$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/cf33a276-5802-3ecd-a59a-911aab6182e6.roa File: cf33a276-5802-3ecd-a59a-911aab6182e6.roa (raw, json) Hash identifier: w37jA9zAX0Arwe8kFrijPRXBYE3uxDU1wtJQQvpBoBs= Subject key identifier: 5F:F4:3C:D5:96:33:DB:A5:4D:33:36:FA:77:E1:C2:15:13:7A:AE:F1 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584E07008C7C3FD0A07B9867C240 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/cf33a276-5802-3ecd-a59a-911aab6182e6.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 9009 IP address blocks: 198.145.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:8c:7c:3f:d0:a0:7b:98:67:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=54a833b4-afcd-4eb1-887d-7ccfca2ba49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:9d:07:30:46:db:d4:6e:c1:ff:69:1f:ba: 00:09:10:6e:28:04:4f:2f:dd:fd:4c:e8:16:26:ab: 77:ae:da:77:2d:d3:36:0b:6c:ba:c9:e6:14:f8:6e: 84:a1:e5:9b:6d:8c:43:b3:bd:98:0d:1c:f2:e2:5c: 0e:8b:cc:ed:2c:72:45:03:1b:ba:ba:1a:de:f5:f9: 63:dc:ff:76:1e:32:23:e5:64:db:d1:66:9e:be:07: 6b:81:7c:b4:71:93:75:78:39:c1:06:21:40:67:12: bc:72:ee:d4:d3:d3:d9:43:1b:17:86:a1:96:6f:37: f7:e3:22:1b:29:86:cd:0e:6d:9a:53:33:71:62:18: 9a:19:85:ff:70:a8:ec:2e:66:e2:fa:a2:e7:72:49: 3b:db:94:13:9c:35:45:ed:c0:4e:f0:2a:fa:d5:e8: a7:33:0a:bb:81:2d:b5:b4:61:9b:f0:44:c0:1a:84: d8:1a:68:b2:95:57:18:8c:50:44:23:a4:c9:3a:09: 95:b6:9d:f4:8f:9f:5b:61:9f:e9:a8:a8:57:ad:e2: 7c:c1:6b:0a:71:8a:50:cf:f9:c1:13:73:82:ca:96: ac:55:84:2a:33:bf:c3:b6:12:39:27:de:e2:d3:1d: ee:0a:fc:f6:f2:c8:4a:37:06:13:9e:50:ab:c8:13: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F4:3C:D5:96:33:DB:A5:4D:33:36:FA:77:E1:C2:15:13:7A:AE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/cf33a276-5802-3ecd-a59a-911aab6182e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:de:52:d1:2a:e6:0c:0f:85:91:80:10:b3:37:5a:7b:14:71: 2e:92:ce:9d:0f:69:eb:10:c6:75:5b:65:ec:ac:40:37:6c:be: fa:ca:6b:b8:0f:c6:62:15:39:67:cd:cb:66:ed:16:51:b8:46: 7a:13:db:49:af:75:56:9a:f0:85:b9:1d:3d:5b:0c:a8:98:2e: 99:19:53:9c:d3:c9:d6:7d:6e:fd:bf:00:29:7c:68:81:59:97: ee:9f:33:c6:be:50:e1:a9:92:4e:aa:36:a8:9d:12:f2:f5:72: 66:b8:a3:af:a2:75:da:56:be:25:7b:23:27:63:c3:25:72:58: 57:22:88:05:f7:b6:f1:e7:27:81:b4:e8:2d:c3:13:2e:0a:25: 28:a8:2d:98:ad:4e:43:15:bb:95:c4:52:1d:52:47:e5:6a:ba: 3b:34:67:d4:e2:d0:cb:34:42:99:15:fb:b0:64:ed:68:a3:c1: 8a:60:82:4d:69:de:5b:2c:3a:95:f8:27:55:27:3f:a6:55:a1: 5c:5b:6e:1e:b9:ba:47:87:9e:1f:39:18:0f:35:76:57:69:ea: 2e:1a:df:0b:28:4c:19:01:2a:2f:58:0f:53:8e:d4:f3:34:86: bd:66:6b:fb:bd:5c:55:54:f7:37:22:79:a0:f0:46:e7:81:39: 8f:54:bb:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAIx8P9Cge5hnwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk NTRhODMzYjQtYWZjZC00ZWIxLTg4N2QtN2NjZmNhMmJhNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4idBzBG29Ruwf9pH7oACRBuKARPL939TOgW Jqt3rtp3LdM2C2y6yeYU+G6EoeWbbYxDs72YDRzy4lwOi8ztLHJFAxu6uhre9flj 3P92HjIj5WTb0WaevgdrgXy0cZN1eDnBBiFAZxK8cu7U09PZQxsXhqGWbzf34yIb KYbNDm2aUzNxYhiaGYX/cKjsLmbi+qLnckk725QTnDVF7cBO8Cr61einMwq7gS21 tGGb8ETAGoTYGmiylVcYjFBEI6TJOgmVtp30j59bYZ/pqKhXreJ8wWsKcYpQz/nB E3OCypasVYQqM7/DthI5J97i0x3uCvz28shKNwYTnlCryBNnNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/0PNWWM9ulTTM2+nfhwhUTeq7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvY2YzM2EyNzYtNTgwMi0z ZWNkLWE1OWEtOTExYWFiNjE4MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLeUtEq5gwPhZGAELM3WnsUcS6Szp0PaesQxnVbZeysQDdsvvrKa7gP xmIVOWfNy2btFlG4RnoT20mvdVaa8IW5HT1bDKiYLpkZU5zTydZ9bv2/ACl8aIFZ l+6fM8a+UOGpkk6qNqidEvL1cma4o6+iddpWviV7IydjwyVyWFciiAX3tvHnJ4G0 6C3DEy4KJSioLZitTkMVu5XEUh1SR+Vqujs0Z9Ti0Ms0QpkV+7Bk7WijwYpggk1p 3lssOpX4J1UnP6ZVoVxbbh65ukeHnh85GA81dldp6i4a3wsoTBkBKi9YD1OO1PM0 hr1ma/u9XFVU9zcieaDwRueBOY9Uu8Y= -----END CERTIFICATE-----Generated at Sat Jun 13 06:06:15 2026 by rpki-client