$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9aa8b520-a41b-38d8-90fc-b7e1b0932c20.roa File: 9aa8b520-a41b-38d8-90fc-b7e1b0932c20.roa (raw, json) Hash identifier: XnzD5SmIH/LqfYQGVlrYvh9tjfT15J0uWCWHvC+9xsg= Subject key identifier: 83:FB:3D:D3:EF:8E:01:E7:58:42:9E:AB:60:EB:DA:2F:4B:F5:4D:C2 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584DF4DBA42D6B3E094AD4549B00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9aa8b520-a41b-38d8-90fc-b7e1b0932c20.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 394165 IP address blocks: 198.85.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:a4:2d:6b:3e:09:4a:d4:54:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=b67f75bb-7f9e-4dbf-8fe7-bd7157b2224d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6f:02:36:0e:ef:6b:92:91:67:83:3a:8a:ad: f1:b6:d8:1a:ba:89:fd:7b:0c:60:08:5d:b5:6a:9a: 3a:2b:7d:49:e9:7b:86:43:1b:4e:47:8e:23:07:4f: ce:e2:88:49:16:90:bd:00:e9:85:87:32:5b:46:76: 98:17:60:b2:7d:b0:50:9d:3a:8e:79:4e:35:b6:57: dc:97:c5:06:04:b6:5f:b4:38:43:be:bc:03:99:f4: d1:7a:59:71:ce:17:4f:1e:bf:2f:ff:60:82:bc:30: 60:32:26:8f:80:29:fa:67:8d:12:c6:12:04:45:e5: a3:7b:b0:47:b7:98:2a:30:67:e2:66:c2:67:24:73: 16:6d:e9:00:7e:55:3a:42:42:17:b1:e3:6e:e9:c8: d9:22:f3:4d:59:33:31:c4:8a:44:03:5a:ce:ba:92: 9d:58:f7:f8:43:cb:07:9d:5f:ab:d6:17:4b:a5:dd: 9c:48:4c:f8:bb:7f:26:78:12:72:a1:b8:ef:e2:d5: d6:43:b1:15:64:8f:d3:ee:3e:f5:d4:48:f8:e8:ae: 86:95:82:b8:b2:7f:a0:2a:0e:2d:03:b1:f4:f1:6b: 96:14:db:56:36:8e:b4:20:0c:6e:a6:89:79:cd:6a: f9:2c:15:11:4d:fc:ad:0f:ad:c4:48:13:c9:e5:4b: 64:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FB:3D:D3:EF:8E:01:E7:58:42:9E:AB:60:EB:DA:2F:4B:F5:4D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9aa8b520-a41b-38d8-90fc-b7e1b0932c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:85:80:b7:31:bf:a3:2d:66:62:79:25:f6:85:86:59:40:7b: 3f:98:10:f0:6a:6d:ef:03:09:af:6e:9f:80:0b:bc:08:d7:ff: ae:39:b1:f5:06:94:67:a5:10:d2:86:0e:3b:0e:7a:da:ff:2f: 76:4c:23:af:4d:51:78:03:f0:bd:05:50:2c:50:84:f3:23:9a: 81:ce:21:d6:0f:78:87:e3:03:e0:10:a5:10:25:68:69:c3:d1: 13:eb:ea:e6:20:3d:61:c3:28:68:a4:ec:cc:74:33:97:ee:c3: de:58:5d:b8:c6:c9:4a:da:71:48:4b:b6:85:1b:f8:32:5a:a4: f2:1c:55:42:f6:8c:57:0c:44:ca:a5:c0:90:68:d2:09:97:2b: c9:e4:b7:34:0d:9e:71:64:5a:58:77:e7:a3:a0:28:84:9c:11: 06:9a:fa:f1:ea:37:82:28:f1:90:8e:65:72:d0:83:f7:e5:29: 58:32:72:64:15:ef:1a:84:87:54:b6:0e:5f:fa:79:a9:49:15: 6a:69:1e:44:98:47:5f:b1:5a:c1:bf:b3:a2:35:f9:3b:ff:37: ee:ca:a1:30:62:99:a0:4a:4f:a7:08:35:f6:7f:b3:c5:db:9d: e5:c0:9e:67:ee:a7:d5:db:e7:4b:cf:6c:7c:c2:96:f1:1b:87: 1d:78:2a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3026Qtaz4JStRUmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YjY3Zjc1YmItN2Y5ZS00ZGJmLThmZTctYmQ3MTU3YjIyMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm8CNg7va5KRZ4M6iq3xttgauon9ewxgCF21 apo6K31J6XuGQxtOR44jB0/O4ohJFpC9AOmFhzJbRnaYF2CyfbBQnTqOeU41tlfc l8UGBLZftDhDvrwDmfTRellxzhdPHr8v/2CCvDBgMiaPgCn6Z40SxhIEReWje7BH t5gqMGfiZsJnJHMWbekAflU6QkIXseNu6cjZIvNNWTMxxIpEA1rOupKdWPf4Q8sH nV+r1hdLpd2cSEz4u38meBJyobjv4tXWQ7EVZI/T7j711Ej46K6GlYK4sn+gKg4t A7H08WuWFNtWNo60IAxupol5zWr5LBURTfytD63ESBPJ5UtkkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP7PdPvjgHnWEKeq2Dr2i9L9U3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWFhOGI1MjAtYTQxYi0z OGQ4LTkwZmMtYjdlMWIwOTMyYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2FgLcxv6MtZmJ5JfaFhllAez+YEPBqbe8DCa9un4ALvAjX/645sfUG lGelENKGDjsOetr/L3ZMI69NUXgD8L0FUCxQhPMjmoHOIdYPeIfjA+AQpRAlaGnD 0RPr6uYgPWHDKGik7Mx0M5fuw95YXbjGyUracUhLtoUb+DJapPIcVUL2jFcMRMql wJBo0gmXK8nktzQNnnFkWlh356OgKIScEQaa+vHqN4Io8ZCOZXLQg/flKVgycmQV 7xqEh1S2Dl/6ealJFWppHkSYR1+xWsG/s6I1+Tv/N+7KoTBimaBKT6cINfZ/s8Xb neXAnmfup9Xb50vPbHzClvEbhx14Ki4= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:40 2026 by rpki-client