$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa File: 40ca3da7-d905-3def-9f19-2e32b7805f82.roa (raw, json) Hash identifier: j6MOlEtUnwPej/bKXt72kGNiwW5vENMYWdDJYC1ejtQ= Subject key identifier: 89:E7:FB:59:4E:87:AC:E4:B9:67:D1:64:C8:AB:DC:EC:CF:6E:26:F4 Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Certificate serial: 010D0C9F4328584E104EECAB769AE53A75064180 Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 19782 IP address blocks: 198.51.243.0/24 maxlen: 24 198.51.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:ec:ab:76:9a:e5:3a:75:06:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=64f5bab1-de0f-4ec9-8f3b-acd7d6f02ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:e6:19:b9:87:37:20:c7:69:33:dc:8e:5d: 35:0c:5b:6e:d4:75:d9:03:a9:f4:68:1f:44:67:ad: ae:be:f8:f1:46:b9:da:32:c1:37:d5:b9:8b:d2:1e: 4f:4d:e1:0d:c1:10:28:78:9a:b5:bd:e9:c3:e0:dc: f8:2a:6e:fd:fa:15:8a:84:4d:08:cc:b4:3c:97:b1: 8b:db:ce:ca:0e:a2:55:eb:dd:c3:5e:57:88:60:e1: 6a:44:6f:64:b7:60:29:09:24:25:c8:0e:1f:ae:11: a2:6c:29:d8:a3:30:0c:b1:0e:68:c4:f3:75:c9:30: 4b:6b:18:87:a2:93:b0:45:2e:bb:6b:3a:ce:9f:ec: d6:1e:92:e5:7d:e1:0a:da:88:1b:02:78:90:56:2c: 2c:e7:20:77:93:d6:36:3f:46:b3:fd:21:85:e2:0b: 9f:ed:b8:73:9a:b9:f6:ea:16:35:fa:d2:fd:55:d8: 64:6f:82:04:cd:c8:e2:5d:49:ec:d4:45:ef:19:c8: 67:bd:1c:ab:b0:8e:d2:d7:52:72:04:ab:d2:8c:8b: c3:e5:e3:e6:80:5b:be:fa:26:40:cb:2c:8a:97:08: 0a:90:08:20:72:83:17:e4:85:4e:d5:a0:19:9d:2d: 86:81:76:c6:ec:3e:52:d7:85:4b:ed:ba:bd:9e:14: 68:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E7:FB:59:4E:87:AC:E4:B9:67:D1:64:C8:AB:DC:EC:CF:6E:26:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl X509v3 Authority Key Identifier: keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer sbgp-ipAddrBlock: critical IPv4: 198.51.243.0-198.51.244.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ee:5b:07:a6:90:69:6b:d6:2a:b8:8e:0b:0e:84:e2:2e:38: 54:1e:83:58:65:db:6c:f6:bb:24:18:4d:17:01:bb:55:4b:71: b9:30:88:c5:f9:7c:d2:1e:e9:08:80:63:1d:e9:2b:24:df:2a: ad:28:e7:a7:cb:7f:e4:0f:b4:ea:de:8d:5a:a5:1e:47:ef:81: b1:56:b5:96:9e:e0:09:06:68:4b:ef:90:f9:b5:b5:13:07:76: 37:2b:e9:20:1e:db:7f:d6:b4:72:c2:5e:71:50:2d:37:14:fd: 49:c4:11:5c:af:73:20:33:40:db:8d:6d:da:5b:56:35:e7:36: 87:9a:df:0a:63:3d:31:7d:18:3a:cf:2b:cd:c0:e9:d3:51:8f: f3:e9:5e:72:7b:a5:0d:f8:c5:60:54:ce:eb:e6:29:03:0b:7c: 22:0c:18:e3:58:fd:65:02:de:55:29:4f:b5:f7:99:f2:6d:91: 8f:b6:9b:51:4b:76:4f:83:4a:b2:4f:00:a4:11:23:c6:1e:05: 5d:82:71:a5:dd:e5:85:3f:0e:94:35:12:6d:e5:de:a9:4e:15: 98:ff:7c:95:23:59:ab:c8:f1:bc:b1:65:69:6c:74:12:55:f7: 8b:0e:6a:e5:79:5c:f2:de:c3:24:37:a2:69:4a:c8:77:f5:54: 4b:31:b4:46 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4QTuyrdprlOnUGQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIw YTc4MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NjRmNWJhYjEtZGUwZi00ZWM5LThmM2ItYWNkN2Q2ZjAyY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOLmGbmHNyDHaTPcjl01DFtu1HXZA6n0aB9E Z62uvvjxRrnaMsE31bmL0h5PTeENwRAoeJq1venD4Nz4Km79+hWKhE0IzLQ8l7GL 287KDqJV693DXleIYOFqRG9kt2ApCSQlyA4frhGibCnYozAMsQ5oxPN1yTBLaxiH opOwRS67azrOn+zWHpLlfeEK2ogbAniQViws5yB3k9Y2P0az/SGF4guf7bhzmrn2 6hY1+tL9Vdhkb4IEzcjiXUns1EXvGchnvRyrsI7S11JyBKvSjIvD5ePmgFu++iZA yyyKlwgKkAggcoMX5IVO1aAZnS2GgXbG7D5S14VL7bq9nhRoQQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFInn+1lOh6zkuWfRZMir3OzPbib0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJk N2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvNDBjYTNkYTctZDkwNS0z ZGVmLTlmMTktMmUzMmI3ODA1ZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2QyZDdkODUtNjFkMC00YmE2LWI0 ZDItYWZkYTliODIwYTc4L2NkMmQ3ZDg1LTYxZDAtNGJhNi1iNGQyLWFmZGE5Yjgy MGE3OC5jcmwwHwYDVR0jBBgwFoAU1ibhio+0D7XbHHAfhvtKutXiGQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRh OWI4MjBhNzguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGM/MD BADGM/QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAn+5bB6aQaWvWKriOCw6E4i44VB6DWGXbbPa7JBhNFwG7 VUtxuTCIxfl80h7pCIBjHekrJN8qrSjnp8t/5A+06t6NWqUeR++BsVa1lp7gCQZo S++Q+bW1Ewd2NyvpIB7bf9a0csJecVAtNxT9ScQRXK9zIDNA241t2ltWNec2h5rf CmM9MX0YOs8rzcDp01GP8+lecnulDfjFYFTO6+YpAwt8IgwY41j9ZQLeVSlPtfeZ 8m2Rj7abUUt2T4NKsk8ApBEjxh4FXYJxpd3lhT8OlDUSbeXeqU4VmP98lSNZq8jx vLFlaWx0ElX3iw5q5Xlc8t7DJDeiaUrId/VUSzG0Rg== -----END CERTIFICATE-----Generated at Sat Jun 13 13:45:39 2026 by rpki-client