$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/654853d6-784c-3ddc-84de-46e0cf0c8d68.roa File: 654853d6-784c-3ddc-84de-46e0cf0c8d68.roa (raw, json) Hash identifier: cFPT/fYtUgUxLN7pKB7AnjsCsQdkERhyfkg7QNx4B2E= Subject key identifier: CE:7D:01:24:58:5D:1D:FC:B4:F6:49:D8:09:44:BC:A3:B5:A8:76:78 Certificate issuer: /CN=84bb86db-bd3c-43da-9277-f7557545f5ad Certificate serial: 010D0C9F4328584D9EDB9A17A246DB5E9E85E100 Authority key identifier: 1A:1A:2D:12:7D:21:DA:06:01:60:C7:C8:28:67:59:A2:77:D8:A5:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/654853d6-784c-3ddc-84de-46e0cf0c8d68.roa Signing time: Sat 25 Apr 2026 05:41:46 +0000 ROA not before: Sat 25 Apr 2026 05:41:46 +0000 ROA not after: Fri 24 Jul 2026 05:41:46 +0000 asID: 14209 IP address blocks: 192.30.208.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/84bb86db-bd3c-43da-9277-f7557545f5ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/84bb86db-bd3c-43da-9277-f7557545f5ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:db:9a:17:a2:46:db:5e:9e:85:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bb86db-bd3c-43da-9277-f7557545f5ad Validity Not Before: Apr 25 05:41:46 2026 GMT Not After : Jul 24 05:41:46 2026 GMT Subject: CN=35e8dd2a-7187-4fd8-af1d-c42e724f4b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ce:90:71:c7:80:79:e0:59:4a:bd:44:18:11: af:fe:06:76:ee:37:c6:90:93:43:15:a0:24:df:31: 67:bd:a3:a5:d6:d1:19:d3:38:25:78:05:98:53:77: da:35:6c:0e:75:3a:77:0f:af:47:1c:c5:e9:13:b4: 55:80:d9:be:13:02:b9:06:95:9e:cb:98:53:41:99: f2:b6:f4:6d:c6:61:5f:56:50:12:6d:ad:f9:80:eb: 51:e8:38:a6:ea:b9:eb:07:1f:68:0a:0a:33:4b:78: b1:36:12:46:74:d5:9a:3e:e8:36:4c:91:02:26:e4: 72:d6:ba:2e:bb:63:83:d3:b8:6b:63:2e:d4:e2:26: ab:54:2d:ec:43:f3:15:0b:b3:2c:6b:8f:1d:73:81: 34:62:7b:fd:73:b9:7a:2f:19:0b:da:ef:0f:67:e4: 00:ea:30:d0:30:e8:ee:df:3b:a7:4d:50:0b:4c:89: b5:f4:eb:a6:4e:83:c2:7b:4a:d9:ae:1e:23:2e:0b: e9:b8:77:66:86:8a:52:f6:90:d8:5b:db:ce:86:ea: 0f:d0:8d:5c:a4:46:89:70:72:9f:6b:e9:24:03:a9: 2e:ce:98:7c:5b:e9:95:46:03:f1:81:33:b9:17:a4: 86:a4:02:ff:b9:aa:d2:f3:c1:7a:87:ea:9c:fb:a8: b9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7D:01:24:58:5D:1D:FC:B4:F6:49:D8:09:44:BC:A3:B5:A8:76:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/654853d6-784c-3ddc-84de-46e0cf0c8d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/84bb86db-bd3c-43da-9277-f7557545f5ad.crl X509v3 Authority Key Identifier: keyid:1A:1A:2D:12:7D:21:DA:06:01:60:C7:C8:28:67:59:A2:77:D8:A5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad.cer sbgp-ipAddrBlock: critical IPv4: 192.30.