$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa File: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (raw, json) Hash identifier: XHH5UDhTwo7Sslr/9O399BFFcSwXPHK6rFKMNORQ5W4= Subject key identifier: 99:51:19:A6:D7:AC:D7:AF:2B:F4:25:2C:2E:A4:BC:38:33:DE:F2:03 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584DEF45D7AF94F6864499665500 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 16509 IP address blocks: 64.52.111.0/24 maxlen: 24 192.153.76.0/24 maxlen: 24 199.201.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:d7:af:94:f6:86:44:99:66:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=bf5ca89d-fa38-4060-b562-dfaf38735a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:cd:fb:c8:e6:af:1c:37:16:84:a8:12:de: 86:00:da:97:0d:2a:7f:bb:8b:d6:b8:84:4a:92:ec: dc:26:5b:cf:b1:81:76:33:b9:8e:1c:7b:a7:94:30: 01:cc:c5:44:5e:f1:25:32:94:33:2b:18:ef:6e:2a: f2:61:ad:86:65:6a:ef:c1:71:84:e4:00:8a:69:cb: dc:44:a3:51:05:71:2d:01:54:38:dc:90:40:ee:eb: 25:53:0d:f5:ff:c7:b5:8d:0b:ee:48:ad:34:52:bf: fd:73:a3:f8:68:34:35:b7:54:8c:ad:02:b5:06:d6: 39:5a:5e:25:5a:7c:5f:c1:39:bd:ab:d3:9e:23:5d: 20:ea:f5:97:1c:4a:47:b9:24:24:71:c9:47:83:dd: b9:a7:a1:ea:01:f2:06:1a:4c:4f:c9:d0:99:df:34: 51:50:8e:26:8a:90:d0:e4:e7:8f:72:7b:66:cf:5a: 54:8a:6f:d7:eb:7c:5a:5f:f1:26:b3:cf:97:8b:17: 81:a9:54:94:33:1c:78:50:6e:14:42:00:4d:f9:67: 36:59:04:4d:6a:aa:3b:02:d9:8a:65:c3:4b:ab:28: 0a:a6:fd:fd:d5:9f:93:5b:aa:31:7c:ba:b7:3b:fe: f8:52:a8:37:2e:fb:c3:99:6d:44:ec:af:72:c0:bb: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:51:19:A6:D7:AC:D7:AF:2B:F4:25:2C:2E:A4:BC:38:33:DE:F2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 192.153.76.0/24 199.201.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:34:76:b8:ab:0e:b5:f2:03:25:35:52:61:fe:3e:9b:ea:fa: 30:28:37:41:5e:fd:62:2b:08:3c:c8:0c:97:58:c2:8c:e9:eb: 77:96:b0:6b:44:a5:38:70:e6:6e:b1:79:44:69:45:f3:6e:cc: 48:e0:1f:c7:50:79:9c:d9:4b:47:32:96:9e:bd:78:54:47:95: 5c:77:0f:60:28:b7:7f:bf:15:62:77:ad:68:bb:f5:ec:cf:cf: 1c:ac:93:d5:b7:11:b8:a8:5c:15:9d:e6:0c:74:99:af:5a:f3: 87:13:3f:48:bd:ad:27:3b:47:e8:cf:2f:82:62:48:36:7a:c9: 0f:ae:28:73:83:c8:af:32:9c:98:6f:a4:82:d4:dd:71:53:8b: 1d:03:5e:14:bc:00:7f:23:7a:ac:77:c1:95:96:2d:23:76:89: b3:c0:8c:f1:80:42:59:f2:77:eb:42:af:bf:f0:88:c1:f0:83: e0:6d:c5:a5:6c:a8:c5:4c:b8:e8:bc:36:cc:b2:1a:17:1b:c8: 07:98:42:e5:86:d2:42:b7:46:b5:52:8c:0e:af:d4:78:06:31: 20:c8:2f:f5:70:36:3b:5e:18:df:a0:f3:f8:a9:6a:a4:6d:d1: ab:13:ba:9d:13:9c:34:b4:8e:f8:4c:ee:70:a4:57:b0:00:fd: ef:8e:64:d5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE3vRdevlPaGRJlmVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk YmY1Y2E4OWQtZmEzOC00MDYwLWI1NjItZGZhZjM4NzM1YTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9XN+8jmrxw3FoSoEt6GANqXDSp/u4vWuIRK kuzcJlvPsYF2M7mOHHunlDABzMVEXvElMpQzKxjvbiryYa2GZWrvwXGE5ACKacvc RKNRBXEtAVQ43JBA7uslUw31/8e1jQvuSK00Ur/9c6P4aDQ1t1SMrQK1BtY5Wl4l WnxfwTm9q9OeI10g6vWXHEpHuSQkcclHg925p6HqAfIGGkxPydCZ3zRRUI4mipDQ 5OePcntmz1pUim/X63xaX/Ems8+XixeBqVSUMxx4UG4UQgBN+Wc2WQRNaqo7AtmK ZcNLqygKpv391Z+TW6oxfLq3O/74Uqg3LvvDmW1E7K9ywLu3/QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJlRGabXrNevK/QlLC6kvDgz3vIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNTg5ZTNlNjEtOGZhZS0z ODRlLTk5YTAtMDExYzM5YzA4ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDRvAwQA wJlMAwQAx8l/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKM0drirDrXyAyU1UmH+Ppvq+jAoN0Fe/WIrCDzI DJdYwozp63eWsGtEpThw5m6xeURpRfNuzEjgH8dQeZzZS0cylp69eFRHlVx3D2Ao t3+/FWJ3rWi79ezPzxysk9W3EbioXBWd5gx0ma9a84cTP0i9rSc7R+jPL4JiSDZ6 yQ+uKHODyK8ynJhvpILU3XFTix0DXhS8AH8jeqx3wZWWLSN2ibPAjPGAQlnyd+tC r7/wiMHwg+BtxaVsqMVMuOi8NsyyGhcbyAeYQuWG0kK3RrVSjA6v1HgGMSDIL/Vw NjteGN+g8/ipaqRt0asTup0TnDS0jvhM7nCkV7AA/e+OZNU= -----END CERTIFICATE-----Generated at Sat Jun 13 20:51:39 2026 by rpki-client