$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa File: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (raw, json) Hash identifier: EmwPzQV6cODe9NjPNJzsLkGJet5ytSSer37h/Ptna1Q= Subject key identifier: 28:E1:01:93:C1:33:A5:E9:C2:E7:A6:20:0D:6B:4C:D0:98:37:65:09 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584E0005DEF60582FF1D0978B180 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 395700 IP address blocks: 198.137.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:de:f6:05:82:ff:1d:09:78:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=a18535a6-51b9-4384-91d7-2485ca00bf6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:22:e8:d4:fc:14:bc:42:58:cd:af:c4:b5:39: 26:7a:d6:64:85:f5:03:f9:59:69:a7:d3:5c:4a:29: 65:ee:cf:61:d4:44:65:a7:34:ee:11:b9:7f:b3:46: 92:16:b6:61:6c:95:75:e5:bd:7c:ec:bb:50:e7:ba: 32:0f:9d:42:39:96:f7:d2:de:ba:22:c0:bb:13:6d: e6:e2:04:5c:98:4e:ee:b1:03:78:5e:63:f8:ee:8f: fb:c9:4e:d5:e9:50:ff:0f:a3:07:db:0c:e3:6a:5f: b3:ab:88:0a:b9:1d:65:24:22:da:06:6e:07:71:55: 18:d0:cc:6f:e1:c7:21:05:0d:56:af:5d:ba:96:08: 8d:cb:49:20:e9:98:6f:ae:0b:fa:a2:d4:e1:a8:d5: 2c:3c:88:1f:0d:2b:77:cc:75:2c:c8:d1:2a:7e:3d: 81:14:c5:c9:ac:65:88:71:38:28:e4:fd:9d:77:f4: ff:f7:4a:7e:fc:85:0e:55:15:1a:ce:57:e7:46:f2: 5a:87:6f:a9:18:f5:09:a0:f6:6f:31:d8:d7:52:b8: c2:1b:42:da:32:49:31:a2:28:31:ae:7d:07:40:eb: 8e:0d:a7:f3:e3:ba:9f:76:90:cb:15:b5:89:b3:b3: f5:7c:20:f9:7c:22:d5:64:5b:f2:d8:38:07:01:b0: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E1:01:93:C1:33:A5:E9:C2:E7:A6:20:0D:6B:4C:D0:98:37:65:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f7:30:8e:6e:4a:db:5b:a7:69:37:6b:3d:a0:0e:f0:29:dd: f1:18:e2:46:17:5e:40:07:d7:a3:b5:e7:ff:6f:5c:0e:bf:0f: f7:c1:f9:1f:66:2d:dc:bf:4b:02:f8:d1:04:0a:7e:9d:69:f0: 7f:01:b4:77:43:2d:af:21:c9:54:b5:76:d1:99:0d:76:3f:23: 26:fb:bb:77:c6:00:af:a4:43:d3:d9:72:f4:c4:f6:18:27:fc: 22:16:fd:0d:f6:c8:3c:3b:1f:d1:98:d6:76:aa:81:49:e7:75: a2:8a:da:22:ea:56:9d:60:c6:e5:36:30:92:21:33:80:c0:05: 08:16:b7:f3:a0:b3:df:7a:57:81:ba:7a:68:94:8b:5c:a6:a9: f7:9e:b6:09:89:c1:4c:0d:5f:2c:59:4b:00:b9:45:af:f1:84: b7:82:d2:5c:7b:5c:2f:f8:c1:7d:35:f2:d0:82:87:a9:b7:ec: 59:38:04:1f:82:b8:76:3c:f3:77:f5:e1:aa:75:ae:46:0f:05: 77:6d:96:a1:02:c8:af:b6:2e:0e:37:3a:9b:4f:7d:21:33:04: 3f:35:89:8b:ba:38:8c:35:0e:75:3d:45:1c:89:e1:a9:31:a9: ab:fa:69:6d:d7:76:51:08:a6:4d:9a:cc:fd:91:19:09:2b:fc: 74:80:f4:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABd72BYL/HQl4sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk YTE4NTM1YTYtNTFiOS00Mzg0LTkxZDctMjQ4NWNhMDBiZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiLo1PwUvEJYza/EtTkmetZkhfUD+Vlpp9Nc Sill7s9h1ERlpzTuEbl/s0aSFrZhbJV15b187LtQ57oyD51COZb30t66IsC7E23m 4gRcmE7usQN4XmP47o/7yU7V6VD/D6MH2wzjal+zq4gKuR1lJCLaBm4HcVUY0Mxv 4cchBQ1Wr126lgiNy0kg6Zhvrgv6otThqNUsPIgfDSt3zHUsyNEqfj2BFMXJrGWI cTgo5P2dd/T/90p+/IUOVRUazlfnRvJah2+pGPUJoPZvMdjXUrjCG0LaMkkxoigx rn0HQOuODafz47qfdpDLFbWJs7P1fCD5fCLVZFvy2DgHAbDPcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjhAZPBM6XpwuemIA1rTNCYN2UJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYjM5M2QyZTEtZGZjNy0z OTU1LWJhODMtZTZjM2UwYjZiNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH3MI5uSttbp2k3az2gDvAp3fEY4kYXXkAH16O15/9vXA6/D/fB+R9m Ldy/SwL40QQKfp1p8H8BtHdDLa8hyVS1dtGZDXY/Iyb7u3fGAK+kQ9PZcvTE9hgn /CIW/Q32yDw7H9GY1naqgUnndaKK2iLqVp1gxuU2MJIhM4DABQgWt/Ogs996V4G6 emiUi1ymqfeetgmJwUwNXyxZSwC5Ra/xhLeC0lx7XC/4wX018tCCh6m37Fk4BB+C uHY883f14ap1rkYPBXdtlqECyK+2Lg43OptPfSEzBD81iYu6OIw1DnU9RRyJ4akx qav6aW3XdlEIpk2azP2RGQkr/HSA9O0= -----END CERTIFICATE-----Generated at Thu Jun 11 17:06:45 2026 by rpki-client