$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa File: caf40528-fd91-3c64-8165-eed915d60d9c.roa (raw, json) Hash identifier: CsXt7NskbKK86NUKNuDormzgbrOSvokvl0UF/z9/ILs= Subject key identifier: 32:60:63:6F:0E:A9:F4:1F:3A:60:8D:D4:FA:85:5C:1D:2F:32:EB:1B Certificate issuer: /CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba Certificate serial: 010D0C9F4328584DAAE032B443DA1B177A234900 Authority key identifier: 1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 8560 IP address blocks: 158.222.102.0/23 maxlen: 32 162.254.24.0/22 maxlen: 32 192.96.159.0/24 maxlen: 32 192.152.28.0/24 maxlen: 32 192.206.141.0/24 maxlen: 32 208.94.36.0/22 maxlen: 32 2607:b500::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:32:b4:43:da:1b:17:7a:23:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=d48e22a2-ae0a-4126-9457-e91ab94d8b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:01:32:64:0c:16:ea:8c:aa:dd:3c:f5:62:66: ff:28:29:5a:d8:0d:fa:41:79:78:8c:0d:1d:1a:10: 0e:56:58:e7:e5:3a:c5:74:32:c6:3c:34:73:e9:91: e6:cc:8c:96:81:7b:64:b3:cf:8c:e0:80:23:5a:c5: b6:76:f2:0c:65:7e:5a:84:e3:c8:3b:92:09:10:a4: 55:3d:bb:c6:76:cb:27:1e:f6:c3:a3:8a:2a:32:51: 43:1c:27:bd:e0:af:6f:07:00:9c:40:cc:8e:28:e8: 76:b2:f5:d0:9d:47:db:7c:57:35:d0:5d:b0:09:a4: 14:8b:a2:dc:bf:4f:77:13:42:01:b2:d5:a3:a2:92: 82:96:12:8c:a6:11:18:6c:53:be:ed:2c:9b:40:d6: 91:7d:b9:e9:ee:a9:9e:40:80:ac:ad:3c:69:81:1a: 14:21:5f:31:95:b6:25:33:07:13:e9:e7:21:b0:07: f7:c1:a6:93:fa:1a:82:0e:b7:f9:c0:78:98:1f:24: d9:f6:7a:3d:72:d1:d5:57:4e:1d:c5:9a:13:3a:d5: 77:9d:7c:76:3a:22:b4:e2:0b:68:46:7c:bb:63:f6: 3a:fc:7e:55:7e:ec:1b:a1:88:7e:02:4c:f1:42:ea: 66:37:2f:f5:3a:4e:40:bf:a5:fe:5c:9e:d0:57:fa: ad:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:60:63:6F:0E:A9:F4:1F:3A:60:8D:D4:FA:85:5C:1D:2F:32:EB:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl X509v3 Authority Key Identifier: keyid:1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer sbgp-ipAddrBlock: critical IPv4: 158.222.102.0/23 162.254.24.0/22 192.96.159.0/24 192.152.28.0/24 192.206.141.0/24 208.94.36.0/22 IPv6: 2607:b500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:44:5d:e1:9a:ea:6c:e3:8e:69:ec:a1:40:03:99:3b:f2:6e: 77:f7:a7:7e:87:b4:06:1f:57:eb:1b:89:e8:bb:e7:e7:7b:bf: 8c:f7:91:df:0a:9f:3b:4b:1f:3e:07:82:80:69:9c:5f:07:f1: d8:b7:25:90:6f:86:52:e9:71:1f:d0:fb:b8:59:45:34:1c:b5: