$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa File: 8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa (raw, json) Hash identifier: X5xMrCvy4Gehh8rrWQsYdPCaUnxJKvp+lkclsp21lCc= Subject key identifier: 3A:F4:5B:12:73:97:B1:02:B0:1C:0E:8C:4F:84:9E:77:73:84:77:E5 Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Certificate serial: 010D0C9F4328584E0005DF3B6717696B45829880 Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 400211 IP address blocks: 142.202.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:df:3b:67:17:69:6b:45:82:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=ecab4e7e-acab-47f2-8b2c-80e3c21503fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:72:73:80:e6:59:74:a2:b8:24:55:4a:7d: 35:1f:c3:6d:9c:c0:9f:42:19:3f:9d:9b:67:93:b6: 33:8d:7b:13:75:f0:48:49:2a:cd:dc:f2:a3:83:d4: 49:67:1c:8d:ac:91:d6:32:ef:19:13:c5:a5:37:f8: 5e:77:f4:bd:0b:3c:9e:d7:92:0f:ac:2b:30:cc:f8: 6d:17:97:68:ab:6d:e9:9f:2a:1e:86:4c:7a:1f:0e: 84:5b:47:2b:28:20:0b:9c:f3:bb:f3:3d:79:c4:c9: f3:9b:49:7e:89:92:0d:6f:e0:c0:53:1d:d1:7c:7b: 0b:49:1d:86:4a:de:9b:ec:83:69:e1:c2:c7:87:11: ae:f1:3a:a4:32:a5:03:41:fe:4b:47:ee:77:a7:0b: 65:fd:10:5d:be:ba:0c:2c:bb:6f:b6:89:6c:e1:f3: 65:64:57:67:2e:71:7d:5e:81:65:69:3d:12:1a:85: 1c:c1:cd:b7:6c:42:5e:2e:d0:3c:e4:12:d6:18:42: 01:00:27:74:b1:22:a9:0f:e6:84:9e:b7:ee:74:1e: 7d:50:ce:21:52:14:10:20:e3:8f:2a:e2:7f:b7:6b: c5:e1:23:46:55:18:4a:94:63:49:26:5a:b7:b2:3e: 06:19:5a:d6:4a:1d:d6:b0:65:93:0a:55:ee:84:92: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F4:5B:12:73:97:B1:02:B0:1C:0E:8C:4F:84:9E:77:73:84:77:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl X509v3 Authority Key Identifier: keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer sbgp-ipAddrBlock: critical IPv4: 142.202.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:28:5e:a5:06:3d:7d:a0:d0:22:bd:31:2b:94:a7:41:7c:6a: c8:ab:10:59:1a:d6:0e:cd:a2:db:f4:4d:60:c5:e1:ae:14:84: aa:29:31:8e:82:94:af:f0:28:d0:e9:0c:0b:a2:46:9e:e9:85: 55:7d:43:f1:b5:ca:93:5d:33:df:cd:f8:64:94:95:81:d0:90: 05:89:c7:8c:91:5a:88:d3:e0:51:cc:94:3c:1f:3f:1d:14:a7: 18:09:01:53:ba:94:63:db:2a:d1:dc:67:d7:66:f7:af:cf:b3: 2b:3c:8d:1d:8e:8a:21:60:73:ea:93:fb:b7:7c:c5:c5:c4:9c: 9b:3c:b2:30:43:19:7d:7d:05:3a:7e:45:c2:2f:66:f0:5d:d4: ae:6a:3b:80:3a:67:3b:1f:5e:5a:79:f9:84:ee:d5:0a:7e:4c: 59:3c:a9:31:11:dd:1c:8e:ac:37:14:ac:10:5d:44:88:00:0d: 15:17:9c:11:86:ac:a8:2a:2b:ef:b3:53:ae:30:65:6f:6e:78: 9f:45:a9:c5:6a:5d:d5:10:d8:a8:4f:d5:68:b4:9b:60:3f:30: 8e:56:dd:87:6f:fa:02:6c:fb:59:25:96:ca:b9:ee:6b:ee:e4: 08:cf:98:de:90:13:9d:1a:d0:d5:57:bc:d3:83:fd:6d:ad:b8: bd:90:ea:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABd87Zxdpa0WCmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl NjFmMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk ZWNhYjRlN2UtYWNhYi00N2YyLThiMmMtODBlM2MyMTUwM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvRyc4DmWXSiuCRVSn01H8NtnMCfQhk/nZtn k7YzjXsTdfBISSrN3PKjg9RJZxyNrJHWMu8ZE8WlN/hed/S9Czye15IPrCswzPht F5doq23pnyoehkx6Hw6EW0crKCALnPO78z15xMnzm0l+iZINb+DAUx3RfHsLSR2G St6b7INp4cLHhxGu8TqkMqUDQf5LR+53pwtl/RBdvroMLLtvtols4fNlZFdnLnF9 XoFlaT0SGoUcwc23bEJeLtA85BLWGEIBACd0sSKpD+aEnrfudB59UM4hUhQQIOOP KuJ/t2vF4SNGVRhKlGNJJlq3sj4GGVrWSh3WsGWTClXuhJLozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr0WxJzl7ECsBwOjE+EnndzhHflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4 YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvOGM3ZTI3ZDMtYTM4NS0z ZDI2LTlkYmYtMGE4M2RjNjk1ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1 OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk ZWE2YmU2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkoXqUGPX2g0CK9MSuUp0F8asirEFka1g7Notv0TWDF4a4UhKopMY6C lK/wKNDpDAuiRp7phVV9Q/G1ypNdM9/N+GSUlYHQkAWJx4yRWojT4FHMlDwfPx0U pxgJAVO6lGPbKtHcZ9dm96/Psys8jR2OiiFgc+qT+7d8xcXEnJs8sjBDGX19BTp+ RcIvZvBd1K5qO4A6ZzsfXlp5+YTu1Qp+TFk8qTER3RyOrDcUrBBdRIgADRUXnBGG rKgqK++zU64wZW9ueJ9FqcVqXdUQ2KhP1Wi0m2A/MI5W3Ydv+gJs+1kllsq57mvu 5AjPmN6QE50a0NVXvNOD/W2tuL2Q6j4= -----END CERTIFICATE-----Generated at Sat Jun 13 17:44:45 2026 by rpki-client