$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa File: 8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa (raw, json) Hash identifier: DsL1cX8rNVQRHN9AhR+w2VWCBKOgHmrpZoQ8YfVchWU= Subject key identifier: 75:A5:CA:E2:0D:98:E9:0F:A3:1A:54:53:F1:B0:3F:2F:3F:8F:7F:9C Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F4328584E04360ABABF9F1A5FCB59BA50 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 54840 IP address blocks: 192.30.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:0a:ba:bf:9f:1a:5f:cb:59:ba:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=a7cecbad-0bc2-4e9f-b335-f53ab5e8c1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:cc:1c:ce:92:c8:6f:2a:9d:d2:37:10:dc: 9a:fc:21:9c:8d:53:b1:b1:d9:40:71:df:6e:da:33: 3c:2f:86:52:41:ba:e7:c5:7d:23:74:40:11:ea:0e: d1:e9:3a:4f:00:74:5e:26:bb:aa:39:46:d4:85:ef: 11:db:9c:c4:91:dc:83:27:ef:0a:36:5b:58:ca:3d: a1:38:19:fe:74:43:af:7f:d1:7f:76:e4:74:16:16: 07:00:d9:9f:3b:8b:95:ba:2f:ca:be:05:5d:f2:a6: 03:c4:92:ff:5d:b0:d8:63:3d:80:af:2b:90:5f:9f: 6e:b1:1b:ff:7f:66:eb:e6:9d:35:9b:9a:2f:c6:23: a4:ba:15:a6:f8:4a:7d:b8:8e:85:7f:44:e0:61:87: 30:36:4e:7c:c5:39:6d:a1:7e:f9:d6:8c:59:55:01: 2b:0c:7a:da:97:b5:86:23:a0:3e:a4:54:2d:65:d2: 57:d8:2e:40:e3:f4:b0:dc:45:9a:99:e9:17:89:e5: bb:eb:19:5c:73:f8:71:b5:58:82:bc:8e:a3:6f:77: 25:70:c9:4e:34:78:7d:ef:07:9d:c3:b2:ce:18:d8: 6e:cf:57:72:61:40:59:e2:96:88:db:54:a5:4f:28: 89:4d:75:15:88:68:15:b0:e9:25:93:98:0a:92:a9: ca:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A5:CA:E2:0D:98:E9:0F:A3:1A:54:53:F1:B0:3F:2F:3F:8F:7F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 192.30.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7e:28:06:de:65:d3:da:44:de:9f:39:28:d4:a6:44:74:7f: 5c:f6:95:42:a5:61:93:81:14:9b:4f:f9:61:8e:f1:25:ca:cc: 15:21:d2:fa:b3:95:42:17:92:99:60:09:d2:cb:c9:c5:16:41: 32:ba:d0:98:c4:1b:87:b5:69:5b:9f:f8:6d:0b:5f:c9:ad:6e: b5:9a:df:62:a5:b2:15:7a:3b:ed:92:ca:f7:d8:ef:0e:51:93: a4:b5:1c:bb:fa:15:2d:5e:d5:04:1f:37:8a:dd:f2:01:e9:79: 9d:e5:33:f4:eb:0b:ee:e5:c5:05:35:a6:46:33:19:21:b1:2b: 44:94:89:8b:f1:a1:63:4b:f1:ac:6d:b9:45:41:de:e6:5d:de: aa:21:bb:41:bf:17:7f:5f:92:c3:2c:90:e2:58:7d:ee:bd:c2: 83:15:0d:fc:01:dc:47:f8:6f:d9:a3:db:04:b8:7f:a0:72:ca: 82:d7:b3:85:2f:6d:be:4b:4e:2e:fa:24:6b:c1:e7:51:01:c4: fa:73:00:bc:be:aa:5a:ad:3a:2d:b7:69:3a:fa:32:5f:54:ac: b6:b1:23:44:4a:c6:60:b3:35:48:93:1e:3f:fd:5a:10:1d:e4: e7:af:c9:f3:2b:d4:ed:50:4c:55:7d:63:31:d2:66:6f:90:61: dc:d3:85:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENgq6v58aX8tZulAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YTdjZWNiYWQtMGJjMi00ZTlmLWIzMzUtZjUzYWI1ZThjMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYTMHM6SyG8qndI3ENya/CGcjVOxsdlAcd9u 2jM8L4ZSQbrnxX0jdEAR6g7R6TpPAHReJruqOUbUhe8R25zEkdyDJ+8KNltYyj2h OBn+dEOvf9F/duR0FhYHANmfO4uVui/KvgVd8qYDxJL/XbDYYz2AryuQX59usRv/ f2br5p01m5ovxiOkuhWm+Ep9uI6Ff0TgYYcwNk58xTltoX751oxZVQErDHral7WG I6A+pFQtZdJX2C5A4/Sw3EWamekXieW76xlcc/hxtViCvI6jb3clcMlONHh97wed w7LOGNhuz1dyYUBZ4paI21SlTyiJTXUViGgVsOklk5gKkqnKFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWlyuINmOkPoxpUU/GwPy8/j3+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvOGE0MDc0NGEtZWNmMS0z NjEwLWI5ZDYtOWRhN2RhODcwN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp+KAbeZdPaRN6fOSjUpkR0f1z2lUKlYZOBFJtP+WGO8SXKzBUh0vqz lUIXkplgCdLLycUWQTK60JjEG4e1aVuf+G0LX8mtbrWa32KlshV6O+2SyvfY7w5R k6S1HLv6FS1e1QQfN4rd8gHpeZ3lM/TrC+7lxQU1pkYzGSGxK0SUiYvxoWNL8axt uUVB3uZd3qohu0G/F39fksMskOJYfe69woMVDfwB3Ef4b9mj2wS4f6ByyoLXs4Uv bb5LTi76JGvB51EBxPpzALy+qlqtOi23aTr6Ml9UrLaxI0RKxmCzNUiTHj/9WhAd 5OevyfMr1O1QTFV9YzHSZm+QYdzThYI= -----END CERTIFICATE-----Generated at Sun Jun 14 02:11:16 2026 by rpki-client