$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa File: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (raw, json) Hash identifier: JPXrr8FACFrGJk651xjRJOc6E/jmDN1InMvBN2Ni3Aw= Subject key identifier: F9:06:96:B0:D3:23:4D:57:67:A7:75:39:97:33:F2:E8:C4:29:5C:8D Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F4328584DDE85C0C1F082605A095B423E Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 399103 IP address blocks: 192.240.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:85:c0:c1:f0:82:60:5a:09:5b:42:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=a50a76f8-0569-4322-ae3a-9743a1b2c783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:68:e8:83:fa:d0:21:f0:c7:05:f6:b2:3b:91: 9b:fc:d4:03:b7:b2:28:dd:8a:2c:8a:79:0e:85:45: 9b:df:97:ad:0c:ea:d6:97:77:6e:fe:0f:8e:b4:08: d8:a3:f8:65:9b:37:c7:91:80:7d:f7:87:49:01:90: 5b:d7:a1:80:60:15:ab:2a:e2:a5:c5:6d:82:09:15: e5:24:89:4d:c1:06:df:35:54:67:03:d1:a4:b5:0a: b7:7f:10:dd:de:84:a0:08:64:1f:2f:04:c5:3c:c3: 04:08:88:bb:0c:8a:bd:ee:98:90:8a:e3:81:c0:e0: b5:48:98:09:75:3a:e1:ad:86:4c:07:13:92:50:20: 68:5f:00:96:67:74:52:6a:15:dd:9a:b1:5e:c3:c2: a9:7a:e1:88:c9:89:20:6f:b9:e6:0d:a6:65:45:9f: f7:3d:8f:b3:a0:0d:86:8f:ac:ed:50:50:33:72:3e: 98:ab:18:ba:b9:f2:94:16:62:16:8f:92:cc:02:4e: 84:12:2e:5c:fc:cf:9b:64:80:28:74:6a:ed:1a:68: 34:d1:3e:ef:2e:3a:fc:86:67:9d:12:fb:c6:c1:a3: 68:9e:55:d4:ec:96:c4:7a:98:43:1c:62:49:a4:8b: bf:61:c0:89:a4:af:d8:e1:94:2e:0d:16:20:d5:57: a7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:96:B0:D3:23:4D:57:67:A7:75:39:97:33:F2:E8:C4:29:5C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: 192.240.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2e:b9:8f:6e:82:89:6c:78:a8:19:ec:8d:d9:75:3e:2c:f4: c8:3b:30:aa:c5:5f:88:23:8b:38:96:91:fa:63:2d:d2:97:98: 01:bd:f7:fc:92:9d:48:d1:e1:09:40:6c:84:9c:b0:d4:65:9d: bd:c0:06:e1:20:c0:f4:8f:4b:af:00:1f:36:ea:21:03:fb:6e: e1:f2:b2:e1:8c:91:d5:fa:09:02:82:b1:73:8e:01:d6:58:21: 8a:ec:83:a1:da:ae:95:0a:be:a3:9a:9e:bc:bb:52:75:11:8a: 1a:75:8d:c9:91:89:3c:9d:fc:df:7b:76:e5:29:c7:55:6c:21: 59:3a:b9:8e:14:06:df:6b:b3:93:7d:43:8d:6d:45:99:62:54: 7e:ff:09:7e:11:2a:bc:97:2d:84:dc:3b:79:40:3b:d6:75:63: 83:eb:1c:58:68:11:21:32:d3:06:84:92:63:a5:bd:9d:1b:af: f3:10:7e:e4:55:83:30:36:3e:2d:97:32:ec:6a:d1:08:86:13: 89:36:1e:f2:af:33:78:81:a2:89:ab:99:42:8f:f0:d6:55:fa: 7c:63:40:1e:ae:99:33:e6:5c:d6:dd:f5:a8:20:29:de:cc:1f: 85:bd:2e:07:cc:64:49:c9:46:a9:fb:8c:0f:6d:de:39:9a:01: 6e:b2:38:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehcDB8IJgWglbQj4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk YTUwYTc2ZjgtMDU2OS00MzIyLWFlM2EtOTc0M2ExYjJjNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Gjog/rQIfDHBfayO5Gb/NQDt7Io3YosinkO hUWb35etDOrWl3du/g+OtAjYo/hlmzfHkYB994dJAZBb16GAYBWrKuKlxW2CCRXl JIlNwQbfNVRnA9GktQq3fxDd3oSgCGQfLwTFPMMECIi7DIq97piQiuOBwOC1SJgJ dTrhrYZMBxOSUCBoXwCWZ3RSahXdmrFew8KpeuGIyYkgb7nmDaZlRZ/3PY+zoA2G j6ztUFAzcj6Yqxi6ufKUFmIWj5LMAk6EEi5c/M+bZIAodGrtGmg00T7vLjr8hmed EvvGwaNonlXU7JbEephDHGJJpIu/YcCJpK/Y4ZQuDRYg1VenmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkGlrDTI01XZ6d1OZcz8ujEKVyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYWE1ZGJhZjctOWYzNC0z YTVhLWFiZmItMzQ0NzExYzY2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwuuY9ugolseKgZ7I3ZdT4s9Mg7MKrFX4gjiziWkfpjLdKXmAG99/yS nUjR4QlAbIScsNRlnb3ABuEgwPSPS68AHzbqIQP7buHysuGMkdX6CQKCsXOOAdZY IYrsg6HarpUKvqOanry7UnURihp1jcmRiTyd/N97duUpx1VsIVk6uY4UBt9rs5N9 Q41tRZliVH7/CX4RKryXLYTcO3lAO9Z1Y4PrHFhoESEy0waEkmOlvZ0br/MQfuRV gzA2Pi2XMuxq0QiGE4k2HvKvM3iBoomrmUKP8NZV+nxjQB6umTPmXNbd9aggKd7M H4W9LgfMZEnJRqn7jA9t3jmaAW6yOA0= -----END CERTIFICATE-----Generated at Sat Jun 13 21:27:51 2026 by rpki-client