$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa File: 628d4d18-2b20-319e-8245-80ecdf68c5f8.roa (raw, json) Hash identifier: iyf4a9GXw8vmRpb0gS/aWPHAiPuPbq0Xlt9CgkQu7/w= Subject key identifier: FC:A7:6B:5C:5C:45:70:C6:2C:AD:2C:51:7C:29:3E:44:6D:EA:75:34 Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F4328584E0A6FF72FE732DF4E568217C0 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 16509 IP address blocks: 66.59.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:f7:2f:e7:32:df:4e:56:82:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=a6bc12e7-f757-4454-81ad-7ab1098eb58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:16:c7:29:bc:a2:ef:61:a8:04:be:87:3e:bf: fb:e1:3f:79:13:fd:2f:3d:21:11:35:c4:f4:c0:6d: 6b:ed:49:8f:e5:e9:a9:04:6c:f8:63:80:47:e8:8d: ba:34:6a:5d:56:c8:d3:98:58:2c:4c:24:b6:3d:2f: 3b:35:d9:63:84:80:47:d0:00:8e:c1:2c:82:43:ee: c8:2f:fc:c3:3d:c4:ab:4d:44:8c:6f:69:4e:8b:51: bb:ad:61:ad:70:19:16:b4:48:49:e2:4e:23:3a:e6: 5b:f9:9f:20:eb:3d:95:7c:7a:37:e8:48:96:49:a9: 42:d4:00:1e:32:0c:59:3b:53:5b:c7:ab:0d:75:24: 56:5a:9a:e9:9e:fd:d5:20:b6:55:c7:0d:d2:e2:d8: 23:70:a2:9d:b8:43:93:0d:2d:88:c5:54:79:9d:b6: 3e:fc:81:16:6c:46:de:66:16:7e:5f:88:59:23:ae: 9e:2f:09:d0:79:96:91:d0:a7:5f:5d:f0:df:71:a0: c7:f0:dd:a7:4b:09:05:9a:07:cd:40:72:f3:1a:43: 1c:53:f6:75:f7:00:d9:90:d1:03:38:8e:78:04:8b: 0c:ba:21:bf:c8:0f:0c:e5:9d:d4:14:32:4c:eb:ce: fc:85:75:a9:e3:02:a0:f9:bf:d3:4c:d7:02:1c:d0: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A7:6B:5C:5C:45:70:C6:2C:AD:2C:51:7C:29:3E:44:6D:EA:75:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 66.59.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:31:d7:69:2d:8c:1d:d9:f3:37:14:8e:2b:12:6d:e5:cb:93: 9e:b5:20:b4:fa:a7:49:d7:ea:c6:8d:63:9d:fb:83:0a:56:49: a2:eb:d0:cf:5f:5a:55:bb:e0:96:8a:47:98:b0:58:7e:11:ab: bf:74:88:b1:88:2d:97:7e:51:20:ed:72:1b:95:5f:35:cc:fc: 7e:c4:63:b8:ce:aa:53:23:52:ed:9c:7d:2c:d9:1e:52:33:c4: 21:c4:44:f7:d5:ad:91:8f:03:77:53:07:7e:a1:8e:76:13:a1: a2:c9:c9:07:af:11:02:74:0a:9f:c8:7c:42:30:76:54:77:cf: 21:c9:86:25:2a:e9:a6:76:5a:10:e6:2f:70:fc:70:be:eb:03: c7:5a:3d:58:b8:13:f9:c7:e9:32:fe:1d:b0:a5:a4:68:3c:cb: 67:e4:70:24:c6:ba:87:cf:ce:81:f2:cb:5c:c2:15:39:90:88: da:1d:31:c2:88:dc:cb:f9:26:95:9d:df:86:de:d1:57:e7:d7: 66:58:26:a9:9d:26:ef:3b:56:4f:89:38:f0:06:3e:35:23:82: 04:13:17:2b:42:c3:e3:9d:f9:eb:d6:57:58:31:38:4b:ad:43: dd:86:02:a2:0c:d8:6f:f3:dc:60:51:bc:97:18:61:ae:fa:97: ef:5d:24:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/cv5zLfTlaCF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk YTZiYzEyZTctZjc1Ny00NDU0LTgxYWQtN2FiMTA5OGViNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hbHKbyi72GoBL6HPr/74T95E/0vPSERNcT0 wG1r7UmP5empBGz4Y4BH6I26NGpdVsjTmFgsTCS2PS87NdljhIBH0ACOwSyCQ+7I L/zDPcSrTUSMb2lOi1G7rWGtcBkWtEhJ4k4jOuZb+Z8g6z2VfHo36EiWSalC1AAe MgxZO1Nbx6sNdSRWWprpnv3VILZVxw3S4tgjcKKduEOTDS2IxVR5nbY+/IEWbEbe ZhZ+X4hZI66eLwnQeZaR0KdfXfDfcaDH8N2nSwkFmgfNQHLzGkMcU/Z19wDZkNED OI54BIsMuiG/yA8M5Z3UFDJM6878hXWp4wKg+b/TTNcCHNDL9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyna1xcRXDGLK0sUXwpPkRt6nU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvNjI4ZDRkMTgtMmIyMC0z MTllLTgyNDUtODBlY2RmNjhjNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQjsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwx12ktjB3Z8zcUjisSbeXLk561ILT6p0nX6saNY537gwpWSaLr0M9f WlW74JaKR5iwWH4Rq790iLGILZd+USDtchuVXzXM/H7EY7jOqlMjUu2cfSzZHlIz xCHERPfVrZGPA3dTB36hjnYToaLJyQevEQJ0Cp/IfEIwdlR3zyHJhiUq6aZ2WhDm L3D8cL7rA8daPVi4E/nH6TL+HbClpGg8y2fkcCTGuofPzoHyy1zCFTmQiNodMcKI 3Mv5JpWd34be0Vfn12ZYJqmdJu87Vk+JOPAGPjUjggQTFytCw+Od+evWV1gxOEut Q92GAqIM2G/z3GBRvJcYYa76l+9dJP8= -----END CERTIFICATE-----Generated at Sat Jun 13 10:31:06 2026 by rpki-client