$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be2e7408-742e-4fef-9fc0-0d1a6e798c50/aa3cae8a-c9fb-3931-9f88-6190ff9fc68c.roa File: aa3cae8a-c9fb-3931-9f88-6190ff9fc68c.roa (raw, json) Hash identifier: pkiagflapVrBOAWu/ThXH4zCDORQWqqD5iBzQv7jm8Q= Subject key identifier: CD:F8:C8:4A:8F:87:02:26:B2:2C:69:7F:7A:A5:68:46:9A:D0:BF:E5 Certificate issuer: /CN=be2e7408-742e-4fef-9fc0-0d1a6e798c50 Certificate serial: 010D0C9F4328584DE9B0BF9761DC2CA8FF86BA00 Authority key identifier: BF:56:1C:65:8F:A8:8C:C1:8F:A4:40:FD:DB:BC:D2:E0:30:CF:B6:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be2e7408-742e-4fef-9fc0-0d1a6e798c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be2e7408-742e-4fef-9fc0-0d1a6e798c50/aa3cae8a-c9fb-3931-9f88-6190ff9fc68c.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 10753 IP address blocks: 204.62.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be2e7408-742e-4fef-9fc0-0d1a6e798c50/be2e7408-742e-4fef-9fc0-0d1a6e798c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be2e7408-742e-4fef-9fc0-0d1a6e798c50/be2e7408-742e-4fef-9fc0-0d1a6e798c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be2e7408-742e-4fef-9fc0-0d1a6e798c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:bf:97:61:dc:2c:a8:ff:86:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be2e7408-742e-4fef-9fc0-0d1a6e798c50 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=ef78ac28-c94a-4869-8430-38b1ef2e22ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:20:7f:a8:da:81:bf:64:a6:d8:fd:80:b8:42: 37:f2:87:ef:a7:3f:87:f6:a1:14:5e:8c:60:ca:4a: 87:a9:aa:c0:e9:d9:20:2d:c3:c7:22:4f:35:dd:87: 9b:49:90:c7:a3:dc:bb:b4:42:51:65:38:b4:9a:d5: 89:18:61:3e:ff:db:38:95:fc:63:8b:d8:e5:50:87: b6:83:f4:77:29:df:eb:df:53:9f:41:cd:c5:26:8b: ba:11:9c:78:48:5d:0e:8f:a2:bb:c2:6c:62:ab:9f: c4:88:19:ad:57:2b:7e:29:0a:59:f2:a6:bd:66:bf: 0c:df:a6:05:2d:ea:b2:17:b6:12:46:51:2a:9b:e5: 68:32:dc:6a:ce:7b:17:a4:f1:88:f5:af:09:65:23: d7:d8:f3:d5:de:fd:ec:5b:ff:9a:b6:69:c0:ca:0d: 2e:d4:67:be:89:dc:97:31:f9:0a:e4:5d:ce:08:d3: 17:51:0e:8e:0d:51:3a:44:c7:7b:02:31:3a:f4:18: da:38:52:74:4b:20:bc:88:1c:d1:e3:41:72:0e:4f: cb:e7:f5:f8:fc:83:ca:06:bc:a5:f1:72:28:fa:d2: c2:e0:9c:27:c4:99:64:58:12:81:30:a6:a4:1d:52: 0f:1f:ac:d8:bb:fe:b2:57:a7:c7:25:f7:d2:b8:b6: 20:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F8:C8:4A:8F:87:02:26:B2:2C:69:7F:7A:A5:68:46:9A:D0:BF:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be2e7408-742e-4fef-9fc0-0d1a6e798c50/aa3cae8a-c9fb-3931-9f88-6190ff9fc68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be2e7408-742e-4fef-9fc0-0d1a6e798c50/be2e7408-742e-4fef-9fc0-0d1a6e798c50.crl X509v3 Authority Key Identifier: keyid:BF:56:1C:65:8F:A8:8C:C1:8F:A4:40:FD:DB:BC:D2:E0:30:CF:B6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be2e7408-742e-4fef-9fc0-0d1a6e798c50.cer sbgp-ipAddrBlock: critical IPv4: 204.62.