$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa File: 0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa (raw, json) Hash identifier: kJd5+yDxmBhg+M9Z4cp9R0iwsOQ7MqK4/Ztx/q3oH3w= Subject key identifier: CE:70:B4:D5:C1:4D:EE:2E:99:40:0E:6B:1F:22:1D:57:23:F6:13:3A Certificate issuer: /CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Certificate serial: 010D0C9F4328584DF64096106AB71F73218DA2F0 Authority key identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 14237 IP address blocks: 216.152.248.0/21 maxlen: 24 2606:e580::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:96:10:6a:b7:1f:73:21:8d:a2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=6e498b10-97ed-4dbe-b59e-85f9122a850f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0e:34:65:2b:7e:52:54:31:f2:2d:4b:a2:25: 78:d7:16:21:09:5f:71:fe:f3:91:ef:9e:42:ee:0a: 90:0e:88:77:93:8e:26:31:cb:90:1a:55:cd:64:82: 5e:d8:a1:85:7a:31:81:58:cf:66:e7:f1:b0:4b:14: 8e:32:c3:f6:1e:44:11:81:ef:a5:13:ba:7a:59:07: 57:cb:45:3c:45:e0:12:20:91:d7:ba:7e:77:95:b3: aa:69:c4:d1:d9:c0:81:3a:9d:ed:75:1f:75:a6:0e: 9a:eb:c7:ca:e8:6a:ad:30:1b:31:e8:5e:1d:68:76: 51:8c:99:de:d2:ce:88:0d:4c:8b:eb:f9:c2:8d:63: 99:ec:ac:db:ac:30:c4:7d:ae:95:5e:54:31:c1:f6: a7:41:21:fb:ca:61:d1:e6:e1:e5:88:22:b1:ae:17: 57:b4:34:cd:71:90:3e:84:6f:cc:c5:85:b6:3f:3a: 70:1f:d8:c4:e1:23:70:29:5b:ae:70:c7:eb:a9:bf: c8:b1:ac:cd:b3:60:1e:77:1b:59:f4:52:52:99:68: a3:59:4f:9b:74:69:4e:6f:c2:8c:15:db:0b:54:f2: 8a:56:ed:70:6a:26:0f:4c:92:ec:65:f9:6b:b6:8c: 8e:36:56:30:cb:c2:1b:a0:bc:e0:33:9b:93:b9:db: 95:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:70:B4:D5:C1:4D:EE:2E:99:40:0E:6B:1F:22:1D:57:23:F6:13:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl X509v3 Authority Key Identifier: keyid:2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer sbgp-ipAddrBlock: critical IPv4: 216.152.248.0/21 IPv6: 2606:e580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:f5:d4:0d:2a:3a:8a:74:04:00:94:1c:66:0a:5c:3f:38:45: f6:f9:75:74:b6:19:90:d4:f4:ad:bf:e6:5e:3b:14:0c:9c:07: 63:93:8d:76:89:8f:82:58:b2:cc:99:95:bf:9a:e1:0e:3a:ad: b5:ed:58:a5:15:f4:54:57:10:e0:c3:d2:19:68:60:1c:12:4d: 79:38:95:33:08:e4:be:15:91:72:ff:29:32:13:36:ab:72:dd: 02:21:81:ff:3e:e4:96:2d:a2:5a:87:ec:5a:81:4e:82:cd:52: 82:d0:a2:5b:2f:89:46:38:92:7d:fe:c7:89:f7:d8:42:9d:0e: 6a:b9:c2:e0:d2:86:ce:12:63:c6:7a:46:7a:6c:ac:d2:7a:6b: 24:af:c7:aa:20:dd:93:d9:80:5c:74:2c:d8:5c:65:98:2f:9a: 85:7f:db:1a:e6:e4:af:7f:2d:97:8d:5c:6f:38:54:53:99:99: 44:85:3c:fd:a6:30:73:38:b5:69:39:92:64:59:3f:63:96:05: d9:cf:3e:fe:87:50:f0:02:3f:a3:54:ec:e0:b8:dc:62:00:67: 2b:68:32:4c:2c:b7:46:10:8d:33:88:1f:37:9c:b5:9e:aa:6e: 4a:9f:c3:3f:9a:7c:38:c6:85:51:6e:a2:c3:86:5a:87:2b:b5: 16:52:81:4a -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE32QJYQarcfcyGNovAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliZTJlZmEtM2MyZi00NmQyLWI1ZTctY2I4ZDk1MzY5 MDYzMB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk NmU0OThiMTAtOTdlZC00ZGJlLWI1OWUtODVmOTEyMmE4NTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA40ZSt+UlQx8i1LoiV41xYhCV9x/vOR755C 7gqQDoh3k44mMcuQGlXNZIJe2KGFejGBWM9m5/GwSxSOMsP2HkQRge+lE7p6WQdX y0U8ReASIJHXun53lbOqacTR2cCBOp3tdR91pg6a68fK6GqtMBsx6F4daHZRjJne 0s6IDUyL6/nCjWOZ7KzbrDDEfa6VXlQxwfanQSH7ymHR5uHliCKxrhdXtDTNcZA+ hG/MxYW2PzpwH9jE4SNwKVuucMfrqb/IsazNs2AedxtZ9FJSmWijWU+bdGlOb8KM FdsLVPKKVu1waiYPTJLsZflrtoyONlYwy8IboLzgM5uTuduVwQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFM5wtNXBTe4umUAOax8iHVcj9hM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OWJl MmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhkOTUzNjkwNjMvMGI1NDFlYTUtZTdmZi0z YTAwLWFjMzktYWJhYjQ0ZWE1OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODliZTJlZmEtM2MyZi00NmQyLWI1 ZTctY2I4ZDk1MzY5MDYzLzg5YmUyZWZhLTNjMmYtNDZkMi1iNWU3LWNiOGQ5NTM2 OTA2My5jcmwwHwYDVR0jBBgwFoAUK65SecIQTmcFGTwFTLgn7hyllaswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OWJlMmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhk OTUzNjkwNjMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD2Jj4MA0E AgACMAcDBQAmBuWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAMD11A0qOop0BACUHGYKXD84Rfb5dXS2GZDU 9K2/5l47FAycB2OTjXaJj4JYssyZlb+a4Q46rbXtWKUV9FRXEODD0hloYBwSTXk4 lTMI5L4VkXL/KTITNqty3QIhgf8+5JYtolqH7FqBToLNUoLQolsviUY4kn3+x4n3 2EKdDmq5wuDShs4SY8Z6RnpsrNJ6aySvx6og3ZPZgFx0LNhcZZgvmoV/2xrm5K9/ LZeNXG84VFOZmUSFPP2mMHM4tWk5kmRZP2OWBdnPPv6HUPACP6NU7OC43GIAZyto Mkwst0YQjTOIHzectZ6qbkqfwz+afDjGhVFuosOGWocrtRZSgUo= -----END CERTIFICATE-----Generated at Wed Jun 17 12:04:06 2026 by rpki-client