$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faf9b85d-3b9c-323c-ae39-48c887f5b988.roa File: faf9b85d-3b9c-323c-ae39-48c887f5b988.roa (raw, json) Hash identifier: 5WHSb/YKdYjgRYnD1PfQzwooOZa5/7RPAEYesFC6fSQ= Subject key identifier: 8F:7C:91:61:32:05:58:69:DE:B8:16:0F:DA:48:79:D4:E7:1D:CC:B2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E11B42DD1576FC596B5BC2A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faf9b85d-3b9c-323c-ae39-48c887f5b988.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 396982 IP address blocks: 192.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:2d:d1:57:6f:c5:96:b5:bc:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=6dd0f1a4-8c32-4356-a4aa-b34af7c00d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:70:2c:01:6c:69:a9:79:94:ce:7a:80:3a: dc:6b:80:92:08:59:a8:d6:05:91:8e:0e:af:f7:f2: 62:88:47:5f:9c:b1:b2:cf:0a:66:ae:b0:7d:ac:8e: d0:a2:96:33:71:5c:33:2c:4b:0a:55:00:ec:54:7e: 12:9c:dc:63:2e:aa:fd:76:19:af:25:7e:a4:d1:5f: 4b:b4:51:41:68:a3:a2:1f:af:0d:f4:1b:4b:5d:3e: 16:b7:60:08:d1:ef:18:67:56:93:8d:89:e3:44:6c: 07:3a:a0:d9:93:14:2a:a8:39:73:c2:33:42:86:b4: 18:b9:eb:9b:4d:49:ee:f6:65:f2:db:f0:83:21:59: ef:b6:6b:2b:7d:8c:88:9c:5c:4b:45:6f:7d:ef:cb: d7:6e:aa:27:b9:f5:d7:19:5c:77:a4:7f:4c:ca:59: 25:5b:0a:c1:e8:a7:c5:9a:00:6d:13:d0:cc:37:87: 3b:72:7b:cc:76:9f:80:5a:68:62:ff:5b:c9:a5:50: 43:95:0e:aa:d8:d2:39:1f:66:b0:12:bb:15:e9:01: 4c:5a:c7:c2:ce:ca:55:8a:90:63:10:57:8c:0b:f1: b0:19:fc:57:ed:54:a5:e1:e8:63:70:c8:c1:78:b7: e1:0c:aa:82:18:9c:13:61:31:05:96:58:7f:a4:9d: 6f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7C:91:61:32:05:58:69:DE:B8:16:0F:DA:48:79:D4:E7:1D:CC:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faf9b85d-3b9c-323c-ae39-48c887f5b988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 192.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:58:5f:72:ef:8e:11:b5:64:b7:5a:ba:98:cb:12:3a:7a:9c: 24:cd:bc:49:e8:0a:40:18:fd:55:e5:6d:17:9a:c6:68:d3:fa: 4b:52:a1:51:2b:80:ab:8d:45:19:f0:d5:83:2f:00:7f:43:ff: a2:9e:15:e7:11:bd:e5:44:0b:26:d1:97:f0:d0:96:c0:d7:33: 7d:3e:ba:f3:3f:c6:35:05:87:99:86:0f:55:eb:13:71:17:53: 61:fc:80:74:3b:cf:82:8f:c9:12:dc:73:55:ca:c5:b3:dd:8b: 46:61:14:b7:45:7e:24:07:26:b1:ba:ac:ac:65:fa:12:31:0f: 6c:e4:42:c5:66:2b:71:23:43:44:56:a5:1d:f2:f4:79:ec:78: dc:c7:74:84:a5:91:bf:0f:ee:8d:7c:a3:0b:ae:dc:18:d7:06: 3f:f7:4e:bc:25:1a:29:df:02:85:67:19:07:02:ac:41:69:41: c9:d3:12:2e:c8:29:b7:e5:47:62:78:cb:ae:52:5a:56:ef:11: 3b:da:49:7b:56:4e:07:4b:fa:c1:5e:da:43:ef:23:50:7f:76: 63:b2:49:56:97:27:5a:f0:5c:1d:53:fc:a1:8e:3d:28:23:43: 9c:e7:7b:fc:0e:f9:4a:39:23:6e:7f:5c:76:e0:c3:54:c3:24: 07:c8:55:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4RtC3RV2/FlrW8KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk NmRkMGYxYTQtOGMzMi00MzU2LWE0YWEtYjM0YWY3YzAwZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJNwLAFsaal5lM56gDrca4CSCFmo1gWRjg6v 9/JiiEdfnLGyzwpmrrB9rI7QopYzcVwzLEsKVQDsVH4SnNxjLqr9dhmvJX6k0V9L tFFBaKOiH68N9BtLXT4Wt2AI0e8YZ1aTjYnjRGwHOqDZkxQqqDlzwjNChrQYueub TUnu9mXy2/CDIVnvtmsrfYyInFxLRW9978vXbqonufXXGVx3pH9MylklWwrB6KfF mgBtE9DMN4c7cnvMdp+AWmhi/1vJpVBDlQ6q2NI5H2awErsV6QFMWsfCzspVipBj EFeMC/GwGfxX7VSl4ehjcMjBeLfhDKqCGJwTYTEFllh/pJ1v8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI98kWEyBVhp3rgWD9pIedTnHcyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmFmOWI4NWQtM2I5Yy0z MjNjLWFlMzktNDhjODg3ZjViOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJ4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlYX3LvjhG1ZLdaupjLEjp6nCTNvEnoCkAY/VXlbReaxmjT+ktSoVEr gKuNRRnw1YMvAH9D/6KeFecRveVECybRl/DQlsDXM30+uvM/xjUFh5mGD1XrE3EX U2H8gHQ7z4KPyRLcc1XKxbPdi0ZhFLdFfiQHJrG6rKxl+hIxD2zkQsVmK3EjQ0RW pR3y9HnseNzHdISlkb8P7o18owuu3BjXBj/3TrwlGinfAoVnGQcCrEFpQcnTEi7I KbflR2J4y65SWlbvETvaSXtWTgdL+sFe2kPvI1B/dmOySVaXJ1rwXB1T/KGOPSgj Q5zne/wO+Uo5I25/XHbgw1TDJAfIVWA= -----END CERTIFICATE-----Generated at Sun Jun 14 00:33:23 2026 by rpki-client