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f8:d1:1f:77:b6:82:1c:75:cb:0d:81:1e:9c:a6:36:11:1f: c9:76:71:dd:d7:9d:ae:da:2d:35:2d:a1:b7:50:1d:72:eb:70: d2:67:10:99:e9:6d:d6:9b:2f:83:c2:27:29:e0:fd:cb:84:ab: a5:cf:b3:3c:91:c7:a3:c1:fd:78:19:33:95:cb:aa:6a:e3:77: 3d:11:31:38:35:9a:e5:83:5b:0b:93:ff:f1:99:0b:e7:a8:92: 15:64:a5:a7:18:67:8b:6f:f0:1f:b6:e2:f3:e5:a2:2f:be:ce: 49:e7:a1:ae:c9:3c:2d:1a:ad:c5:81:9e:af:16:3a:e0:68:54: 16:df:37:9c:ed:e7:65:7a:a5:94:a9:a7:54:b0:9c:28:69:2c: 41:4f:6e:21:a8:1b:3e:9e:0b:a3:92:b3:64:6e:f8:73:68:ad: 3f:64:6b:9d:6c:a5:59:d2:dd:4c:70:e9:9c:cd:51:5e:4f:01: e4:5e:2c:5c:0a:eb:0b:3e:c1:95:52:e2:a9:83:67:7d:78:8b: 65:76:7c:e3:b4:3e:d1:19:34:dc:6e:ea:2d:80:3a:e8:40:cd: 51:e0:ef:28:eb:2d:40:d6:69:c7:2e:9e:ad:f9:37:0d:2c:84: 31:a7:76:4f:e7:81:21:60:b6:71:0f:c1:27:1c:a5:9f:43:0c: d6:9f:d2:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2e25oXokbbXp6F4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRiYjg2ZGItYmQzYy00M2RhLTkyNzctZjc1NTc1NDVm NWFkMB4XDTI2MDQyNTA1NDE0NloXDTI2MDcyNDA1NDE0NlowLzEtMCsGA1UEAxMk MzVlOGRkMmEtNzE4Ny00ZmQ4LWFmMWQtYzQyZTcyNGY0YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM6QcceAeeBZSr1EGBGv/gZ27jfGkJNDFaAk 3zFnvaOl1tEZ0zgleAWYU3faNWwOdTp3D69HHMXpE7RVgNm+EwK5BpWey5hTQZny tvRtxmFfVlASba35gOtR6Dim6rnrBx9oCgozS3ixNhJGdNWaPug2TJECJuRy1rou u2OD07hrYy7U4iarVC3sQ/MVC7Msa48dc4E0Ynv9c7l6LxkL2u8PZ+QA6jDQMOju 3zunTVALTIm19OumToPCe0rZrh4jLgvpuHdmhopS9pDYW9vOhuoP0I1cpEaJcHKf a+kkA6kuzph8W+mVRgPxgTO5F6SGpAL/uarS88F6h+qc+6i5gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM59ASRYXR38tPZJ2AlEvKO1qHZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84NGJi ODZkYi1iZDNjLTQzZGEtOTI3Ny1mNzU1NzU0NWY1YWQvNjU0ODUzZDYtNzg0Yy0z ZGRjLTg0ZGUtNDZlMGNmMGM4ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODRiYjg2ZGItYmQzYy00M2RhLTky NzctZjc1NTc1NDVmNWFkLzg0YmI4NmRiLWJkM2MtNDNkYS05Mjc3LWY3NTU3NTQ1 ZjVhZC5jcmwwHwYDVR0jBBgwFoAUGhotEn0h2gYBYMfIKGdZonfYpaUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84NGJiODZkYi1iZDNjLTQzZGEtOTI3Ny1mNzU1 NzU0NWY1YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz40R93toIcdcsNgR6cpjYRH8l2cd3Xna7aLTUtobdQHXLrcNJnEJnp bdabL4PCJyng/cuEq6XPszyRx6PB/XgZM5XLqmrjdz0RMTg1muWDWwuT//GZC+eo khVkpacYZ4tv8B+24vPloi++zknnoa7JPC0arcWBnq8WOuBoVBbfN5zt52V6pZSp p1SwnChpLEFPbiGoGz6eC6OSs2Ru+HNorT9ka51spVnS3Uxw6ZzNUV5PAeReLFwK 6ws+wZVS4qmDZ314i2V2fOO0PtEZNNxu6i2AOuhAzVHg7yjrLUDWaccunq35Nw0s hDGndk/ngSFgtnEPwSccpZ9DDNaf0sw= -----END CERTIFICATE-----Generated at Wed May 13 19:36:25 2026 by rpki-client