$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa File: 0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa (raw, json) Hash identifier: W0UIodIf0XdqZxcrOC+MTqcb7qezu6KLshHaA8gqeRc= Subject key identifier: BB:85:40:39:40:C1:94:92:52:19:BB:5A:74:D9:9C:25:30:99:FC:83 Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Certificate serial: 010D0C9F4328584E1E44517CB5C73FC37D139400 Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 26677 IP address blocks: 192.139.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:51:7c:b5:c7:3f:c3:7d:13:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=6e366e51-f566-43b2-b3c8-c30e0d8a28b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:1b:e5:30:e6:8e:0d:ac:62:fe:10:8b:33: 9b:d3:38:75:21:0b:05:cf:fa:84:59:d3:f9:8f:87: e3:b0:76:bf:4e:4c:b3:21:35:0d:47:c3:d1:0d:f3: 9e:0c:2a:98:ec:23:1c:96:63:50:40:31:f0:4a:ad: 59:cf:4c:ad:a7:96:3e:9d:0f:d2:b1:fc:77:c6:d9: f7:25:3a:2a:aa:36:c0:9e:be:bd:ff:01:c0:b6:41: 49:d3:c9:03:cc:80:fd:be:4c:a8:1a:53:3a:dd:a6: df:2b:b3:6e:bc:5c:df:87:5e:01:48:fa:48:ca:5a: 4d:d5:46:4c:92:61:dd:5b:14:01:be:de:bf:5f:a1: 38:d9:7d:eb:a5:16:a4:98:d2:0e:e9:21:94:5b:a1: 03:b1:61:30:7c:ec:94:a7:6a:40:cf:df:b6:b2:d7: 2c:67:1c:ce:1d:f3:4d:78:52:ba:d7:10:3e:5d:85: 08:d4:4b:a3:36:de:5f:23:1a:c5:a1:ff:f7:ad:1a: 3b:d6:70:57:27:cb:49:24:d5:42:0b:b7:11:7b:06: 6e:3d:9e:11:2c:67:ff:bb:b8:a8:d9:4b:47:e9:0c: 67:00:f2:25:d0:2b:cf:e2:89:57:d9:fd:8e:95:4a: f7:32:ea:34:58:24:0b:f8:4b:f3:1e:7b:d6:49:17: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:85:40:39:40:C1:94:92:52:19:BB:5A:74:D9:9C:25:30:99:FC:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl X509v3 Authority Key Identifier: keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer sbgp-ipAddrBlock: critical IPv4: 192.139.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:26:26:12:0f:ca:95:0e:55:09:17:ef:a7:bb:01:1c:d4:23: e3:6a:99:41:e6:be:48:56:7d:e2:8d:37:e1:eb:47:f1:04:f4: 95:4b:dc:91:49:16:a8:cf:83:83:6b:a0:d7:33:98:cb:6a:9a: d4:93:c8:a5:9d:32:4e:80:0a:02:64:13:9e:e1:b5:53:e1:0c: c8:4a:05:37:25:65:b2:29:aa:d0:03:f5:32:39:3d:42:36:9e: 10:b5:8c:f9:48:e2:69:6c:da:8f:f9:24:cb:a6:be:77:f8:2b: 52:6a:30:3f:49:f6:10:f0:ce:1b:69:4f:8c:10:31:f5:f6:a4: 9e:4c:e9:b3:83:79:ab:0a:2e:92:0d:57:12:2c:e9:98:fc:c7: 3e:9b:59:71:fd:ca:d4:1a:59:61:bc:23:2b:91:c8:3e:9a:a5: ee:ef:7d:e2:93:b3:68:38:bd:a8:8b:23:3b:cb:0f:86:75:45: 30:d0:a7:90:59:8d:95:45:57:cd:65:67:5d:01:8f:bf:2d:5f: 7a:0e:35:55:60:4d:3a:ad:24:2e:c0:f7:7a:00:98:3c:fc:92: 95:87:bf:9f:04:39:93:ec:58:12:b3:44:16:ec:f0:41:a9:78: b5:5c:b8:b6:ba:8a:fb:c6:bd:91:43:b5:bb:d2:66:19:15:29: ab:14:7b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFF8tcc/w30TlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhMGNlMjMtMzJjYi00NmZmLThhZjktODI1ZGU2NGYy MGExMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NmUzNjZlNTEtZjU2Ni00M2IyLWIzYzgtYzMwZTBkOGEyOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulEb5TDmjg2sYv4QizOb0zh1IQsFz/qEWdP5 j4fjsHa/TkyzITUNR8PRDfOeDCqY7CMclmNQQDHwSq1Zz0ytp5Y+nQ/Ssfx3xtn3 JToqqjbAnr69/wHAtkFJ08kDzID9vkyoGlM63abfK7NuvFzfh14BSPpIylpN1UZM kmHdWxQBvt6/X6E42X3rpRakmNIO6SGUW6EDsWEwfOyUp2pAz9+2stcsZxzOHfNN eFK61xA+XYUI1EujNt5fIxrFof/3rRo71nBXJ8tJJNVCC7cRewZuPZ4RLGf/u7io 2UtH6QxnAPIl0CvP4olX2f2OlUr3Muo0WCQL+EvzHnvWSRdWjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuFQDlAwZSSUhm7WnTZnCUwmfyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZmEw Y2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVkZTY0ZjIwYTEvMGY4NmFmOGYtMzEyMi0z NGRmLWFlN2UtMDQ4MTFkOGM4YWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2ZhMGNlMjMtMzJjYi00NmZmLThh ZjktODI1ZGU2NGYyMGExL2NmYTBjZTIzLTMyY2ItNDZmZi04YWY5LTgyNWRlNjRm MjBhMS5jcmwwHwYDVR0jBBgwFoAUmVyhbjvmxeaJIKIBkipF5R21CrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZmEwY2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVk ZTY0ZjIwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIvtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgmJhIPypUOVQkX76e7ARzUI+NqmUHmvkhWfeKNN+HrR/EE9JVL3JFJ FqjPg4NroNczmMtqmtSTyKWdMk6ACgJkE57htVPhDMhKBTclZbIpqtAD9TI5PUI2 nhC1jPlI4mls2o/5JMumvnf4K1JqMD9J9hDwzhtpT4wQMfX2pJ5M6bODeasKLpIN VxIs6Zj8xz6bWXH9ytQaWWG8IyuRyD6ape7vfeKTs2g4vaiLIzvLD4Z1RTDQp5BZ jZVFV81lZ10Bj78tX3oONVVgTTqtJC7A93oAmDz8kpWHv58EOZPsWBKzRBbs8EGp eLVcuLa6ivvGvZFDtbvSZhkVKasUe1c= -----END CERTIFICATE-----Generated at Sat Jun 13 14:48:53 2026 by rpki-client