$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa File: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (raw, json) Hash identifier: XinwT8vS7gQUo4ku1dHluiQFUuz+vZuLa5gwzAlwDMw= Subject key identifier: 94:F4:99:A4:97:C4:61:BF:5B:2C:B5:C1:D7:3D:1F:49:A8:83:79:28 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584E210EFE0B2923A90D4215AB40 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 46687 IP address blocks: 24.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0e:fe:0b:29:23:a9:0d:42:15:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=0eef82d7-60ac-4768-a476-6e0d0ef24bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:2a:4c:13:3f:77:4c:d5:32:5f:26:7d:18: dc:b4:82:0c:14:17:1f:0d:1c:dd:bc:7c:16:05:e9: d8:98:33:e0:a2:93:4d:49:7f:b7:d1:f8:14:c3:64: c0:21:11:e4:4e:35:14:56:42:7b:89:c0:fd:56:8e: f2:db:91:85:06:e9:c7:0f:ab:c7:1b:49:8a:8f:e0: 3a:78:84:d9:ba:1e:f9:28:62:da:d3:25:c2:d5:d2: 76:f0:3a:17:6a:0c:53:30:35:87:cd:89:7d:70:66: fc:26:a3:c6:44:35:21:2a:87:1c:91:fe:eb:63:39: 7e:ad:64:96:cc:7d:51:ca:ff:ac:b9:5c:4a:9a:99: d1:67:38:23:97:03:d9:85:82:fe:ee:12:7b:69:ae: 35:7c:85:bd:3d:7b:79:84:80:5f:cd:97:75:35:00: e8:18:90:2f:f3:de:54:5b:51:ca:af:5d:88:c3:e2: 9e:9b:7c:38:a0:ae:4c:45:91:af:26:58:b9:de:9b: f3:cb:4b:e0:38:e9:e1:9c:7e:d8:20:3b:ae:54:9f: f5:4d:b6:af:d3:e2:ee:55:a2:63:91:46:06:7f:c6: 53:67:ac:10:0c:8c:a9:9b:8e:7e:5a:e5:e6:7d:a3: 05:32:c0:63:f9:0e:fe:0f:12:8d:35:3a:93:37:52: 34:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F4:99:A4:97:C4:61:BF:5B:2C:B5:C1:D7:3D:1F:49:A8:83:79:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:14:92:c6:20:57:56:62:9b:b4:77:90:5a:02:0d:dc:fc:d8: 5d:cd:c0:e2:6a:34:66:1e:4d:8c:a6:21:b4:4b:0b:74:1a:3b: 4a:71:4a:99:08:c1:44:10:21:39:8c:9f:9d:89:e7:31:01:c5: db:c4:ea:bb:c3:ab:7f:f0:67:6e:91:61:d5:69:09:b0:ee:14: dc:f6:b5:fb:b9:00:2f:fd:a8:7a:b7:a0:7a:0f:11:d0:96:53: e3:b4:6b:d2:95:4f:20:23:78:47:94:1f:88:e3:38:2d:5d:07: 2e:74:44:f0:3c:f8:61:a7:e1:93:38:b9:f7:cf:d2:c5:91:e5: 1f:68:73:d9:30:4d:5e:cc:ab:ad:71:73:7c:e5:21:96:62:86: 4a:f9:48:8e:ad:3f:e9:b3:b9:55:a7:93:15:26:db:f4:de:d2: 8b:e2:4c:5e:b2:78:e3:ee:2d:99:f1:1e:a8:5f:3c:7a:c2:4e: 0e:74:11:5c:b3:d0:4e:71:2b:78:dc:69:11:1d:56:2c:30:a3: 34:4a:11:b2:b1:66:2c:24:02:17:76:ae:41:d0:5a:2f:b1:a7: cb:42:00:89:bd:c7:6f:27:97:25:a2:cc:0a:ff:82:cf:c3:28: 46:d6:21:08:4c:fc:7a:ee:02:cd:0a:6e:08:cc:85:02:90:97: f2:5e:89:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDv4LKSOpDUIVq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk MGVlZjgyZDctNjBhYy00NzY4LWE0NzYtNmUwZDBlZjI0YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFMqTBM/d0zVMl8mfRjctIIMFBcfDRzdvHwW BenYmDPgopNNSX+30fgUw2TAIRHkTjUUVkJ7icD9Vo7y25GFBunHD6vHG0mKj+A6 eITZuh75KGLa0yXC1dJ28DoXagxTMDWHzYl9cGb8JqPGRDUhKocckf7rYzl+rWSW zH1Ryv+suVxKmpnRZzgjlwPZhYL+7hJ7aa41fIW9PXt5hIBfzZd1NQDoGJAv895U W1HKr12Iw+Kem3w4oK5MRZGvJli53pvzy0vgOOnhnH7YIDuuVJ/1Tbav0+LuVaJj kUYGf8ZTZ6wQDIypm45+WuXmfaMFMsBj+Q7+DxKNNTqTN1I0TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT0maSXxGG/Wyy1wdc9H0mog3koMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWE3NTcyZmYtMGMxYS0z NmUxLWE1NTMtM2JiZDgwZDZlY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQUksYgV1Zim7R3kFoCDdz82F3NwOJqNGYeTYymIbRLC3QaO0pxSpkI wUQQITmMn52J5zEBxdvE6rvDq3/wZ26RYdVpCbDuFNz2tfu5AC/9qHq3oHoPEdCW U+O0a9KVTyAjeEeUH4jjOC1dBy50RPA8+GGn4ZM4uffP0sWR5R9oc9kwTV7Mq61x c3zlIZZihkr5SI6tP+mzuVWnkxUm2/Te0oviTF6yeOPuLZnxHqhfPHrCTg50EVyz 0E5xK3jcaREdViwwozRKEbKxZiwkAhd2rkHQWi+xp8tCAIm9x28nlyWizAr/gs/D KEbWIQhM/HruAs0KbgjMhQKQl/JeiW4= -----END CERTIFICATE-----Generated at Sat Jun 13 17:57:10 2026 by rpki-client