 Authority Key Identifier: keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer sbgp-ipAddrBlock: critical IPv4: 216.229.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:27:dc:68:8b:8c:d1:68:3f:31:92:d6:e1:1f:f4:e3:b1:80: 2c:8a:54:46:89:25:ad:da:44:ad:0b:7b:83:85:dd:ae:4f:50: 02:5a:6c:18:51:98:80:93:6f:6a:f0:f4:1c:f9:02:09:88:42: 96:06:44:9e:cb:2f:5e:42:65:2d:66:d6:ca:42:1d:c4:c0:6d: b6:4f:81:a0:4a:43:dc:ee:ed:3f:72:27:f5:04:5b:9b:3e:06: e0:7c:04:12:87:b1:73:81:f7:89:ed:81:ed:65:f7:54:43:ac: 7f:08:63:99:0d:63:8a:9b:ed:b1:39:2a:b0:89:bd:d3:4f:08: 41:27:09:cd:43:da:f6:a3:52:7d:74:6a:dd:dc:69:11:4a:24: 0f:20:53:54:98:fe:4c:b2:13:e4:92:a9:c0:6a:c5:c7:87:86: fe:50:68:6c:db:90:ef:e7:ac:fd:42:8d:d9:61:06:39:69:b9: 04:e6:35:f2:dc:f2:91:dc:f5:18:27:f5:3e:58:54:3d:b3:d3: 71:20:13:8b:c5:77:b3:fb:cd:19:db:8e:ab:04:3d:40:00:5d: c8:04:76:39:48:a9:63:3e:b2:99:07:0a:51:26:f5:f5:41:fa: 7d:df:4a:9a:30:ae:75:89:12:bc:63:dd:4d:ec:41:42:7c:f8: be:16:35:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCdkiK0GhZIO+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVjNGVhYWItYTkyNy00MWM4LWI5NGQtZDVkYzdiYTNk OTAxMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk Mzg5MmNkMTYtMTExMC00N2VhLWIxOTYtYTJhNmZlMWUzYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle8SdHOzlH7j40iy5uu07c0fKiOI90cU6nI+ NugT6m4JxdhSos5ezfxEwZLLt1UDawVEPLf3AcqXQhS13mx0Kj+FVmOt6q5/EoGN TxwVbF/hJ1sFwLYyOhqdkkf9kkHFQvDncSBZY52DX5HGLxEoZ+fzsBGuSCmN+883 EHLdngRiNjLZvN/AwKkvx1kv5JXWxcE1RRTThQpJxYri5AYLp6QmWkPLqtgDh73O fpiu0x5ZlRNZRlm2m6Ij7JxyogD7tGATIFfhERMBpiFvjH1FWDVctVz2rBmuCjPw K2rWJtwWUsRkgczzYsV72zFSVS1TtuJ3xSzXpNpqbkSv874omQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/DbARBNK851GrJE0ZF7qZhFjOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0 ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRjN2JhM2Q5MDEvMzI4YTlmOWUtZjhjMS0z NjBmLTg4YjUtNTI4MzMzM2MyOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWVjNGVhYWItYTkyNy00MWM4LWI5 NGQtZDVkYzdiYTNkOTAxLzVlYzRlYWFiLWE5MjctNDFjOC1iOTRkLWQ1ZGM3YmEz ZDkwMS5jcmwwHwYDVR0jBBgwFoAUPLew0jKWKIjnlbiMEySNE53NbQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRj N2JhM2Q5MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwn3GiLjNFoPzGS1uEf9OOxgCyKVEaJJa3aRK0Le4OF3a5PUAJabBhR mICTb2rw9Bz5AgmIQpYGRJ7LL15CZS1m1spCHcTAbbZPgaBKQ9zu7T9yJ/UEW5s+ BuB8BBKHsXOB94ntge1l91RDrH8IY5kNY4qb7bE5KrCJvdNPCEEnCc1D2vajUn10 at3caRFKJA8gU1SY/kyyE+SSqcBqxceHhv5QaGzbkO/nrP1CjdlhBjlpuQTmNfLc 8pHc9Rgn9T5YVD2z03EgE4vFd7P7zRnbjqsEPUAAXcgEdjlIqWM+spkHClEm9fVB +n3fSpowrnWJErxj3U3sQUJ8+L4WNc0= -----END CERTIFICATE-----Generated at Sat Jun 13 16:47:24 2026 by rpki-client