$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa File: b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa (raw, json) Hash identifier: OJ+doZZA8fzVufuf/h0mu7wfNCaXhgOS1B+n2j/uxrQ= Subject key identifier: FB:50:D1:A3:34:CB:73:2A:82:FC:76:A5:3E:F5:ED:84:97:FA:3A:C4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DE6E5D2C5BE239925558D5398 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa Signing time: Thu 21 May 2026 01:00:25 +0000 ROA not before: Thu 21 May 2026 01:00:25 +0000 ROA not after: Wed 19 Aug 2026 01:00:25 +0000 asID: 20115 IP address blocks: 128.121.64.0/18 maxlen: 24 128.241.128.0/18 maxlen: 24 131.103.192.0/18 maxlen: 24 157.238.0.0/18 maxlen: 24 168.143.0.0/18 maxlen: 24 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e6:e5:d2:c5:be:23:99:25:55:8d:53:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 21 01:00:25 2026 GMT Not After : Aug 19 01:00:25 2026 GMT Subject: CN=e6b23831-2993-4172-9577-a6cbc4b007cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:6c:2f:4d:73:ff:60:c6:b2:54:d1:fa:e4: 03:cf:15:6e:a8:0a:2e:4e:41:ca:8f:ce:fc:41:98: fd:ca:1c:b0:fa:26:25:df:aa:86:f8:30:72:83:21: 36:37:36:91:2b:4e:ae:8a:e5:2a:d0:c3:48:1f:b1: 1d:cf:e1:af:02:6b:da:78:e6:80:41:99:2f:f7:b1: d7:d7:96:4a:11:41:2e:6b:6a:aa:67:ef:bf:95:79: 7e:0c:90:1b:97:26:b7:4d:87:ab:3e:ab:70:03:91: 2f:2e:4b:de:1a:0d:f7:e0:72:af:13:b5:d6:20:a9: e2:47:43:c8:d0:61:09:48:a9:10:5a:f7:ea:af:3c: 8e:b1:8b:30:60:37:05:5a:8a:ea:96:ed:a6:2c:0e: 22:38:90:1b:79:71:07:a3:4c:b1:b6:0e:6e:a8:e8: ee:17:3e:45:f1:de:c3:3c:f9:19:c6:5c:c6:ba:5f: c4:32:41:a4:c3:af:57:d3:ea:b8:e8:b7:67:07:51: 68:2c:08:bd:8a:46:da:1f:8c:02:4d:90:ac:a8:61: 18:c3:2c:3a:b3:3b:11:e2:6b:72:04:06:aa:fd:d6: db:61:17:4d:01:92:33:8e:1a:6b:83:6a:0b:ee:32: f6:52:29:ea:f5:fb:08:e5:4a:b6:d0:aa:b8:ee:96: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:50:D1:A3:34:CB:73:2A:82:FC:76:A5:3E:F5:ED:84:97:FA:3A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 128.241.128.0/18 131.103.192.0/18 157.238.0.0/18 168.143.0.0/18 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:25:4c:1d:73:27:03:ca:fd:45:fd:4f:33:c1:3a:40:9b:3d: 67:fa:6d:28:05:60:0e:20:f4:60:fa:d6:a0:0f:b0:d4:aa:31: 26:c5:b1:d9:69:a2:c8:fb:58:b0:85:fd:32:3e:98:78:5f:c8: 0e:49:18:84:26:12:37:57:cb:23:ab:a4:61:83:99:88:bb:e1: fe:b7:1f:6f:03:64:31:05:09:eb:ce:cd:fa:19:2d:33:14:fd: c0:b7:0b:f1:1e:1d:8d:04:43:40:0b:81:76:0a:d6:5b:9a:0b: 6e:1a:18:16:50:c8:40:cb:b8:fb:53:3b:cd:56:06:13:be:3b: 39:ee:6c:0d:5c:12:35:a3:54:ea:21:e3:20:28:bb:b7:6d:b2: 49:8a:ed:d4:de:10:77:c7:aa:e1:43:64:41:c2:61:0f:b9:e1: c8:13:59:a3:97:cf:60:6c:1f:9c:b8:aa:70:1f:e7:87:dc:39: a1:d8:77:da:16:bd:1e:42:c7:02:25:05:9a:cf:b6:86:8f:28: 10:1d:fb:6f:db:3f:da:93:56:69:b7:87:d5:92:7c:a7:a9:81: 6e:e0:73:07:a6:9b:fc:6a:63:48:60:5f:81:ea:81:cc:fa:45: 6a:17:be:c2:28:92:8c:29:64:7d:3d:ba:78:33:24:e7:c3:0f: 1c:80:d3:fe -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE3m5dLFviOZJVWNU5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDUyMTAxMDAyNVoXDTI2MDgxOTAxMDAyNVowLzEtMCsGA1UEAxMk ZTZiMjM4MzEtMjk5My00MTcyLTk1NzctYTZjYmM0YjAwN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwlsL01z/2DGslTR+uQDzxVuqAouTkHKj878 QZj9yhyw+iYl36qG+DBygyE2NzaRK06uiuUq0MNIH7Edz+GvAmvaeOaAQZkv97HX 15ZKEUEua2qqZ++/lXl+DJAblya3TYerPqtwA5EvLkveGg334HKvE7XWIKniR0PI 0GEJSKkQWvfqrzyOsYswYDcFWorqlu2mLA4iOJAbeXEHo0yxtg5uqOjuFz5F8d7D PPkZxlzGul/EMkGkw69X0+q46LdnB1FoLAi9ikbaH4wCTZCsqGEYwyw6szsR4mty BAaq/dbbYRdNAZIzjhprg2oL7jL2Uinq9fsI5Uq20Kq47pbiiQIDAQABo4IDczCC A28wHQYDVR0OBBYEFPtQ0aM0y3Mqgvx2pT717YSX+jrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjVhOTQ2MjYtZTJmMi0z YjA0LThkNmItMDcyZWMzOTI3Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGgHlAAwQG gPGAAwQGg2fAAwQGne4AAwQGqI8AAwQGwMzAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIUlTB1zJwPK/UX9 TzPBOkCbPWf6bSgFYA4g9GD61qAPsNSqMSbFsdlposj7WLCF/TI+mHhfyA5JGIQm EjdXyyOrpGGDmYi74f63H28DZDEFCevOzfoZLTMU/cC3C/EeHY0EQ0ALgXYK1lua C24aGBZQyEDLuPtTO81WBhO+OznubA1cEjWjVOoh4yAou7dtskmK7dTeEHfHquFD ZEHCYQ+54cgTWaOXz2BsH5y4qnAf54fcOaHYd9oWvR5CxwIlBZrPtoaPKBAd+2/b P9qTVmm3h9WSfKepgW7gcwemm/xqY0hgX4Hqgcz6RWoXvsIokowpZH09ungzJOfD DxyA0/4= -----END CERTIFICATE-----Generated at Wed Jun 10 22:09:19 2026 by rpki-client