a6:62:61:ae:94:25:ad:0b:d4:89:f4:9e:ba:27:9d:85:7d:ee: fa:cd:7c:85:86:0e:6b:4f:b5:06:b2:30:0a:6b:a5:0b:73:55: 74:c4:e4:db:54:ff:fb:92:40:ed:4f:25:a3:36:27:dc:2b:06: b7:d6:99:f3:1b:91:f8:1d:fa:22:cc:26:7b:47:67:bf:12:52: ad:9a:56:0d:47:90:8e:32:30:33:6e:49:5a:d6:d4:bc:ef:9b: ce:8c:a1:ab:ef:af:60:71:b2:a0:1a:a6:05:e7:4e:6f:f9:38: 0f:a3:31:02:45:41:cc:70:66:da:d2:b4:36:7c:c7:fb:07:83: 53:04:96:fb:49:88:c8:59:4f:8d:09:bd:a5:50:fc:67:d2:d8: ec:34:c4:5d:00:5f:13:5f:9e:5b:6d:17:2d:9d:fb:47:40:3f: 55:78:50:d0:d7:d2:28:b3:83:59:07:7c:e6:59:a1:28:03:24: 6a:ee:f2:c4 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWE2q4DK0Q9obF3ojSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVhY2IzZDAtNGI2Yi00ZjJjLTlkZDEtZTI4NzViZmQw Y2JhMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk ZDQ4ZTIyYTItYWUwYS00MTI2LTk0NTctZTkxYWI5NGQ4YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQEyZAwW6oyq3Tz1Ymb/KCla2A36QXl4jA0d GhAOVljn5TrFdDLGPDRz6ZHmzIyWgXtks8+M4IAjWsW2dvIMZX5ahOPIO5IJEKRV PbvGdssnHvbDo4oqMlFDHCe94K9vBwCcQMyOKOh2svXQnUfbfFc10F2wCaQUi6Lc v093E0IBstWjopKClhKMphEYbFO+7SybQNaRfbnp7qmeQICsrTxpgRoUIV8xlbYl MwcT6echsAf3waaT+hqCDrf5wHiYHyTZ9no9ctHVV04dxZoTOtV3nXx2OiK04gto Rny7Y/Y6/H5VfuwboYh+AkzxQupmNy/1Ok5Av6X+XJ7QV/qt7wIDAQABo4IDgjCC A34wHQYDVR0OBBYEFDJgY28OqfQfOmCN1PqFXB0vMusbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZWFj YjNkMC00YjZiLTRmMmMtOWRkMS1lMjg3NWJmZDBjYmEvY2FmNDA1MjgtZmQ5MS0z YzY0LTgxNjUtZWVkOTE1ZDYwZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGVhY2IzZDAtNGI2Yi00ZjJjLTlk ZDEtZTI4NzViZmQwY2JhLzBlYWNiM2QwLTRiNmItNGYyYy05ZGQxLWUyODc1YmZk MGNiYS5jcmwwHwYDVR0jBBgwFoAUGjVbTftFqy72BE8J7x3HPvg5dGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZWFjYjNkMC00YjZiLTRmMmMtOWRkMS1lMjg3 NWJmZDBjYmEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBnt5mAwQC ov4YAwQAwGCfAwQAwJgcAwQAwM6NAwQC0F4kMA0EAgACMAcDBQAmB7UAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAI1EXeGa6mzjjmnsoUADmTvybnf3p36HtAYfV+sbiei75+d7v4z3kd8KnztL Hz4HgoBpnF8H8di3JZBvhlLpcR/Q+7hZRTQctaZiYa6UJa0L1In0nronnYV97vrN fIWGDmtPtQayMAprpQtzVXTE5NtU//uSQO1PJaM2J9wrBrfWmfMbkfgd+iLMJntH Z78SUq2aVg1HkI4yMDNuSVrW1Lzvm86Moavvr2BxsqAapgXnTm/5OA+jMQJFQcxw ZtrStDZ8x/sHg1MElvtJiMhZT40JvaVQ/GfS2Ow0xF0AXxNfnlttFy2d+0dAP1V4 UNDX0iizg1kHfOZZoSgDJGru8sQ= -----END CERTIFICATE-----Generated at Wed May 13 05:20:40 2026 by rpki-client