$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa File: 8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa (raw, json) Hash identifier: pzscsYIJY24kUoosE+ji6ite2LcsNWvW+i+icS0auOg= Subject key identifier: 6C:78:08:91:22:E0:4F:E5:84:66:5E:A7:32:3C:05:97:30:D1:C3:3A Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584E210FDA581959A9DCF111C840 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 398395 IP address blocks: 199.253.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0f:da:58:19:59:a9:dc:f1:11:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=5f7a8ca3-a647-4ffb-9d41-a18c0bd3e0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:52:76:ba:71:ab:a9:aa:24:ad:b6:51:ff:19: aa:97:44:5f:7f:67:4f:59:d2:4e:ff:78:0b:c1:55: dc:e8:d0:d4:9d:b1:f3:85:3e:fe:3b:02:0c:45:f4: 28:7d:6c:b5:da:b0:58:f3:f8:5c:33:cd:64:08:ee: f4:da:03:5d:b8:2d:8f:4d:19:84:da:7d:b9:0c:8f: 1d:47:cb:34:ac:75:36:c9:44:a9:ba:17:a1:fb:1a: 2d:9a:8c:84:f3:e1:8c:fb:bb:89:c6:52:06:c9:c4: ba:5d:52:a0:c2:15:a6:9a:9e:91:c7:53:27:5a:89: a4:e8:6c:93:08:8a:c9:af:5f:57:dc:f2:a6:bc:65: 5f:71:f4:5f:a6:0b:5d:1d:da:52:39:b0:bd:29:87: 9a:81:18:b0:3d:f7:98:f9:90:b1:62:70:7e:e5:d8: d3:50:14:81:79:8d:7f:4f:03:50:92:ef:fc:60:5b: 90:02:1b:1e:25:54:72:cf:66:e6:c5:06:9f:8f:6a: 53:5a:d8:af:a3:36:57:ec:d7:eb:fd:87:65:0f:0e: e4:2f:65:b2:10:95:9d:3d:2e:c6:d7:80:bb:50:ae: b5:88:a6:c5:d5:bd:aa:90:87:1b:d5:22:d7:05:f4: 63:37:5d:84:d3:94:15:a0:cf:45:d2:05:47:cb:d7: 10:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:78:08:91:22:E0:4F:E5:84:66:5E:A7:32:3C:05:97:30:D1:C3:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 199.253.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:33:4b:7e:b8:6e:79:44:93:a1:65:18:a8:14:23:b2:ee:b5: 2f:e2:4c:6e:40:bd:a3:2c:5d:0c:06:ec:04:e2:e5:b2:23:e7: 83:72:6a:f5:56:ad:10:a8:19:b2:18:55:bc:81:f6:a3:3b:2c: 4d:73:d4:5d:d0:77:9d:39:10:b0:ec:0c:6a:f2:c9:c8:83:06: 9a:30:d9:34:ae:f6:3d:d7:19:3a:32:33:f9:ca:37:84:2e:6f: ad:e4:bd:d7:5d:31:b4:cb:77:d3:8b:1a:a5:56:54:c5:be:d3: d4:27:4e:a3:50:23:1c:e2:a9:ee:22:7e:f2:d6:d1:ba:25:5f: 29:e7:1b:5c:96:0f:de:5a:b3:c0:87:89:9f:45:19:d7:43:4c: 2d:50:a7:4f:4c:b8:2a:15:48:2e:bf:88:f2:9b:33:36:0b:bc: 5b:4d:26:81:30:74:ac:4a:23:67:18:42:7f:71:4c:85:2c:2a: a8:54:94:be:66:05:cd:60:67:09:e5:19:30:89:04:24:86:e3: 1f:59:cd:03:d0:37:2f:af:3d:c2:70:94:f7:0f:d9:f7:e9:74: 73:83:da:6d:de:63:5e:b8:34:f3:0e:bb:62:39:19:84:05:2d: 9e:2d:1c:cf:11:d0:b4:64:02:f3:68:34:37:56:e9:77:4f:f6: 65:cc:93:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD9pYGVmp3PERyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk NWY3YThjYTMtYTY0Ny00ZmZiLTlkNDEtYTE4YzBiZDNlMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylJ2unGrqaokrbZR/xmql0Rff2dPWdJO/3gL wVXc6NDUnbHzhT7+OwIMRfQofWy12rBY8/hcM81kCO702gNduC2PTRmE2n25DI8d R8s0rHU2yUSpuheh+xotmoyE8+GM+7uJxlIGycS6XVKgwhWmmp6Rx1MnWomk6GyT CIrJr19X3PKmvGVfcfRfpgtdHdpSObC9KYeagRiwPfeY+ZCxYnB+5djTUBSBeY1/ TwNQku/8YFuQAhseJVRyz2bmxQafj2pTWtivozZX7Nfr/YdlDw7kL2WyEJWdPS7G 14C7UK61iKbF1b2qkIcb1SLXBfRjN12E05QVoM9F0gVHy9cQOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx4CJEi4E/lhGZepzI8BZcw0cM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGQzNmEzY2EtNjYwYy0z N2I4LTkzMGItMDRiZDNiMjY3NWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8zS364bnlEk6FlGKgUI7LutS/iTG5AvaMsXQwG7ATi5bIj54NyavVW rRCoGbIYVbyB9qM7LE1z1F3Qd505ELDsDGryyciDBpow2TSu9j3XGToyM/nKN4Qu b63kvdddMbTLd9OLGqVWVMW+09QnTqNQIxziqe4ifvLW0bolXynnG1yWD95as8CH iZ9FGddDTC1Qp09MuCoVSC6/iPKbMzYLvFtNJoEwdKxKI2cYQn9xTIUsKqhUlL5m Bc1gZwnlGTCJBCSG4x9ZzQPQNy+vPcJwlPcP2ffpdHOD2m3eY164NPMOu2I5GYQF LZ4tHM8R0LRkAvNoNDdW6XdP9mXMk7k= -----END CERTIFICATE-----Generated at Sat Jun 13 13:31:56 2026 by rpki-client