$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa File: ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa (raw, json) Hash identifier: ZT3x8LmN5hBqgrlAaCNmReqN18TQmVW2Q+A5DdFKH2E= Subject key identifier: 0C:35:B3:4B:57:21:EC:0C:C8:4B:3A:8B:A5:C7:3E:16:3D:30:19:B7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DEDE09E8577F34D29EA983000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 3356 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:9e:85:77:f3:4d:29:ea:98:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=b09e2681-20e1-4f33-9317-c2ba0b9a9df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2d:1a:7e:99:3a:19:bd:11:34:2b:cd:25:e8: 06:85:bf:53:dd:a8:fd:b5:d8:89:c7:3d:7d:7f:84: 94:71:8b:71:5e:d6:6b:89:c2:34:d9:78:f3:b4:48: c2:18:ac:60:be:24:39:a3:83:01:70:7c:02:8e:3c: 21:93:c1:a8:33:bf:f4:e3:a4:6f:7f:f1:9f:16:59: 10:c9:cd:ff:e1:fb:ab:13:a1:cf:fb:1b:63:4a:04: 56:ec:ff:9e:72:3a:91:42:3b:b3:5e:b3:84:92:4a: e5:79:f7:ee:e7:72:a5:eb:b0:8f:c4:7a:80:54:7d: b6:4c:b8:19:96:4a:17:d1:cf:28:17:2c:d7:4b:8a: 4e:d7:5b:5f:02:88:56:c5:ce:a7:31:4c:6b:1a:34: 96:6c:c9:3e:61:b1:42:73:18:37:ba:05:cc:3b:14: 81:59:e4:2f:a9:48:02:cb:39:6e:b6:a9:76:6c:be: f8:99:0d:50:7b:e2:7c:2c:6c:e8:11:96:09:53:52: 56:22:c8:9b:93:4a:b0:ad:62:97:a7:da:48:78:7d: 75:9a:56:3a:4c:18:c2:62:78:a8:4f:ee:0c:d0:bf: 8e:59:1a:5c:42:91:a4:e2:d1:8e:3f:a9:3e:29:d4: 81:30:be:2f:a8:98:dd:73:98:0c:0b:cd:36:14:6c: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:35:B3:4B:57:21:EC:0C:C8:4B:3A:8B:A5:C7:3E:16:3D:30:19:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:af:b6:0b:2d:ac:0c:b6:8d:ef:5b:84:77:46:44:23:95:1c: d7:b6:cd:40:c9:f3:05:14:6e:d5:99:e1:e1:2f:56:5f:7e:ff: 19:b7:97:29:d1:56:67:fa:e7:f4:5d:07:e8:0c:6c:a1:cf:9e: 09:cf:9f:9b:b7:ab:ab:19:3e:dc:51:31:13:1e:f7:7e:d7:9f: b5:81:54:d1:5a:ae:30:6b:b4:8f:5e:68:79:16:73:7f:57:6e: f0:d9:73:7c:b5:d6:90:f0:7c:ad:9c:8d:0e:4c:9b:24:66:97: 0a:9d:75:77:d6:38:98:b6:01:37:2d:16:65:e8:fd:1c:2b:1a: 27:07:e5:09:42:fe:77:1a:d7:ee:8b:52:84:01:45:f1:00:2d: 15:2f:aa:bb:f4:46:d5:21:a8:be:44:f0:ac:2b:ae:ff:96:01: ed:2b:37:2b:2a:58:f0:25:6d:39:2d:6c:27:34:23:94:f1:f4: b1:d9:1b:56:33:06:04:88:17:cb:08:00:f3:d4:ad:0c:8b:03: 8a:55:c7:22:67:05:be:b3:be:06:6f:1d:6d:27:3b:a6:4d:b4: 24:ac:57:7a:fb:2c:ca:29:9d:c8:3d:54:ff:b2:c0:58:4b:47: 0b:4d:77:3e:d4:21:c6:5e:9e:31:bc:46:5d:bd:78:27:1a:1f: a0:a2:0b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4J6Fd/NNKeqYMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk YjA5ZTI2ODEtMjBlMS00ZjMzLTkzMTctYzJiYTBiOWE5ZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC0afpk6Gb0RNCvNJegGhb9T3aj9tdiJxz19 f4SUcYtxXtZricI02XjztEjCGKxgviQ5o4MBcHwCjjwhk8GoM7/046Rvf/GfFlkQ yc3/4furE6HP+xtjSgRW7P+ecjqRQjuzXrOEkkrleffu53Kl67CPxHqAVH22TLgZ lkoX0c8oFyzXS4pO11tfAohWxc6nMUxrGjSWbMk+YbFCcxg3ugXMOxSBWeQvqUgC yzlutql2bL74mQ1Qe+J8LGzoEZYJU1JWIsibk0qwrWKXp9pIeH11mlY6TBjCYnio T+4M0L+OWRpcQpGk4tGOP6k+KdSBML4vqJjdc5gMC802FGxB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw1s0tXIewMyEs6i6XHPhY9MBm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWMwNGY5YWEtYjhiNC0z MDJlLWE1NGMtMmJhYTFmM2JmYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqvtgstrAy2je9bhHdGRCOVHNe2zUDJ8wUUbtWZ4eEvVl9+/xm3lynR Vmf65/RdB+gMbKHPngnPn5u3q6sZPtxRMRMe937Xn7WBVNFarjBrtI9eaHkWc39X bvDZc3y11pDwfK2cjQ5MmyRmlwqddXfWOJi2ATctFmXo/RwrGicH5QlC/nca1+6L UoQBRfEALRUvqrv0RtUhqL5E8Kwrrv+WAe0rNysqWPAlbTktbCc0I5Tx9LHZG1Yz BgSIF8sIAPPUrQyLA4pVxyJnBb6zvgZvHW0nO6ZNtCSsV3r7LMopncg9VP+ywFhL RwtNdz7UIcZenjG8Rl29eCcaH6CiC0A= -----END CERTIFICATE-----Generated at Mon Jun 8 20:07:13 2026 by rpki-client