$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/869dc589-2ba1-3cb1-83c5-a394b639843e.roa File: 869dc589-2ba1-3cb1-83c5-a394b639843e.roa (raw, json) Hash identifier: 759SJYGIVnHIfLzAx1P9G5QlDHAzJ6+KQ3jQnV5x568= Subject key identifier: ED:E5:35:90:44:C3:58:0C:3C:E7:86:D1:8A:56:28:46:8B:B7:32:CB Certificate issuer: /CN=b5df7c19-240b-4a12-a886-6df8618d66ad Certificate serial: 010D0C9F4328584DC995B077379137BE4ACD7E80 Authority key identifier: 60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/869dc589-2ba1-3cb1-83c5-a394b639843e.roa Signing time: Sun 10 May 2026 13:00:31 +0000 ROA not before: Sun 10 May 2026 13:00:31 +0000 ROA not after: Sat 08 Aug 2026 13:00:31 +0000 asID: 20073 IP address blocks: 206.168.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:95:b0:77:37:91:37:be:4a:cd:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5df7c19-240b-4a12-a886-6df8618d66ad Validity Not Before: May 10 13:00:31 2026 GMT Not After : Aug 8 13:00:31 2026 GMT Subject: CN=b5bf86e4-aab5-4b80-accd-3721c790633f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:d8:ce:fc:2e:e5:65:46:73:07:03:26:2b: 1e:2d:dc:af:bd:f2:25:63:91:81:8b:fe:33:c4:c7: 83:8d:b9:c4:b3:9c:0c:92:44:93:31:2f:3b:65:c9: 90:73:9b:56:94:59:33:0e:92:d2:58:39:ce:93:c7: a2:2e:1a:47:ac:64:da:19:8b:4a:63:ca:ed:10:39: 74:35:8d:ba:4d:89:87:40:7b:fe:0c:c9:32:01:cd: 6f:5d:5b:e2:8b:ea:80:06:53:84:f6:4e:d5:a5:30: 89:28:49:77:3e:d5:7c:9e:9c:fc:d9:f1:b5:d4:ce: 75:88:be:ac:4e:02:ea:67:f8:81:32:28:03:16:e2: f4:99:ab:b8:b7:61:ea:48:a2:37:32:f4:76:b8:32: 71:c4:0f:14:a0:70:88:26:e1:cf:3a:8b:d7:22:69: 94:f9:94:40:2c:cc:ac:4d:ac:3d:e0:80:3e:3c:4e: cd:a1:b3:9f:17:7c:df:06:26:33:42:b1:1b:14:c8: bd:38:2e:77:22:a9:88:1d:3a:84:81:29:9f:1b:b7: 30:ba:61:30:aa:90:26:71:55:a6:76:72:24:ed:8a: 27:b6:b9:dc:3b:6d:c3:3f:56:e1:76:a1:8c:14:ba: 14:73:85:e7:5c:95:6f:7f:4b:36:8f:39:89:dc:2b: af:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E5:35:90:44:C3:58:0C:3C:E7:86:D1:8A:56:28:46:8B:B7:32:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/869dc589-2ba1-3cb1-83c5-a394b639843e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.crl X509v3 Authority Key Identifier: keyid:60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer sbgp-ipAddrBlock: critical IPv4: 206.168.