$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa File: a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa (raw, json) Hash identifier: v8iq/SiJJYNXXgEinVa0p9Ms4oMXcZxRWqDpTxoP4lA= Subject key identifier: 05:DB:8C:E3:81:8C:B6:E3:F5:A1:E4:06:F6:77:6E:BF:88:17:2E:C9 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584E0435EE0AEAE6CC792E896280 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 40948 IP address blocks: 208.95.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:ee:0a:ea:e6:cc:79:2e:89:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=f7c0d3a0-c026-47c4-8a82-54dd4b4a857e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7b:5c:4d:4a:c8:70:7c:4c:66:4c:5f:ec:86: 3c:67:e2:e0:4b:0c:46:66:90:3f:d9:62:3f:8a:00: 22:b9:26:e5:61:70:a5:3d:4a:4b:5c:5b:1f:59:9a: 42:1b:0e:6c:25:c1:89:16:7e:2c:d7:a8:33:63:c3: 83:2f:1d:d9:2e:ce:0c:88:77:42:18:06:3c:40:ab: 21:01:05:b1:2b:e5:05:b1:e5:29:08:2d:c2:7c:9c: 45:7c:ae:99:80:b2:39:0d:c7:8a:59:f0:4e:9e:8b: c0:3b:7a:40:01:15:7e:3e:7e:45:20:33:2c:b0:a4: be:00:86:40:0e:34:93:9b:1e:1f:9c:81:fd:d3:5c: 24:1e:ad:e5:6d:0d:07:0b:2b:a0:2f:e3:91:89:aa: 00:b0:aa:af:5c:49:72:a9:57:44:71:30:da:3d:86: 9a:b2:b0:38:76:d2:ef:d4:d2:22:27:92:aa:80:e3: cf:e9:dd:3b:13:ed:fc:51:0b:76:dd:0c:77:a1:92: 2a:5b:45:70:b8:22:37:34:ee:a2:c1:b6:d7:6b:f8: 56:96:67:a3:30:df:63:63:4a:7d:6c:5b:3f:a3:fa: c6:87:8d:c5:47:2d:17:62:cb:71:56:d9:a0:8e:62: fb:17:75:0a:84:37:1d:c3:dc:95:82:3c:47:72:55: 28:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:8C:E3:81:8C:B6:E3:F5:A1:E4:06:F6:77:6E:BF:88:17:2E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 208.95.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1e:51:e0:66:39:b0:4b:45:c2:70:bb:e9:c4:1c:a0:ff:81: 4b:b9:e0:31:06:b0:f5:fd:70:80:2e:47:29:42:42:79:d0:fa: 84:3c:50:22:f5:cf:7f:b3:63:cc:17:4d:99:85:8a:5f:03:55: f1:9e:73:83:eb:af:80:99:13:84:8d:55:b9:49:43:d7:17:a5: 0a:e9:2f:ce:01:d7:5f:f2:3a:be:71:d4:d2:81:71:d1:81:57: 33:43:7e:1f:f2:10:71:60:7d:41:f4:f2:10:da:b8:0b:c0:d5: 81:4a:b8:5d:e1:16:22:04:35:b5:41:b8:cc:00:0b:b2:f7:f6: 45:43:0c:36:9f:91:88:85:c6:bd:ef:4e:3b:88:45:f2:e3:87: 2c:a3:cc:c2:14:02:5b:c1:9c:98:64:59:35:29:3e:59:64:90: 13:5f:98:9f:ac:8c:c1:1e:32:c4:36:46:78:4c:d0:50:55:c6: b1:08:2a:69:b3:be:58:08:11:14:5b:2b:5d:08:4d:73:a4:d1: 27:58:3b:0c:a2:83:cb:1c:82:04:6b:f9:f1:91:aa:17:1a:9a: 61:0f:dc:ed:23:71:a4:5c:2d:c9:1c:bf:d8:d5:0c:a7:3a:39: 38:de:ef:aa:df:78:2f:dc:a2:39:0c:a2:4c:97:27:ea:45:72: af:73:df:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENe4K6ubMeS6JYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZjdjMGQzYTAtYzAyNi00N2M0LThhODItNTRkZDRiNGE4NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHtcTUrIcHxMZkxf7IY8Z+LgSwxGZpA/2WI/ igAiuSblYXClPUpLXFsfWZpCGw5sJcGJFn4s16gzY8ODLx3ZLs4MiHdCGAY8QKsh AQWxK+UFseUpCC3CfJxFfK6ZgLI5DceKWfBOnovAO3pAARV+Pn5FIDMssKS+AIZA DjSTmx4fnIH901wkHq3lbQ0HCyugL+ORiaoAsKqvXElyqVdEcTDaPYaasrA4dtLv 1NIiJ5KqgOPP6d07E+38UQt23Qx3oZIqW0VwuCI3NO6iwbbXa/hWlmejMN9jY0p9 bFs/o/rGh43FRy0XYstxVtmgjmL7F3UKhDcdw9yVgjxHclUoeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXbjOOBjLbj9aHkBvZ3br+IFy7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvYTUxZjUwZTQtZDdjNy0z OWUwLTg2ODEtMDA5N2ZkMmM4NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkeUeBmObBLRcJwu+nEHKD/gUu54DEGsPX9cIAuRylCQnnQ+oQ8UCL1 z3+zY8wXTZmFil8DVfGec4Prr4CZE4SNVblJQ9cXpQrpL84B11/yOr5x1NKBcdGB VzNDfh/yEHFgfUH08hDauAvA1YFKuF3hFiIENbVBuMwAC7L39kVDDDafkYiFxr3v TjuIRfLjhyyjzMIUAlvBnJhkWTUpPllkkBNfmJ+sjMEeMsQ2RnhM0FBVxrEIKmmz vlgIERRbK10ITXOk0SdYOwyig8scggRr+fGRqhcammEP3O0jcaRcLckcv9jVDKc6 OTje76rfeC/cojkMokyXJ+pFcq9z37k= -----END CERTIFICATE-----Generated at Sat Jun 13 21:14:11 2026 by rpki-client