$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/6e2226a9-7a87-342f-8ea2-6bbfc12168e6.roa File: 6e2226a9-7a87-342f-8ea2-6bbfc12168e6.roa (raw, json) Hash identifier: f99XP17awoz1CTKGMgFzPoiVvuQX04//AOwHR/du1Kc= Subject key identifier: 37:B8:04:5A:B6:F1:50:D6:04:37:06:0F:BC:B6:00:E0:3E:38:FC:FB Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F4328584DCDC5A04660A0DBEA32E29700 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/6e2226a9-7a87-342f-8ea2-6bbfc12168e6.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 53768 IP address blocks: 162.134.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:a0:46:60:a0:db:ea:32:e2:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=f04e11e1-4c3f-46c5-9f77-f7212ef96c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4c:70:ad:c4:de:86:b9:82:c9:13:98:49:1f: 12:e6:6e:b0:3b:67:10:00:55:cb:69:41:54:20:f9: 34:96:d2:57:78:00:53:ad:59:7b:7a:59:3d:20:0e: 86:5a:71:fa:7b:b3:00:ad:ba:1f:15:a0:35:73:0e: c8:16:f7:20:70:ff:b2:7e:d6:ee:60:dc:12:0c:b6: 60:52:76:15:21:54:bc:9d:ac:3b:f7:21:4a:70:26: 3d:ae:1a:f0:3a:1d:af:21:45:d2:8b:3f:f8:ab:e0: 7c:6e:95:2f:f1:01:a1:43:f1:b5:7f:9b:0c:f1:f1: fc:5b:bc:fc:55:ff:97:0d:05:50:9f:4c:d4:6e:e7: 1c:0d:85:ff:75:f8:a9:d0:22:ba:b8:a0:50:0d:ce: 6e:96:42:d4:83:e7:29:22:fc:e7:24:c9:5e:38:56: 7a:cb:4c:0c:7c:17:8e:e9:35:46:24:83:94:dd:bd: d4:2a:be:8f:f9:db:34:3b:33:f4:ac:99:71:be:f1: 9f:a3:da:e6:fa:4b:0c:ff:b9:0b:20:56:0f:75:5f: 68:b6:96:1d:d5:c7:1c:c2:3f:83:2c:69:3c:a3:47: 16:fb:a7:3e:a8:c2:d1:22:68:69:e3:20:1a:d9:d4: 09:ee:b7:95:23:bb:53:da:4a:bb:87:ed:cd:80:ae: 57:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B8:04:5A:B6:F1:50:D6:04:37:06:0F:BC:B6:00:E0:3E:38:FC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/6e2226a9-7a87-342f-8ea2-6bbfc12168e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:14:33:5b:39:ff:a8:9b:26:20:f1:7c:ad:23:e1:5b:ab:3f: a0:34:44:7e:cf:36:4c:c5:49:f9:b7:3e:c1:6b:f9:21:82:c9: 5d:31:c0:68:6e:dd:ec:dc:d4:00:90:03:48:94:47:b9:43:93: d2:da:53:62:c9:7b:7b:56:66:d6:d6:a0:ff:61:03:ef:96:81: 5c:fb:f3:23:12:42:9b:9a:27:b1:b7:1c:db:ec:56:b8:d5:55: 8c:06:27:06:45:28:f0:a7:3e:4f:0a:ae:13:a1:62:39:ec:03: e0:2d:25:e8:a4:b8:f5:94:35:ea:fe:94:80:33:f4:33:db:94: f1:e0:bf:01:58:31:4c:55:07:c6:09:84:08:ce:98:f5:71:e5: 84:0a:4c:d8:59:48:95:87:a8:58:76:da:29:6f:4c:09:81:e5: 1e:fe:26:4d:79:a8:30:75:05:36:e7:0a:6f:54:82:7e:38:54: 15:21:2b:73:5b:c9:f6:95:6c:ce:0e:64:82:bb:22:a1:2b:cd: cc:bb:e6:bf:fc:6c:cd:2b:11:cf:57:20:9f:b3:f5:b1:b3:cb: 87:86:24:cc:7b:e3:d7:36:57:b3:b6:24:3c:05:9f:ff:14:aa: 73:4b:50:16:5a:09:10:e7:99:f7:27:75:2f:b9:e5:ca:67:07: f0:57:02:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxaBGYKDb6jLilwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk ZjA0ZTExZTEtNGMzZi00NmM1LTlmNzctZjcyMTJlZjk2YzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkxwrcTehrmCyROYSR8S5m6wO2cQAFXLaUFU IPk0ltJXeABTrVl7elk9IA6GWnH6e7MArbofFaA1cw7IFvcgcP+yftbuYNwSDLZg UnYVIVS8naw79yFKcCY9rhrwOh2vIUXSiz/4q+B8bpUv8QGhQ/G1f5sM8fH8W7z8 Vf+XDQVQn0zUbuccDYX/dfip0CK6uKBQDc5ulkLUg+cpIvznJMleOFZ6y0wMfBeO 6TVGJIOU3b3UKr6P+ds0OzP0rJlxvvGfo9rm+ksM/7kLIFYPdV9otpYd1cccwj+D LGk8o0cW+6c+qMLRImhp4yAa2dQJ7reVI7tT2kq7h+3NgK5XdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe4BFq28VDWBDcGD7y2AOA+OPz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvNmUyMjI2YTktN2E4Ny0z NDJmLThlYTItNmJiZmMxMjE2OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDooZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8UM1s5/6ibJiDxfK0j4VurP6A0RH7PNkzFSfm3PsFr+SGCyV0xwGhu 3ezc1ACQA0iUR7lDk9LaU2LJe3tWZtbWoP9hA++WgVz78yMSQpuaJ7G3HNvsVrjV VYwGJwZFKPCnPk8KrhOhYjnsA+AtJeikuPWUNer+lIAz9DPblPHgvwFYMUxVB8YJ hAjOmPVx5YQKTNhZSJWHqFh22ilvTAmB5R7+Jk15qDB1BTbnCm9Ugn44VBUhK3Nb yfaVbM4OZIK7IqErzcy75r/8bM0rEc9XIJ+z9bGzy4eGJMx749c2V7O2JDwFn/8U qnNLUBZaCRDnmfcndS+55cpnB/BXAjQ= -----END CERTIFICATE-----Generated at Wed May 13 14:12:25 2026 by rpki-client