$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa File: 233688fe-a33c-3a81-9597-da16bac00035.roa (raw, json) Hash identifier: CVqPrL5L8YAyK1d20xGyl9yzFdCzt+obsVVJtAm6rPk= Subject key identifier: CE:F6:CB:F1:31:C2:78:8F:76:34:E6:52:2A:A0:7B:10:B1:C7:8A:EA Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a Certificate serial: 010D0C9F4328584E1E44575342C07B546CFE7C00 Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 192.41.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:57:53:42:c0:7b:54:6c:fe:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=deb1a2e9-711a-4722-a32a-c4b69f4fe5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:fa:a1:0e:50:f0:43:74:a7:60:cb:db:d9: a6:dc:9c:4e:39:91:8e:07:a3:f3:f7:42:71:ff:53: 35:4a:00:6b:27:b3:71:f2:be:82:7a:30:e4:42:b3: 9b:f7:5f:a0:37:46:fa:3b:af:c2:64:15:65:6a:9b: 2f:bc:6f:ae:86:ee:a3:05:46:68:d8:95:1d:8c:1d: 0a:67:74:f6:fe:fa:fe:c1:c3:f9:6e:64:ab:a9:ce: a4:66:bf:61:90:1c:4b:fe:f1:f8:78:06:b4:d1:57: d7:92:c6:86:03:33:b8:02:98:e3:57:7f:60:5a:62: ba:c3:88:8e:55:91:48:81:f1:eb:c2:8a:ef:fa:d7: 05:dd:1c:7e:65:8a:a7:db:6c:87:28:6f:ee:d5:2c: 4a:91:82:a3:ac:37:f4:73:c8:cf:44:36:c0:58:8d: ea:12:62:f7:87:2d:44:56:f3:d3:d6:50:14:ce:d3: 56:c4:61:3e:d8:16:6e:ef:45:93:d4:c4:0c:8f:60: 46:08:5f:a3:51:fb:3b:ae:c4:31:e9:23:be:c1:5c: c2:91:11:87:b8:ef:88:06:84:87:ee:0c:7a:30:e1: 94:82:e1:ca:9a:4b:d8:94:14:5e:74:0a:42:04:2b: cf:0d:8c:1c:e4:0b:82:4d:fa:79:f9:ae:ca:18:1c: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F6:CB:F1:31:C2:78:8F:76:34:E6:52:2A:A0:7B:10:B1:C7:8A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl X509v3 Authority Key Identifier: keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer sbgp-ipAddrBlock: critical IPv4: 192.41.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a4:0f:64:a9:73:dd:47:d8:98:39:ce:11:70:15:bc:ee:ec: 34:87:e8:d9:96:4a:65:a9:37:8a:3d:1d:59:67:ef:24:3f:0c: 3e:f8:b1:33:2e:fb:c1:8e:ee:07:fe:8f:a3:9b:3b:15:50:7b: 93:c4:9d:ec:15:ce:21:f7:c9:3e:f8:7b:dd:82:23:25:20:f9: d8:d3:f1:3d:7d:61:42:b4:d7:73:df:7b:8f:e1:b7:a9:ef:ca: 44:83:57:11:3b:1d:39:8e:41:4e:99:47:81:0c:92:33:d1:a6: 36:62:9b:06:00:a3:25:07:94:a0:3a:40:4c:cb:7c:31:da:19: e2:d9:5a:88:1d:f7:3c:24:2c:48:26:74:87:55:17:39:f2:db: e1:ce:1a:d0:5e:e4:68:f4:8c:b4:dc:08:6b:3e:bb:7e:4c:cf: a6:31:9b:02:53:0c:2c:21:73:2e:24:3b:5f:c6:65:8a:b2:83: 37:c5:c2:32:7e:9b:7c:78:24:6e:08:e8:f3:c9:95:f9:91:ef: 41:1e:f1:b9:44:58:c9:1f:f6:10:f2:e0:50:73:71:0b:3a:2a: 23:39:ff:bd:7a:43:76:ff:c5:13:11:81:8b:86:9f:79:85:07: 2c:1e:2e:0f:4f:35:a5:aa:13:12:f1:c8:46:47:a8:1b:e8:47: 78:92:46:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFdTQsB7VGz+fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0 MjJhMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZGViMWEyZTktNzExYS00NzIyLWEzMmEtYzRiNjlmNGZlNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhL6oQ5Q8EN0p2DL29mm3JxOOZGOB6Pz90Jx /1M1SgBrJ7Nx8r6CejDkQrOb91+gN0b6O6/CZBVlapsvvG+uhu6jBUZo2JUdjB0K Z3T2/vr+wcP5bmSrqc6kZr9hkBxL/vH4eAa00VfXksaGAzO4ApjjV39gWmK6w4iO VZFIgfHrworv+tcF3Rx+ZYqn22yHKG/u1SxKkYKjrDf0c8jPRDbAWI3qEmL3hy1E VvPT1lAUztNWxGE+2BZu70WT1MQMj2BGCF+jUfs7rsQx6SO+wVzCkRGHuO+IBoSH 7gx6MOGUguHKmkvYlBRedApCBCvPDYwc5AuCTfp5+a7KGBxpnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM72y/ExwniPdjTmUiqgexCxx4rqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvMjMzNjg4ZmUtYTMzYy0z YTgxLTk1OTctZGExNmJhYzAwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3 ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0 NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0 MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2kD2Spc91H2Jg5zhFwFbzu7DSH6NmWSmWpN4o9HVln7yQ/DD74sTMu +8GO7gf+j6ObOxVQe5PEnewVziH3yT74e92CIyUg+djT8T19YUK013Pfe4/ht6nv ykSDVxE7HTmOQU6ZR4EMkjPRpjZimwYAoyUHlKA6QEzLfDHaGeLZWogd9zwkLEgm dIdVFzny2+HOGtBe5Gj0jLTcCGs+u35Mz6YxmwJTDCwhcy4kO1/GZYqygzfFwjJ+ m3x4JG4I6PPJlfmR70Ee8blEWMkf9hDy4FBzcQs6KiM5/716Q3b/xRMRgYuGn3mF ByweLg9PNaWqExLxyEZHqBvoR3iSRhI= -----END CERTIFICATE-----Generated at Sun Jun 14 02:36:18 2026 by rpki-client