$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661/6819f951-39f1-3a63-83ad-f0286da789c3.roa File: 6819f951-39f1-3a63-83ad-f0286da789c3.roa (raw, json) Hash identifier: sLr+h4R/F3PHqXtuSrNpvbEcp7iV1yfYvzTjG2wuakI= Subject key identifier: 82:45:0F:06:4F:36:7A:C9:79:AE:FB:EF:49:8F:8D:CE:57:01:2F:13 Certificate issuer: /CN=70f62895-71e7-4cda-a53a-08cbbd20d661 Certificate serial: 010D0C9F4328584DAF102F67C33613BE20385480 Authority key identifier: C4:7F:FB:23:C9:A7:DB:B0:4B:49:9A:0E:00:FD:31:76:FC:2F:66:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661/6819f951-39f1-3a63-83ad-f0286da789c3.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 11983 IP address blocks: 152.235.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661/70f62895-71e7-4cda-a53a-08cbbd20d661.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661/70f62895-71e7-4cda-a53a-08cbbd20d661.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:2f:67:c3:36:13:be:20:38:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f62895-71e7-4cda-a53a-08cbbd20d661 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=6200c403-e467-4e09-af8e-9b1014cd0b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7b:e4:cd:0a:53:76:79:7e:07:8c:62:00:da: ef:46:2a:78:3f:ab:ed:6d:bb:5f:6d:9f:98:14:8f: 36:5a:a2:fb:19:5f:dc:db:84:03:b7:21:c5:de:f5: 14:5f:f9:34:a6:c9:9b:1a:94:be:e9:b2:fd:7a:f3: ad:da:9e:df:59:d5:f5:65:93:61:12:92:ea:aa:0f: 2a:5b:10:cf:5a:36:80:d2:61:f2:14:ce:7a:22:69: 28:28:2c:3e:ba:ef:96:1b:87:2f:47:45:04:df:d3: ee:0f:df:71:53:46:2d:1b:01:c3:e0:94:91:20:a3: 02:02:53:46:ee:cf:e4:22:61:84:55:3d:db:66:db: 28:05:7d:45:dc:91:18:ca:97:23:b3:95:d6:c2:6d: 4f:db:51:85:ba:67:ea:5f:7c:ac:95:f4:09:6a:3f: af:42:89:f7:11:8c:11:ea:25:ae:88:e3:23:0d:13: 94:31:dd:52:06:e4:9f:0c:71:1c:4f:66:5c:53:07: 27:aa:cd:e8:ec:89:7f:9e:3a:51:36:9c:0e:2f:db: c0:68:65:0e:22:ee:85:27:01:6c:a2:c3:ee:80:90: 1e:5d:88:d6:d9:23:af:ce:69:b3:bb:20:40:34:90: 15:aa:d6:82:3f:b3:a2:9b:b6:a8:52:ce:ca:b1:a9: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:45:0F:06:4F:36:7A:C9:79:AE:FB:EF:49:8F:8D:CE:57:01:2F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661/6819f951-39f1-3a63-83ad-f0286da789c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661/70f62895-71e7-4cda-a53a-08cbbd20d661.crl X509v3 Authority Key Identifier: keyid:C4:7F:FB:23:C9:A7:DB:B0:4B:49:9A:0E:00:FD:31:76:FC:2F:66:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661.cer sbgp-ipAddrBlock: critical IPv4: 152.235.