$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa File: aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa (raw, json) Hash identifier: m/u7ZkTlWw+f5N09Su7EJSpHZi+CsVr7QW9i/+zYqTU= Subject key identifier: 20:5C:F2:1A:C7:C4:F7:0F:7A:74:CF:92:08:7F:8F:D4:A8:9D:6A:F7 Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F4328584E070090F8F60FEE14DB304158 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 8070 IP address blocks: 152.228.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:90:f8:f6:0f:ee:14:db:30:41:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=1de83320-2c90-47a6-8efa-a21963427922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a9:d5:c7:c3:12:f2:c7:e7:a2:89:37:86:43: fa:47:a7:ca:59:fc:24:39:e4:2b:8c:3e:26:fa:cc: 63:76:80:25:b4:b3:9c:23:57:8e:5d:31:7b:6a:02: 2d:e9:fe:33:b3:ed:d5:8a:87:7d:a9:12:57:c3:90: 6f:2e:cf:e2:a4:e0:8b:bc:d1:77:29:24:33:eb:94: 5b:c1:8a:30:0f:c5:8a:aa:bd:5e:a2:a4:ff:db:81: 7d:c5:13:35:0a:fe:b0:c1:5e:91:4a:9b:73:9a:67: 33:2e:c7:98:de:13:95:eb:76:0b:55:ea:56:6f:b7: e6:e0:97:02:af:7f:33:a3:58:b1:fe:67:7b:96:26: 23:7b:d5:7f:db:70:bc:43:5a:24:9b:48:ba:d7:09: cc:e2:53:33:11:e4:f3:b2:e3:ae:83:2b:07:56:7e: 3d:67:0d:e0:c9:e9:cd:66:10:33:70:c9:bd:b0:33: b7:a6:3c:ee:81:7f:ba:4b:45:d8:4f:dd:e5:ed:a0: 40:64:59:5b:c8:5d:e4:e8:eb:ba:75:c4:07:1e:55: ff:7b:03:1d:71:e6:73:5f:8f:5c:e5:7d:2f:cd:6f: fe:55:76:bc:e3:55:6f:a2:39:f5:9c:62:1b:b7:f6: 6d:92:d7:16:c3:4c:d5:08:e9:66:79:bb:ad:44:95: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5C:F2:1A:C7:C4:F7:0F:7A:74:CF:92:08:7F:8F:D4:A8:9D:6A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv4: 152.228.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f2:d2:40:a2:00:f2:ff:eb:5f:27:eb:b1:67:34:9e:ef:39: 40:f9:59:c1:3c:d5:47:26:32:f2:1a:a3:be:99:1a:03:b4:74: 6f:cb:96:8a:0e:15:ae:2b:c5:da:a6:d4:00:dd:be:a4:cd:c0: 1f:2b:42:a7:84:24:7d:ef:35:18:70:5d:8d:78:a2:3e:a8:c2: 01:33:e2:08:33:b5:9d:f2:4d:81:ff:4d:af:ac:65:15:ae:3d: 98:26:2f:e1:3e:71:e2:6d:f4:ab:12:77:57:9a:a7:25:0c:b1: ee:4f:c1:c6:be:b1:dd:02:8c:4d:92:48:c7:7f:c5:b7:85:84: 46:66:dd:d4:1a:1e:cb:c3:68:1e:6e:7b:8d:2e:81:57:48:43: d9:24:10:0c:aa:d3:76:b4:fa:26:96:4d:66:86:ea:75:7d:fe: cb:c5:41:1a:93:e9:1b:a9:b6:08:8a:c7:75:1d:3b:19:c2:f9: f4:eb:c5:ae:c4:55:f4:a1:ed:5b:aa:30:4b:00:2a:34:dd:60: 6d:13:cf:cf:6e:fc:1e:2c:e8:d3:6b:62:29:95:90:44:c4:2d: e8:3e:f8:9b:b3:65:95:2a:f2:28:8b:64:2c:00:e8:44:98:2c: f6:ef:c5:8d:e6:55:15:63:67:99:f0:d9:90:a3:d1:5e:51:88: 18:a2:55:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAJD49g/uFNswQVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk MWRlODMzMjAtMmM5MC00N2E2LThlZmEtYTIxOTYzNDI3OTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhanVx8MS8sfnook3hkP6R6fKWfwkOeQrjD4m +sxjdoAltLOcI1eOXTF7agIt6f4zs+3Viod9qRJXw5BvLs/ipOCLvNF3KSQz65Rb wYowD8WKqr1eoqT/24F9xRM1Cv6wwV6RSptzmmczLseY3hOV63YLVepWb7fm4JcC r38zo1ix/md7liYje9V/23C8Q1okm0i61wnM4lMzEeTzsuOugysHVn49Zw3gyenN ZhAzcMm9sDO3pjzugX+6S0XYT93l7aBAZFlbyF3k6Ou6dcQHHlX/ewMdceZzX49c 5X0vzW/+VXa841Vvojn1nGIbt/ZtktcWw0zVCOlmebutRJX5dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBc8hrHxPcPenTPkgh/j9SonWr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvYWE4ZGI0YWEtOTJkMS0z YzAxLWI3ZWYtODZjZGFhZmZmNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOQxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHy0kCiAPL/618n67FnNJ7vOUD5WcE81UcmMvIao76ZGgO0dG/LlooO Fa4rxdqm1ADdvqTNwB8rQqeEJH3vNRhwXY14oj6owgEz4ggztZ3yTYH/Ta+sZRWu PZgmL+E+ceJt9KsSd1eapyUMse5Pwca+sd0CjE2SSMd/xbeFhEZm3dQaHsvDaB5u e40ugVdIQ9kkEAyq03a0+iaWTWaG6nV9/svFQRqT6RuptgiKx3UdOxnC+fTrxa7E VfSh7VuqMEsAKjTdYG0Tz89u/B4s6NNrYimVkETELeg++JuzZZUq8iiLZCwA6ESY LPbvxY3mVRVjZ5nw2ZCj0V5RiBiiVZ8= -----END CERTIFICATE-----Generated at Sat Jun 13 16:47:15 2026 by rpki-client