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9a:41:d6:23:16:42:a5:28:91:7c:ae:8d:0c:16:86:6a:4f: 2c:11:37:94:7b:08:16:1e:d2:95:a3:f1:47:b7:04:f3:d7:0c: 06:b5:96:c2:ea:e5:26:28:fc:f7:8e:90:19:80:7b:c5:6e:41: f5:ee:b6:63:37:d9:4f:15:e4:3b:2e:20:81:b6:1b:19:2d:b7: 4c:c9:62:0e:6c:dc:c8:91:7d:6a:ac:c1:42:94:da:cd:7b:3a: f9:9f:40:34:fb:84:a0:89:3e:cf:bf:de:15:95:4e:40:72:66: a4:61:a2:83:1e:92:e3:ed:0a:78:fd:bb:fb:f8:cb:d0:16:5e: 6b:3a:c3:99:cd:42:f0:2b:21:14:02:da:39:33:74:9e:68:68: 7a:01:04:84:71:c6:e9:f4:48:3d:e0:9e:48:db:36:57:4a:58: e7:73:63:f6:6c:86:74:b3:e5:24:cd:31:38:e4:6c:d4:fd:ed: a1:c0:95:c7:0d:48:7a:bb:01:44:a9:a3:aa:e0:51:e9:cc:ef: 20:76:5a:8e:2d:40:cc:78:fa:3f:47:13:b8:1f:4a:c8:0a:95: f4:d1:4b:5a:e1:da:90:5a:19:ce:df:dd:56:b6:80:40:4f:71: df:0c:27:bb:3f:6c:ca:ef:93:dd:60:e4:5d:28:f5:7e:36:12: 46:68:8e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psL+XYdwsqP+GugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUyZTc0MDgtNzQyZS00ZmVmLTlmYzAtMGQxYTZlNzk4 YzUwMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZWY3OGFjMjgtYzk0YS00ODY5LTg0MzAtMzhiMWVmMmUyMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCB/qNqBv2Sm2P2AuEI38ofvpz+H9qEUXoxg ykqHqarA6dkgLcPHIk813YebSZDHo9y7tEJRZTi0mtWJGGE+/9s4lfxji9jlUIe2 g/R3Kd/r31OfQc3FJou6EZx4SF0Oj6K7wmxiq5/EiBmtVyt+KQpZ8qa9Zr8M36YF LeqyF7YSRlEqm+VoMtxqznsXpPGI9a8JZSPX2PPV3v3sW/+atmnAyg0u1Ge+idyX MfkK5F3OCNMXUQ6ODVE6RMd7AjE69BjaOFJ0SyC8iBzR40FyDk/L5/X4/IPKBryl 8XIo+tLC4JwnxJlkWBKBMKakHVIPH6zYu/6yV6fHJffSuLYg6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM34yEqPhwImsixpf3qlaEaa0L/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iZTJl NzQwOC03NDJlLTRmZWYtOWZjMC0wZDFhNmU3OThjNTAvYWEzY2FlOGEtYzlmYi0z OTMxLTlmODgtNjE5MGZmOWZjNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmUyZTc0MDgtNzQyZS00ZmVmLTlm YzAtMGQxYTZlNzk4YzUwL2JlMmU3NDA4LTc0MmUtNGZlZi05ZmMwLTBkMWE2ZTc5 OGM1MC5jcmwwHwYDVR0jBBgwFoAUv1YcZY+ojMGPpED927zS4DDPtpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iZTJlNzQwOC03NDJlLTRmZWYtOWZjMC0wZDFh NmU3OThjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzD7OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyaQdYjFkKlKJF8ro0MFoZqTywRN5R7CBYe0pWj8Ue3BPPXDAa1lsLq 5SYo/PeOkBmAe8VuQfXutmM32U8V5DsuIIG2Gxktt0zJYg5s3MiRfWqswUKU2s17 OvmfQDT7hKCJPs+/3hWVTkByZqRhooMekuPtCnj9u/v4y9AWXms6w5nNQvArIRQC 2jkzdJ5oaHoBBIRxxun0SD3gnkjbNldKWOdzY/ZshnSz5STNMTjkbNT97aHAlccN SHq7AUSpo6rgUenM7yB2Wo4tQMx4+j9HE7gfSsgKlfTRS1rh2pBaGc7f3Va2gEBP cd8MJ7s/bMrvk91g5F0o9X42EkZojt4= -----END CERTIFICATE-----Generated at Sat Jun 13 08:10:27 2026 by rpki-client