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:1e:93:8d:a2:d9:19:08:6c:38:89:01:96:92:c8:86:59:97: d7:8f:18:16:b8:2f:80:c1:e4:b3:0c:c0:c0:36:1c:31:d4:f1: 9a:6d:df:b3:16:24:2a:18:4e:88:62:ca:de:82:d7:e4:06:8a: 82:ac:fb:6b:20:9e:c6:9f:b6:86:a9:d6:1e:ba:11:c6:b7:52: bb:54:40:06:de:7b:75:e5:5b:5b:b4:d5:be:b5:d2:70:28:8c: bd:fe:89:30:bb:34:df:13:a0:b1:72:9a:9a:e0:fb:97:e8:6b: 59:20:20:0f:01:0a:85:c8:f4:a3:9a:56:39:b1:d9:a4:59:d2: 53:27:9a:46:3f:9d:ba:20:e2:2d:49:1c:1b:87:0a:39:ed:fd: a4:7d:ab:ac:6b:c4:2c:1c:53:27:90:08:c0:06:3c:7f:13:9c: 9f:b6:d0:da:a6:f7:49:b5:b1:22:ce:5b:cc:fa:ad:32:73:99: 2d:94:2a:dd:40:ac:06:bd:63:cb:78:c4:23:b0:85:ed:48:d0: 05:f6:75:23:83:dc:02:c4:ae:7d:f5:3b:9c:d7:58:db:34:76: 42:93:fe:2a:1d:70:df:a7:d3:04:19:aa:c8:8c:3d:ee:57:3e: 43:55:89:e1:60:68:89:59:d3:7c:74:49:91:4c:20:cc:d9:49: 0e:28:1b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEC9nwzYTviA4VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBmNjI4OTUtNzFlNy00Y2RhLWE1M2EtMDhjYmJkMjBk NjYxMB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk NjIwMGM0MDMtZTQ2Ny00ZTA5LWFmOGUtOWIxMDE0Y2QwYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33vkzQpTdnl+B4xiANrvRip4P6vtbbtfbZ+Y FI82WqL7GV/c24QDtyHF3vUUX/k0psmbGpS+6bL9evOt2p7fWdX1ZZNhEpLqqg8q WxDPWjaA0mHyFM56ImkoKCw+uu+WG4cvR0UE39PuD99xU0YtGwHD4JSRIKMCAlNG 7s/kImGEVT3bZtsoBX1F3JEYypcjs5XWwm1P21GFumfqX3yslfQJaj+vQon3EYwR 6iWuiOMjDROUMd1SBuSfDHEcT2ZcUwcnqs3o7Il/njpRNpwOL9vAaGUOIu6FJwFs osPugJAeXYjW2SOvzmmzuyBANJAVqtaCP7Oim7aoUs7KsanhCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJFDwZPNnrJea7770mPjc5XAS8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83MGY2 Mjg5NS03MWU3LTRjZGEtYTUzYS0wOGNiYmQyMGQ2NjEvNjgxOWY5NTEtMzlmMS0z YTYzLTgzYWQtZjAyODZkYTc4OWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNzBmNjI4OTUtNzFlNy00Y2RhLWE1 M2EtMDhjYmJkMjBkNjYxLzcwZjYyODk1LTcxZTctNGNkYS1hNTNhLTA4Y2JiZDIw ZDY2MS5jcmwwHwYDVR0jBBgwFoAUxH/7I8mn27BLSZoOAP0xdvwvZpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83MGY2Mjg5NS03MWU3LTRjZGEtYTUzYS0wOGNi YmQyMGQ2NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmOsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAek42i2RkIbDiJAZaSyIZZl9ePGBa4L4DB5LMMwMA2HDHU8Zpt37MW JCoYTohiyt6C1+QGioKs+2sgnsaftoap1h66Eca3UrtUQAbee3XlW1u01b610nAo jL3+iTC7NN8ToLFymprg+5foa1kgIA8BCoXI9KOaVjmx2aRZ0lMnmkY/nbog4i1J HBuHCjnt/aR9q6xrxCwcUyeQCMAGPH8TnJ+20Nqm90m1sSLOW8z6rTJzmS2UKt1A rAa9Y8t4xCOwhe1I0AX2dSOD3ALErn31O5zXWNs0dkKT/iodcN+n0wQZqsiMPe5X PkNVieFgaIlZ03x0SZFMIMzZSQ4oG2E= -----END CERTIFICATE-----Generated at Wed May 13 08:01:31 2026 by rpki-client