$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa File: a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa (raw, json) Hash identifier: UYR5D0FRMZe/RtT4bCxjq5x7UdswFogl8Fsv9lZjHiA= Subject key identifier: 45:61:B5:2A:4C:37:FE:59:E1:1C:19:48:3B:27:19:D5:DB:72:09:06 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584E210F2DAA72C178DD9CD58FC0 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 33363 IP address blocks: 173.198.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0f:2d:aa:72:c1:78:dd:9c:d5:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=94f6daaa-d39c-4452-b72a-7791a56ac117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:83:71:5f:f9:63:54:51:c2:fe:10:3e:81:6c: 85:86:22:f6:7f:50:1a:2f:dc:44:2d:62:3f:6d:fa: 15:43:6a:74:01:25:ca:bc:9b:6a:80:e9:61:be:58: 78:67:72:a9:b6:45:af:d1:34:40:bc:88:bb:81:46: 5f:8b:e9:15:bf:b3:c3:d5:8b:e0:7f:67:f4:fb:12: d1:07:b8:54:e2:89:ef:0a:45:ef:a7:7d:fc:6a:c6: c3:95:06:36:d4:4c:a8:ad:42:37:9a:4a:61:df:9d: 43:f5:f3:bd:43:26:0a:59:18:de:36:d4:84:04:f2: 2f:c0:f8:ed:72:cb:cf:1a:31:2f:78:21:42:e6:01: 6f:8a:1d:17:41:fe:91:a5:05:1b:94:c1:fc:c1:bb: 15:f5:d2:6d:48:3b:30:fd:cf:2c:b6:47:65:9b:3e: 96:66:4a:0f:0a:26:96:0d:93:ba:e2:e8:c3:2b:d5: 09:45:c0:f9:79:71:cd:f4:f6:09:9e:55:e6:54:de: 3b:75:28:dd:53:cd:11:3e:ce:17:19:f9:3b:18:34: ef:ba:52:cf:c1:a8:07:71:13:36:5f:a7:f0:63:f2: 3e:27:f9:93:9d:34:9e:24:83:50:03:5e:f7:49:9e: ca:98:11:52:19:75:8b:4b:a6:9c:74:8c:70:3d:a8: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:61:B5:2A:4C:37:FE:59:E1:1C:19:48:3B:27:19:D5:DB:72:09:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 173.198.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f5:27:9d:fb:4e:ae:c0:f5:f6:4d:79:a0:3d:78:fe:6f:de: 7e:19:c6:f6:73:60:18:f2:93:1d:9d:03:27:90:97:c6:70:2e: 18:36:6f:a1:92:0a:0a:92:cb:5b:34:1c:33:0a:6f:6e:49:8e: 9a:58:9a:c4:7b:7d:8d:62:c4:71:35:05:20:58:33:c5:3c:51: c4:d5:09:ad:ae:b1:81:0b:7a:96:22:46:0c:3d:96:3f:b8:69: 5a:19:18:7e:10:44:b9:e3:b9:f8:69:b1:65:40:dd:9f:ba:18: ff:3a:f0:f4:61:eb:d4:72:ef:d2:af:bd:cb:94:37:9b:8c:52: 68:cf:0a:2b:16:a5:d6:2c:25:1b:8b:3a:86:89:b3:a4:79:52: 67:b0:3e:81:29:aa:de:09:b1:e3:a8:0b:f2:73:d1:98:02:c3: 6c:87:96:6f:64:5e:52:26:21:8a:da:6c:d4:8f:4d:c4:39:ed: 10:47:20:b2:83:1e:44:7d:a8:5e:13:29:74:4f:91:e2:32:bb: bc:40:21:28:b9:58:1e:71:af:36:a3:b5:26:dd:00:f3:f0:05: 1c:fa:ae:23:97:f3:1a:54:3d:17:7f:2d:dc:1d:1b:0d:50:cc: a3:6c:8e:73:51:98:6a:4f:01:35:0a:bf:5c:c6:13:57:0e:6c: f4:53:29:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDy2qcsF43ZzVj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk OTRmNmRhYWEtZDM5Yy00NDUyLWI3MmEtNzc5MWE1NmFjMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkINxX/ljVFHC/hA+gWyFhiL2f1AaL9xELWI/ bfoVQ2p0ASXKvJtqgOlhvlh4Z3KptkWv0TRAvIi7gUZfi+kVv7PD1Yvgf2f0+xLR B7hU4onvCkXvp338asbDlQY21EyorUI3mkph351D9fO9QyYKWRjeNtSEBPIvwPjt csvPGjEveCFC5gFvih0XQf6RpQUblMH8wbsV9dJtSDsw/c8stkdlmz6WZkoPCiaW DZO64ujDK9UJRcD5eXHN9PYJnlXmVN47dSjdU80RPs4XGfk7GDTvulLPwagHcRM2 X6fwY/I+J/mTnTSeJINQA173SZ7KmBFSGXWLS6acdIxwPajk9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVhtSpMN/5Z4RwZSDsnGdXbcgkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTNlOGFlMmEtNTEwNS0z Mjk1LWE3Y2UtZDI0OGUzYTIyYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb1J537Tq7A9fZNeaA9eP5v3n4ZxvZzYBjykx2dAyeQl8ZwLhg2b6GS CgqSy1s0HDMKb25JjppYmsR7fY1ixHE1BSBYM8U8UcTVCa2usYELepYiRgw9lj+4 aVoZGH4QRLnjufhpsWVA3Z+6GP868PRh69Ry79KvvcuUN5uMUmjPCisWpdYsJRuL OoaJs6R5UmewPoEpqt4JseOoC/Jz0ZgCw2yHlm9kXlImIYrabNSPTcQ57RBHILKD HkR9qF4TKXRPkeIyu7xAISi5WB5xrzajtSbdAPPwBRz6riOX8xpUPRd/LdwdGw1Q zKNsjnNRmGpPATUKv1zGE1cObPRTKaM= -----END CERTIFICATE-----Generated at Sat Jun 13 21:01:38 2026 by rpki-client