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d9:69:36:ab:c1:7d:f6:c6:f4:77:02:50:4f:7b:c8:fe:92: dd:67:0a:75:1b:e0:d2:71:6b:46:fb:d0:26:56:30:e1:7c:58: 1d:66:cb:2d:59:74:c4:38:8e:d8:f0:12:46:da:cf:2c:1f:09: af:b2:d2:e4:1c:da:8f:e4:4c:c5:db:55:f4:4d:de:d4:32:46: 2b:d2:f6:57:94:41:74:14:79:3e:6d:1e:6e:3e:60:2d:8f:a2: 9b:f8:c2:70:2d:7d:c3:9d:d0:d3:70:36:22:c8:df:01:d1:19: 39:c7:2e:a5:fc:98:e8:f4:7b:aa:f8:09:a4:ce:ec:3b:da:7e: ea:2a:90:bf:37:5a:ef:a4:67:3c:15:15:64:e3:19:79:68:18: a9:de:18:05:66:66:a7:d3:04:b7:fa:93:0b:6e:c6:26:24:98: 58:90:eb:9e:84:24:e4:91:2e:f9:28:5b:8f:85:8f:ee:d1:bd: 36:d6:61:1e:80:a8:c2:ce:f9:c3:8e:d5:98:44:a2:45:8a:f8: ac:c4:aa:8c:69:b9:6b:13:4f:0a:6e:14:4b:1a:fa:b2:30:ba: 0d:f2:9b:e7:c8:36:e9:b1:c6:97:1d:5b:96:60:04:c1:03:30: 29:73:8e:df:ab:ee:ff:5c:30:62:0a:58:82:5d:aa:d7:f9:84: d4:91:f5:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3JlbB3N5E3vkrNfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZjdjMTktMjQwYi00YTEyLWE4ODYtNmRmODYxOGQ2 NmFkMB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk YjViZjg2ZTQtYWFiNS00YjgwLWFjY2QtMzcyMWM3OTA2MzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5/Yzvwu5WVGcwcDJiseLdyvvfIlY5GBi/4z xMeDjbnEs5wMkkSTMS87ZcmQc5tWlFkzDpLSWDnOk8eiLhpHrGTaGYtKY8rtEDl0 NY26TYmHQHv+DMkyAc1vXVvii+qABlOE9k7VpTCJKEl3PtV8npz82fG11M51iL6s TgLqZ/iBMigDFuL0mau4t2HqSKI3MvR2uDJxxA8UoHCIJuHPOovXImmU+ZRALMys Taw94IA+PE7NobOfF3zfBiYzQrEbFMi9OC53IqmIHTqEgSmfG7cwumEwqpAmcVWm dnIk7YontrncO23DP1bhdqGMFLoUc4XnXJVvf0s2jzmJ3CuvaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3lNZBEw1gMPOeG0YpWKEaLtzLLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNWRm N2MxOS0yNDBiLTRhMTItYTg4Ni02ZGY4NjE4ZDY2YWQvODY5ZGM1ODktMmJhMS0z Y2IxLTgzYzUtYTM5NGI2Mzk4NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjVkZjdjMTktMjQwYi00YTEyLWE4 ODYtNmRmODYxOGQ2NmFkL2I1ZGY3YzE5LTI0MGItNGExMi1hODg2LTZkZjg2MThk NjZhZC5jcmwwHwYDVR0jBBgwFoAUYAwhAbnonfgipB8MKkG+avA2plwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNWRmN2MxOS0yNDBiLTRhMTItYTg4Ni02ZGY4 NjE4ZDY2YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLZaTarwX32xvR3AlBPe8j+kt1nCnUb4NJxa0b70CZWMOF8WB1myy1Z dMQ4jtjwEkbazywfCa+y0uQc2o/kTMXbVfRN3tQyRivS9leUQXQUeT5tHm4+YC2P opv4wnAtfcOd0NNwNiLI3wHRGTnHLqX8mOj0e6r4CaTO7DvafuoqkL83Wu+kZzwV FWTjGXloGKneGAVmZqfTBLf6kwtuxiYkmFiQ656EJOSRLvkoW4+Fj+7RvTbWYR6A qMLO+cOO1ZhEokWK+KzEqoxpuWsTTwpuFEsa+rIwug3ym+fINumxxpcdW5ZgBMED MClzjt+r7v9cMGIKWIJdqtf5hNSR9cg= -----END CERTIFICATE-----Generated at Wed May 13 12:56:38 2026 by rpki-client