$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa File: 5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa (raw, json) Hash identifier: JPA0HQrFrUDacCuy31c8h5kF5Qg56TsgJ0rgMteDhHg= Subject key identifier: 81:C6:ED:71:E6:ED:62:6C:DA:86:9F:FA:66:C5:DF:4F:CC:88:AE:89 Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584DBA3B01436F7F7D5E06ECF1C0 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 32133 IP address blocks: 169.197.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:01:43:6f:7f:7d:5e:06:ec:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=2ca103dc-19cb-4cca-8254-7c9a9cd4156b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cd:ca:e6:ba:b3:1d:0e:3a:29:a2:ae:1d:97: 33:ea:84:ec:d8:b9:e6:da:46:6d:44:d1:21:a3:6b: 48:7e:4e:f5:79:54:d0:b9:e4:43:aa:14:cf:f6:26: 92:d9:63:51:af:b0:50:44:df:cf:8f:bf:1b:a8:d0: 39:c2:b9:7d:d0:24:34:26:46:08:4e:c1:e0:eb:13: 02:d5:0f:f9:62:4c:d2:f4:6e:f7:dc:55:f8:0e:b2: d2:aa:d2:48:e6:7c:66:fb:af:89:83:35:0e:11:f4: 88:2d:f5:53:da:a4:c6:37:dd:ae:3b:5e:0b:8d:13: de:a3:c2:52:dd:a3:64:51:84:21:c3:e0:b2:7f:81: 5b:85:f5:0c:e1:ef:4b:78:cb:f1:b1:f8:1d:8c:b3: 21:bb:e7:80:33:2b:71:b7:b9:89:13:f7:80:fa:01: b5:94:ca:cc:02:c9:3d:28:63:34:a3:08:3d:44:d8: 76:fa:d3:b2:b6:bd:12:78:07:7f:49:fd:9f:86:8f: 34:47:37:9b:b2:30:23:f6:81:57:40:a1:68:1e:36: c5:b7:46:00:eb:ae:b0:e2:8c:9f:89:0b:92:67:65: 1f:d7:98:63:6a:21:5c:d8:d9:0d:6a:2a:21:5b:d0: 46:c1:68:29:eb:cb:68:35:97:c5:29:93:41:c6:1d: d8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C6:ED:71:E6:ED:62:6C:DA:86:9F:FA:66:C5:DF:4F:CC:88:AE:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 169.197.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:4a:ba:57:f8:80:33:ac:a1:e4:bd:71:a4:4e:8e:ec:32:d4: 29:7c:af:40:3a:6e:72:6c:76:2e:ac:b1:98:60:bc:4c:0f:9e: 20:ab:fb:eb:5d:bc:02:20:fd:05:c7:3a:c4:32:05:3e:67:a0: 8d:ff:f2:d3:59:60:c8:3a:ac:68:d8:74:6d:b5:16:12:cb:6e: 51:27:4b:5f:e7:01:1b:c9:83:2c:e0:fa:4d:37:b0:b8:00:e6: eb:28:93:23:31:17:1d:8d:f4:a4:9c:93:27:cd:8a:80:ff:b8: de:96:52:b8:01:69:9b:e5:96:a6:68:d4:42:19:d2:e7:60:8a: e0:17:42:94:3e:6d:33:50:de:55:36:1b:82:d9:03:98:64:a7: ae:6b:b0:f2:90:27:c6:16:54:8d:93:5a:c5:e5:82:9d:04:c8: b8:fb:97:eb:5c:b6:7c:00:e0:0c:3d:6a:25:01:4b:0f:e0:19: 15:87:e0:ba:54:1d:df:df:ac:cf:e9:74:f2:e2:68:c4:4c:cd: 6a:81:9c:50:08:9c:8f:d5:8f:8e:0a:50:b9:b3:43:dd:49:bd: 8a:67:10:1a:9f:0a:2f:2d:45:2b:c5:ca:ad:99:8f:cb:bf:c6: f9:b2:95:21:91:21:c1:39:09:37:da:00:c3:14:4f:0e:19:fc: 38:90:b4:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OwFDb399Xgbs8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MmNhMTAzZGMtMTljYi00Y2NhLTgyNTQtN2M5YTljZDQxNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps3K5rqzHQ46KaKuHZcz6oTs2Lnm2kZtRNEh o2tIfk71eVTQueRDqhTP9iaS2WNRr7BQRN/Pj78bqNA5wrl90CQ0JkYITsHg6xMC 1Q/5YkzS9G733FX4DrLSqtJI5nxm+6+JgzUOEfSILfVT2qTGN92uO14LjRPeo8JS 3aNkUYQhw+Cyf4FbhfUM4e9LeMvxsfgdjLMhu+eAMytxt7mJE/eA+gG1lMrMAsk9 KGM0owg9RNh2+tOytr0SeAd/Sf2fho80RzebsjAj9oFXQKFoHjbFt0YA666w4oyf iQuSZ2Uf15hjaiFc2NkNaiohW9BGwWgp68toNZfFKZNBxh3YCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHG7XHm7WJs2oaf+mbF30/MiK6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvNWVmMDkyNWEtMDY1NC0z NmFhLTgzNjgtYmQyZTY2NTJmN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqcUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFKulf4gDOsoeS9caROjuwy1Cl8r0A6bnJsdi6ssZhgvEwPniCr++td vAIg/QXHOsQyBT5noI3/8tNZYMg6rGjYdG21FhLLblEnS1/nARvJgyzg+k03sLgA 5usokyMxFx2N9KSckyfNioD/uN6WUrgBaZvllqZo1EIZ0udgiuAXQpQ+bTNQ3lU2 G4LZA5hkp65rsPKQJ8YWVI2TWsXlgp0EyLj7l+tctnwA4Aw9aiUBSw/gGRWH4LpU Hd/frM/pdPLiaMRMzWqBnFAInI/Vj44KULmzQ91JvYpnEBqfCi8tRSvFyq2Zj8u/ xvmylSGRIcE5CTfaAMMUTw4Z/DiQtCg= -----END CERTIFICATE-----Generated at Wed May 13 06:54:01 2026 by rpki-client