$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa File: e5e560e3-7114-3301-9261-7725a1241fa8.roa (raw, json) Hash identifier: +/cHQznbisgvGtCkhUIp7L90/SIdEHyUtGyZ3pxRNKk= Subject key identifier: 40:28:A2:F8:85:D1:51:1C:69:FE:D9:41:51:0E:CA:6A:B2:DB:34:92 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584E0005DF108D8B8A3E16AEF1A0 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 4186 IP address blocks: 198.137.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:df:10:8d:8b:8a:3e:16:ae:f1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=403e4a52-1940-4060-924c-54f1fc9de685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:e9:b4:89:e6:b5:b8:46:f5:c0:37:6d:b8: 6e:dc:b5:6e:1b:e9:2d:8a:6f:ac:45:08:55:49:f0: c5:4b:9d:67:7e:78:83:bd:27:5d:b5:b9:3e:86:18: 44:9c:1a:b0:59:a0:f8:80:d8:09:f3:0b:86:cf:67: 31:89:80:a5:24:c0:a9:cb:5c:27:79:e9:71:dd:46: a3:22:9c:85:32:9b:32:5a:4b:98:44:2b:89:39:da: fa:54:01:c0:d8:2d:b4:08:35:4f:74:66:27:06:72: f3:34:f9:76:8d:f5:d5:3c:52:d9:32:4b:07:d2:44: e1:d4:33:a9:18:1e:bd:29:e6:e7:e3:f9:7d:cb:25: df:0c:59:5d:28:4c:76:f4:a7:b5:7a:29:82:8b:f1: db:a3:3f:b9:24:8e:f6:e0:bd:3e:cd:62:46:f2:0f: 47:2e:dd:5d:a2:18:2a:64:58:68:9c:6b:76:f0:49: aa:9c:5b:5e:a4:31:08:50:2a:00:72:3a:fc:a0:07: a7:b5:36:63:f3:59:84:eb:9c:94:b8:70:93:e2:31: 8d:6b:27:44:26:58:30:c5:0c:01:63:8f:a2:c5:76: ee:4a:5e:95:39:7a:26:a1:2e:37:52:7a:6d:82:1e: 43:6a:09:bf:14:5e:91:8b:4a:a8:9f:de:17:81:76: d2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:28:A2:F8:85:D1:51:1C:69:FE:D9:41:51:0E:CA:6A:B2:DB:34:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1c:d9:45:9b:1d:d8:72:99:27:65:27:9c:59:15:22:89:7e: a3:cf:c9:94:a8:06:c7:74:2e:35:12:a5:3e:a2:3e:a3:21:41: 95:7a:c4:88:9e:45:a0:78:20:d9:b1:66:2d:10:4e:45:4b:35: d7:46:75:f4:a0:c1:71:46:25:35:24:61:48:6b:11:36:a4:37: fe:bd:3e:78:81:64:10:4e:ec:1c:36:1e:3d:bf:32:52:13:df: b3:50:a6:68:21:d3:e5:0d:87:7d:f2:87:7f:37:bb:de:26:c2: 8f:72:64:7c:dc:d8:60:96:4c:a8:7a:36:75:7f:7b:49:24:af: 62:62:bf:a7:76:3d:51:81:fb:2c:87:17:4f:80:4f:bb:23:7f: 02:2e:55:8c:81:05:50:5b:22:83:03:dd:1c:bf:b4:79:4a:0c: 75:26:9d:2c:79:db:91:48:a7:c1:f9:97:81:05:c3:bd:b4:30: 6c:fb:32:49:09:4b:3c:93:70:2b:3a:c8:0e:6b:e9:29:cd:6f: 36:c1:9a:99:a8:26:7e:84:d7:29:a9:0a:b5:48:0b:43:3a:4a: e0:ef:55:7d:dc:e3:57:e4:e0:f1:d2:a6:5a:3f:d9:f1:02:34: 1f:b2:e3:73:f7:a7:3b:35:ee:88:66:bb:8c:15:7c:6e:e5:08: d7:79:e0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABd8QjYuKPhau8aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk NDAzZTRhNTItMTk0MC00MDYwLTkyNGMtNTRmMWZjOWRlNjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJPptInmtbhG9cA3bbhu3LVuG+ktim+sRQhV SfDFS51nfniDvSddtbk+hhhEnBqwWaD4gNgJ8wuGz2cxiYClJMCpy1wneelx3Uaj IpyFMpsyWkuYRCuJOdr6VAHA2C20CDVPdGYnBnLzNPl2jfXVPFLZMksH0kTh1DOp GB69Kebn4/l9yyXfDFldKEx29Ke1eimCi/Hboz+5JI724L0+zWJG8g9HLt1dohgq ZFhonGt28EmqnFtepDEIUCoAcjr8oAentTZj81mE65yUuHCT4jGNaydEJlgwxQwB Y4+ixXbuSl6VOXomoS43Unptgh5Dagm/FF6Ri0qon94XgXbS4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAooviF0VEcaf7ZQVEOymqy2zSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvZTVlNTYwZTMtNzExNC0z MzAxLTkyNjEtNzcyNWExMjQxZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIc2UWbHdhymSdlJ5xZFSKJfqPPyZSoBsd0LjUSpT6iPqMhQZV6xIie RaB4INmxZi0QTkVLNddGdfSgwXFGJTUkYUhrETakN/69PniBZBBO7Bw2Hj2/MlIT 37NQpmgh0+UNh33yh383u94mwo9yZHzc2GCWTKh6NnV/e0kkr2Jiv6d2PVGB+yyH F0+AT7sjfwIuVYyBBVBbIoMD3Ry/tHlKDHUmnSx525FIp8H5l4EFw720MGz7MkkJ SzyTcCs6yA5r6SnNbzbBmpmoJn6E1ympCrVIC0M6SuDvVX3c41fk4PHSplo/2fEC NB+y43P3pzs17ohmu4wVfG7lCNd54A4= -----END CERTIFICATE-----Generated at Thu Jun 11 14:42:09 2026 by rpki-client