$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa File: 966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa (raw, json) Hash identifier: hhYmgAYKhSE3MO/kYyDmb96aO05p9i/fSg2Hwwvj+FQ= Subject key identifier: 60:E1:07:18:89:E3:8C:42:A6:3A:17:AC:BA:FB:9B:8E:C7:AB:BD:0B Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584E0C1EDB387CB1A05AF3C4B780 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 398813 IP address blocks: 192.206.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:db:38:7c:b1:a0:5a:f3:c4:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=c63b1cd5-f542-427c-a62f-86ff23d0fa78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:de:b7:5b:f6:26:0c:41:8a:36:28:9f:c2: 0f:28:b1:5f:09:51:f0:ee:c6:66:06:6d:2d:b1:c1: 65:90:0d:d2:b0:77:b0:14:b3:a1:45:42:fd:ce:9b: 68:a4:0b:c0:8d:f7:ce:50:ce:2f:55:b1:9a:26:05: 7f:41:e7:31:34:35:11:a8:9f:c9:11:53:f0:2d:a1: ec:ef:d9:6d:d4:76:70:0a:43:31:a5:1b:d4:93:3e: c2:4b:04:af:e8:d0:3f:53:15:88:f8:b6:02:8c:01: 1b:cd:f4:86:37:6f:ec:45:71:18:c1:56:54:6f:c4: 09:e6:5d:e7:b5:49:7f:70:ae:11:2f:64:92:23:6a: 33:f6:4e:7d:ff:b5:59:c7:80:2e:e7:89:fa:56:f1: b2:e1:4d:3c:aa:47:bd:c6:12:30:8b:f7:82:2b:3b: 9e:5a:8e:be:8b:b1:0d:e9:22:ae:f3:56:71:53:87: bd:08:2a:f1:0c:2c:cf:2a:67:14:23:2c:3b:52:b9: 48:1b:4b:d6:7d:0c:00:97:40:02:ae:80:0a:06:ef: 2f:6c:99:0c:92:53:ab:44:c1:19:6c:8d:b9:75:90: 66:10:29:67:b2:bf:0b:c3:1f:0f:1b:40:f0:3e:99: 91:8d:7f:7c:c0:59:5e:e1:2b:b5:a1:c3:db:83:73: ef:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E1:07:18:89:E3:8C:42:A6:3A:17:AC:BA:FB:9B:8E:C7:AB:BD:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 192.206.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9f:94:59:de:c6:8b:e1:cc:e9:6b:c9:85:09:ef:a7:d9:d1: a1:2e:86:7d:57:a0:12:dc:f3:b5:bc:a6:d7:2a:20:c1:34:c0: 2c:71:8e:32:7f:fa:6d:09:48:0c:01:f7:2a:e6:0f:fa:8d:47: b7:ba:6d:63:c0:03:5e:89:f3:90:af:b5:97:73:a7:dd:82:a3: fd:d9:56:a2:a0:a5:05:3c:c4:83:db:46:96:25:9e:f5:7b:17: ad:61:f6:4a:f1:94:72:9a:04:81:d7:c9:d1:a1:00:3c:4f:98: c2:16:ef:d5:47:c7:25:ce:22:84:fa:3c:c2:6d:a6:80:22:e7: 38:c7:d4:1f:17:d4:f5:e8:c6:14:09:81:47:0e:11:57:c8:76: d0:6f:5e:ad:59:61:44:eb:19:53:d5:fd:b1:39:21:5b:49:35: 96:19:c8:32:ed:b8:cf:b0:ff:1f:15:5f:8f:21:83:e2:33:aa: 86:6b:71:42:f3:4f:66:04:42:d0:22:cc:e8:f0:d7:da:80:df: a2:39:e3:f9:b0:67:aa:7d:e7:bd:32:90:f9:ee:64:38:2c:b7: d3:31:4d:d2:c4:bc:14:6b:9c:98:23:5b:af:9a:b8:c8:cf:79: 57:cb:6b:88:24:06:c5:be:c0:67:8a:f4:55:e1:fd:c8:77:3a: f7:9d:7d:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHts4fLGgWvPEt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YzYzYjFjZDUtZjU0Mi00MjdjLWE2MmYtODZmZjIzZDBmYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha3et1v2JgxBijYon8IPKLFfCVHw7sZmBm0t scFlkA3SsHewFLOhRUL9zptopAvAjffOUM4vVbGaJgV/QecxNDURqJ/JEVPwLaHs 79lt1HZwCkMxpRvUkz7CSwSv6NA/UxWI+LYCjAEbzfSGN2/sRXEYwVZUb8QJ5l3n tUl/cK4RL2SSI2oz9k59/7VZx4Au54n6VvGy4U08qke9xhIwi/eCKzueWo6+i7EN 6SKu81ZxU4e9CCrxDCzPKmcUIyw7UrlIG0vWfQwAl0ACroAKBu8vbJkMklOrRMEZ bI25dZBmEClnsr8Lwx8PG0DwPpmRjX98wFle4Su1ocPbg3PvDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDhBxiJ44xCpjoXrLr7m47Hq70LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvOTY2YjJlZjQtMmY3Ni0z NDcyLTg3ZjUtYTVkNmMxZmMyYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyflFnexovhzOlryYUJ76fZ0aEuhn1XoBLc87W8ptcqIME0wCxxjjJ/ +m0JSAwB9yrmD/qNR7e6bWPAA16J85CvtZdzp92Co/3ZVqKgpQU8xIPbRpYlnvV7 F61h9krxlHKaBIHXydGhADxPmMIW79VHxyXOIoT6PMJtpoAi5zjH1B8X1PXoxhQJ gUcOEVfIdtBvXq1ZYUTrGVPV/bE5IVtJNZYZyDLtuM+w/x8VX48hg+IzqoZrcULz T2YEQtAizOjw19qA36I54/mwZ6p9570ykPnuZDgst9MxTdLEvBRrnJgjW6+auMjP eVfLa4gkBsW+wGeK9FXh/ch3OvedfYw= -----END CERTIFICATE-----Generated at Sat Jun 13 16:16:37 2026 by rpki-client