$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa File: a993a619-ee1e-3438-894d-7b8dfa52d09d.roa (raw, json) Hash identifier: ETcvzZkVjv4lvkTLizx2n6H/FVxjfsypZPH7i+apPtA= Subject key identifier: 65:2F:64:5F:44:41:4B:DD:2E:69:1B:4C:EC:AD:8E:66:A3:F4:74:0A Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584DCAFB1924FFCCCF487098D980 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 30387 IP address blocks: 156.40.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:19:24:ff:cc:cf:48:70:98:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=b4288ca1-b57b-473f-b956-1e6eca21b3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:83:d3:90:af:fc:fa:22:7c:87:65:56:3f:ff: 0e:85:98:df:01:0f:83:24:6f:51:9f:a0:41:9a:33: 15:32:a1:67:7d:59:af:ef:ae:a1:23:d2:03:4e:c0: 99:77:b3:73:41:66:42:43:ee:79:79:3a:04:fd:45: a9:d7:71:34:2f:d1:2f:f6:b9:f6:b9:56:f2:92:b2: a1:4e:80:11:07:18:27:cb:62:c3:c4:75:d0:95:56: 58:11:3d:16:0b:e0:68:f1:81:2a:0b:3d:aa:10:56: 02:0a:4e:c8:24:3d:97:e8:71:f5:cf:69:5b:f6:d4: 6c:53:2a:42:50:a6:1f:fa:e3:3c:9a:fc:a8:19:f3: 3d:a3:b8:2b:24:03:96:c9:7a:7b:32:57:9a:ff:94: 26:b0:c4:b5:44:e3:f0:95:8e:cd:3e:9b:dd:40:6d: 25:4c:9c:e7:c0:fe:f2:17:b7:62:a6:60:aa:45:ae: a9:10:9d:c9:a5:49:5e:27:8b:dd:48:93:97:a5:e5: 2a:a3:94:d2:c3:90:69:a8:ac:86:83:07:fd:72:dc: 11:ee:ff:23:39:d9:36:4b:32:21:67:ff:d6:7a:50: 9c:ce:f5:6b:9c:c1:6a:2d:d1:8b:eb:6b:aa:cb:18: 26:5b:e9:f1:9d:2c:8c:af:45:af:95:94:c2:5b:4f: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2F:64:5F:44:41:4B:DD:2E:69:1B:4C:EC:AD:8E:66:A3:F4:74:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:16:1a:c7:66:d7:46:b1:fa:1e:7d:42:2f:40:70:0b:53:52: 52:f1:9e:ea:3b:cd:f8:78:a3:2b:e6:c8:a3:38:98:80:b0:8d: 50:1c:0b:3f:a2:5a:c1:4d:30:7b:d3:ea:70:aa:05:8d:85:2c: 1d:a5:8c:ee:0b:40:cc:f6:de:1f:5d:87:dc:77:e8:b7:07:65: f6:ed:d1:7e:27:7d:35:fd:6c:74:b4:de:a9:b0:f7:2f:3b:21: 19:49:9f:31:26:79:44:7e:ab:1c:eb:5f:fd:0d:9e:19:74:fd: b9:fb:b8:8f:b4:27:9e:8d:8d:7f:a1:90:1d:e9:eb:4a:24:97: 58:79:15:03:f6:19:d8:a6:11:01:ca:69:dd:6e:de:cf:f9:73: 39:c2:22:c0:b2:79:4c:56:48:47:7b:84:38:19:37:c5:1f:fe: 79:4a:77:49:4d:44:e3:a0:51:9b:aa:c0:f0:52:3d:17:ab:b3: e8:73:b4:b8:5c:42:b2:d3:d2:15:16:fe:7d:76:ad:67:69:61: e2:e9:73:7f:fc:fd:01:cd:00:a1:ea:2a:e2:fa:2c:7b:61:b4: 1a:79:e1:10:b6:7a:07:16:b9:b8:a5:35:92:6a:0a:72:f3:74: 9d:ea:23:77:d5:e2:7f:f1:76:c0:e2:ff:e8:ac:42:01:87:44: b9:5f:a9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xkk/8zPSHCY2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk YjQyODhjYTEtYjU3Yi00NzNmLWI5NTYtMWU2ZWNhMjFiM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYPTkK/8+iJ8h2VWP/8OhZjfAQ+DJG9Rn6BB mjMVMqFnfVmv766hI9IDTsCZd7NzQWZCQ+55eToE/UWp13E0L9Ev9rn2uVbykrKh ToARBxgny2LDxHXQlVZYET0WC+Bo8YEqCz2qEFYCCk7IJD2X6HH1z2lb9tRsUypC UKYf+uM8mvyoGfM9o7grJAOWyXp7Mlea/5QmsMS1ROPwlY7NPpvdQG0lTJznwP7y F7dipmCqRa6pEJ3JpUleJ4vdSJOXpeUqo5TSw5BpqKyGgwf9ctwR7v8jOdk2SzIh Z//WelCczvVrnMFqLdGL62uqyxgmW+nxnSyMr0WvlZTCW09wcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUvZF9EQUvdLmkbTOytjmaj9HQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYTk5M2E2MTktZWUxZS0z NDM4LTg5NGQtN2I4ZGZhNTJkMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnChiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0WGsdm10ax+h59Qi9AcAtTUlLxnuo7zfh4oyvmyKM4mICwjVAcCz+i WsFNMHvT6nCqBY2FLB2ljO4LQMz23h9dh9x36LcHZfbt0X4nfTX9bHS03qmw9y87 IRlJnzEmeUR+qxzrX/0Nnhl0/bn7uI+0J56NjX+hkB3p60okl1h5FQP2GdimEQHK ad1u3s/5cznCIsCyeUxWSEd7hDgZN8Uf/nlKd0lNROOgUZuqwPBSPRers+hztLhc QrLT0hUW/n12rWdpYeLpc3/8/QHNAKHqKuL6LHthtBp54RC2egcWubilNZJqCnLz dJ3qI3fV4n/xdsDi/+isQgGHRLlfqeM= -----END CERTIFICATE-----Generated at Wed May 13 10:27:52 2026 by rpki-client