$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa File: 3c5788b1-7c82-3275-9457-c61ff52b2890.roa (raw, json) Hash identifier: TBr/IXEhcwhe83Xr9fx/Tb18G793KnOKysJyrij8Xlk= Subject key identifier: 41:52:22:88:40:C3:50:E1:5D:08:31:30:7B:6A:74:6B:94:A1:D3:29 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584E18AEEE4B64F292E4BDD9EAC0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 397422 IP address blocks: 208.56.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:ee:4b:64:f2:92:e4:bd:d9:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=5b7553c7-f062-4005-ab8c-2ace9bdde7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:68:9e:f2:a4:08:3d:a6:7f:6c:b8:d6:0c: 89:43:7d:1e:cb:8b:76:68:73:f9:b5:f0:19:a0:e3: e3:e5:62:d1:4e:8f:0b:b5:23:84:e8:9d:1f:72:97: d9:76:4b:81:e5:8d:72:6b:ec:d1:74:63:cb:a7:05: f0:ba:cf:73:92:50:a1:b9:1e:4e:8e:54:ea:d7:ec: 93:6a:38:41:29:ef:75:78:6b:ff:74:b5:bd:88:5f: da:5e:ef:5b:1c:b1:0d:ea:5a:59:94:5a:93:01:6e: bb:fa:6d:12:d9:89:32:e6:19:19:ed:99:a0:1e:e9: 8a:10:53:aa:ae:3f:7c:54:c5:a4:f7:3d:2f:70:6d: 31:47:29:e9:3d:7e:cb:bd:c9:e8:e4:fc:b8:3c:c7: 7b:50:bb:72:e8:0a:c2:23:58:92:5a:56:e7:bd:57: ee:39:dd:a1:2e:41:5e:bb:f1:7a:ed:c3:f2:6c:af: 7e:25:8a:ab:dc:93:ad:8d:6c:93:01:8e:88:88:2b: e4:2b:41:e0:e1:ac:36:a2:70:a8:e4:da:62:d0:c2: 6a:b8:96:7f:fd:17:7b:db:dc:0a:fd:40:ad:6d:ab: a6:b3:33:e4:73:ee:56:ec:c3:3b:8a:bb:f8:84:64: d8:24:3b:21:11:19:c7:50:85:f3:af:e0:58:66:e5: 2f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:52:22:88:40:C3:50:E1:5D:08:31:30:7B:6A:74:6B:94:A1:D3:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 208.56.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b0:05:d5:7b:b3:1b:03:2d:5d:cb:49:56:6b:cf:86:d3:6d: 27:08:9a:b0:74:1a:d8:a2:82:76:bf:c2:5f:60:88:8b:8d:6f: bb:e0:14:a4:88:12:d1:c0:cd:9d:9b:b1:ca:9b:eb:5b:21:59: 2b:24:5a:d6:68:05:01:e1:39:73:b0:df:d4:04:d0:6a:3c:9c: 9a:f8:d5:eb:1d:bc:5d:0f:6a:4b:59:6d:21:a7:84:8f:09:15: 4b:0d:dc:cd:64:3c:40:0d:60:39:4e:36:5a:19:8b:e5:98:db: 25:e3:61:34:85:79:ff:3c:dc:6e:40:a3:ae:62:2d:7f:6e:7d: c9:91:5b:14:bc:58:3e:0a:e6:f7:59:fe:81:cd:9a:7c:23:32: 2d:d3:de:6c:4a:36:89:75:56:b2:cd:99:45:52:bc:c1:7f:fb: ea:ab:46:d4:f4:62:b6:3b:64:34:82:39:48:43:a8:48:1e:a7: eb:fa:87:33:cc:1a:d5:f6:af:1a:e0:a7:c9:b5:b2:37:8c:86: 5d:c8:6c:80:26:8c:0d:a7:9b:59:ac:5b:ad:ac:63:98:71:7a: f9:38:40:6c:af:55:1b:7e:07:b6:38:21:2b:87:a6:79:6b:08: c4:e2:3d:51:cc:68:45:20:40:2c:43:b2:05:ab:6b:ef:b7:8a: 6b:d1:2e:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Yru5LZPKS5L3Z6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk NWI3NTUzYzctZjA2Mi00MDA1LWFiOGMtMmFjZTliZGRlN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOhonvKkCD2mf2y41gyJQ30ey4t2aHP5tfAZ oOPj5WLRTo8LtSOE6J0fcpfZdkuB5Y1ya+zRdGPLpwXwus9zklChuR5OjlTq1+yT ajhBKe91eGv/dLW9iF/aXu9bHLEN6lpZlFqTAW67+m0S2Yky5hkZ7ZmgHumKEFOq rj98VMWk9z0vcG0xRynpPX7Lvcno5Py4PMd7ULty6ArCI1iSWlbnvVfuOd2hLkFe u/F67cPybK9+JYqr3JOtjWyTAY6IiCvkK0Hg4aw2onCo5Npi0MJquJZ//Rd729wK /UCtbaumszPkc+5W7MM7irv4hGTYJDshERnHUIXzr+BYZuUvcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFSIohAw1DhXQgxMHtqdGuUodMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvM2M1Nzg4YjEtN2M4Mi0z Mjc1LTk0NTctYzYxZmY1MmIyODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCwBdV7sxsDLV3LSVZrz4bTbScImrB0Gtiigna/wl9giIuNb7vgFKSI EtHAzZ2bscqb61shWSskWtZoBQHhOXOw39QE0Go8nJr41esdvF0PaktZbSGnhI8J FUsN3M1kPEANYDlONloZi+WY2yXjYTSFef883G5Ao65iLX9ufcmRWxS8WD4K5vdZ /oHNmnwjMi3T3mxKNol1VrLNmUVSvMF/++qrRtT0YrY7ZDSCOUhDqEgep+v6hzPM GtX2rxrgp8m1sjeMhl3IbIAmjA2nm1msW62sY5hxevk4QGyvVRt+B7Y4ISuHpnlr CMTiPVHMaEUgQCxDsgWra++3imvRLsc= -----END CERTIFICATE-----Generated at Sat Jun 13 14:29:23 2026 by rpki-client