$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa File: 9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa (raw, json) Hash identifier: h2QhIBuXL3SMxCcCEL550cXzafATmSBHaJ5LnS6sRuk= Subject key identifier: 05:93:5D:D3:02:37:AB:86:C1:44:7C:00:5C:89:B2:96:E3:03:E3:6C Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584E1E4453E14165473C25B63164 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 13807 IP address blocks: 192.189.248.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:53:e1:41:65:47:3c:25:b6:31:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=d85a8c20-2f4e-41a1-a46a-2c93fe4f5a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:b9:a5:eb:b1:3b:99:8e:c4:40:56:05:3f: 3a:16:9d:8c:a3:ff:0b:61:88:46:33:3a:e7:c6:28: fd:75:ee:a7:45:a5:69:b5:cb:ad:af:ff:dc:16:7f: 91:05:61:21:d6:2b:f6:52:32:cf:ed:9c:c5:31:ae: e4:34:3b:44:b9:f7:44:11:b6:f9:80:ca:27:e5:9f: af:6b:5f:57:68:6a:78:11:7d:57:98:59:05:15:d9: 6a:f1:28:cf:d9:77:90:c0:9c:ce:45:df:0f:4c:c0: 33:ac:58:16:8e:b7:f5:26:07:f1:b1:a0:ce:3c:d3: 91:2e:16:9d:29:86:29:19:12:16:fc:68:59:f2:18: f1:9d:24:79:38:b2:91:79:5b:d0:1a:d0:1f:da:c5: a1:7b:23:c6:6c:05:b3:d9:ca:7f:8f:cc:51:8c:e2: 5b:69:bd:b2:64:4d:ff:d6:58:b1:8b:49:20:e0:a7: 71:a9:d4:48:a1:99:85:37:2b:2b:5e:77:41:82:53: fe:1d:0e:53:62:f3:6b:2d:d6:1f:78:39:8a:0f:b5: 7d:61:68:c3:e1:a7:e4:34:6f:b8:e8:76:06:4d:77: e6:f0:07:7a:34:e7:b4:75:ed:05:51:88:04:34:80: 86:e4:9e:71:56:09:79:ba:4f:85:c8:7f:9b:23:7e: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:93:5D:D3:02:37:AB:86:C1:44:7C:00:5C:89:B2:96:E3:03:E3:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 192.189.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:36:e6:90:b2:07:c6:ce:b8:55:5b:31:48:87:16:af:87:09: e9:18:b1:cb:36:da:62:ac:b2:37:19:25:ef:a1:1d:2e:c9:6a: 93:8b:20:8d:88:9e:97:c0:c1:bb:a8:d4:6c:fd:16:15:85:2e: 01:23:58:25:eb:df:38:7b:16:03:4a:b9:a2:ee:44:ff:0d:a1: c2:e1:b7:1a:88:c8:2e:1a:b8:e3:a8:ab:3f:99:0a:9c:da:9a: f0:ce:42:e9:28:ca:8a:64:8f:16:d5:e5:91:79:e6:58:8a:b4: 8b:b1:76:ca:0f:3c:f4:bf:4b:84:fe:9b:3c:9e:ee:4b:31:74: b6:0d:08:ca:85:c9:1f:d2:bf:71:43:c1:29:dd:c6:b6:3f:f1: e7:68:e8:8c:41:28:42:65:7d:2a:58:0b:88:db:da:46:84:35: cd:f6:45:f3:f3:a6:bc:74:f5:53:3b:aa:dc:2f:a1:85:8f:bc: 67:d8:56:a2:b3:3c:68:8f:4a:a5:9a:e6:37:bf:81:8c:90:a4: b1:6c:a7:43:2f:31:92:d9:9a:e7:d4:47:9c:f5:80:0e:bb:3e: 33:53:5f:7a:b0:37:0c:d7:0f:d6:6f:31:cc:99:8b:a1:b4:f8: aa:9f:c6:e3:fc:77:02:ad:a5:6f:74:38:60:5e:71:ba:72:36: be:78:f0:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFPhQWVHPCW2MWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZDg1YThjMjAtMmY0ZS00MWExLWE0NmEtMmM5M2ZlNGY1YTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgga5peuxO5mOxEBWBT86Fp2Mo/8LYYhGMzrn xij9de6nRaVptcutr//cFn+RBWEh1iv2UjLP7ZzFMa7kNDtEufdEEbb5gMon5Z+v a19XaGp4EX1XmFkFFdlq8SjP2XeQwJzORd8PTMAzrFgWjrf1JgfxsaDOPNORLhad KYYpGRIW/GhZ8hjxnSR5OLKReVvQGtAf2sWheyPGbAWz2cp/j8xRjOJbab2yZE3/ 1lixi0kg4KdxqdRIoZmFNysrXndBglP+HQ5TYvNrLdYfeDmKD7V9YWjD4afkNG+4 6HYGTXfm8Ad6NOe0de0FUYgENICG5J5xVgl5uk+FyH+bI37MnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWTXdMCN6uGwUR8AFyJspbjA+NsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvOWFmMmM4YjYtNTM1ZS0z ZmQ4LWE4YjktYjgwNTcyZjhkMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ25pCyB8bOuFVbMUiHFq+HCekYscs22mKssjcZJe+hHS7JapOLII2I npfAwbuo1Gz9FhWFLgEjWCXr3zh7FgNKuaLuRP8NocLhtxqIyC4auOOoqz+ZCpza mvDOQukoyopkjxbV5ZF55liKtIuxdsoPPPS/S4T+mzye7ksxdLYNCMqFyR/Sv3FD wSndxrY/8edo6IxBKEJlfSpYC4jb2kaENc32RfPzprx09VM7qtwvoYWPvGfYVqKz PGiPSqWa5je/gYyQpLFsp0MvMZLZmufUR5z1gA67PjNTX3qwNwzXD9ZvMcyZi6G0 +KqfxuP8dwKtpW90OGBecbpyNr548O4= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:50 2026 by rpki-client