$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa File: c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa (raw, json) Hash identifier: b3bKfA2KmezbXsM/ZbZ6jA5uIXFFa4neYHoelcu5R0I= Subject key identifier: 4B:D0:5A:F7:9D:C3:62:01:44:A5:B1:AF:62:40:0B:B5:80:30:96:8D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DD0904A48B30BE792415F5580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 3949 IP address blocks: 128.242.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:4a:48:b3:0b:e7:92:41:5f:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=d867cd50-1193-4124-bc2e-7f137aa12c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:55:62:46:68:d5:eb:72:54:1e:14:ff:cf: 45:59:bf:9e:da:09:5d:08:33:aa:33:1f:20:ba:63: b7:45:a3:51:12:96:e4:f8:35:0e:a4:6c:92:41:f2: 7f:76:4c:96:5b:cf:ac:0a:0c:4c:98:34:c8:8a:eb: 1e:6b:42:7a:eb:5b:3a:f6:25:75:96:5d:49:e9:d1: 3e:c6:c5:0f:61:23:83:42:a5:4c:c3:89:1e:83:4b: 21:24:4d:87:a6:2c:91:07:d1:0c:c6:dc:4c:78:14: 87:f5:5c:90:f5:c5:a1:03:bd:9b:bc:90:23:69:98: 10:6a:ff:fc:a0:15:3b:da:3f:95:78:22:d0:29:56: 23:cb:1b:39:62:44:cc:7f:c5:2b:f2:4c:03:f5:bf: 35:12:14:1b:6b:f1:c8:e6:b9:6f:dc:54:d8:a4:be: c6:cd:db:0e:8a:fe:ad:a5:6e:86:3c:25:e0:9c:4b: 23:8a:bd:b8:2d:1b:5e:4b:8c:c6:3c:b1:3a:09:6e: e9:5a:c1:9f:5f:8f:30:60:01:b6:6f:66:f3:53:97: f3:49:16:2e:a8:42:dc:d0:ad:07:15:ad:3b:2b:e9: 6d:4e:f9:e7:d9:d4:ca:7d:f8:be:23:6b:d0:a4:20: 74:d3:81:31:24:6f:39:76:6e:ab:64:77:d5:b9:ad: db:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D0:5A:F7:9D:C3:62:01:44:A5:B1:AF:62:40:0B:B5:80:30:96:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:db:a5:0d:dc:47:98:dc:07:07:0f:ef:63:d7:3d:15:ac:c7: c2:a7:5a:04:e6:e0:f6:bc:e6:21:ae:7c:72:1a:7f:ca:3c:20: ac:33:7c:70:df:eb:53:74:34:00:a5:f3:9a:f7:55:d4:ee:d4: ec:cd:d5:09:39:81:83:dc:e2:12:b0:0c:a3:65:cc:2f:ab:46: 63:b9:f6:69:33:d8:2a:39:53:89:1d:16:10:93:2a:fb:9d:eb: 48:a2:cc:e7:fb:8c:61:59:bf:c3:44:67:b0:c0:7f:53:f7:98: 21:6c:03:1b:ee:52:57:49:c0:d7:e0:ce:37:13:81:ea:2d:01: bd:74:2b:64:44:3b:46:db:b5:66:3a:a5:9b:71:1d:64:2c:1b: 9b:ee:ca:64:11:db:54:4a:5a:b6:f3:aa:d1:71:26:7c:3b:4a: 53:4b:a4:ba:dd:8e:e2:3f:35:ef:09:a0:df:64:10:a7:e6:24: eb:58:ac:7c:87:ce:c3:d8:df:e4:50:33:21:80:f5:a6:02:05: 2d:6d:6a:8a:e6:8b:f6:af:77:b7:7d:57:73:9f:ac:f9:ef:8d: d2:f4:b7:0c:02:26:60:0e:32:2d:a8:04:20:8e:68:ee:7c:7b: 97:15:5e:1f:79:15:2a:50:fd:03:c5:8b:45:6c:51:ab:cf:42: 43:be:8b:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkEpIswvnkkFfVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZDg2N2NkNTAtMTE5My00MTI0LWJjMmUtN2YxMzdhYTEyYzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI9VYkZo1etyVB4U/89FWb+e2gldCDOqMx8g umO3RaNREpbk+DUOpGySQfJ/dkyWW8+sCgxMmDTIiusea0J661s69iV1ll1J6dE+ xsUPYSODQqVMw4keg0shJE2HpiyRB9EMxtxMeBSH9VyQ9cWhA72bvJAjaZgQav/8 oBU72j+VeCLQKVYjyxs5YkTMf8Ur8kwD9b81EhQba/HI5rlv3FTYpL7GzdsOiv6t pW6GPCXgnEsjir24LRteS4zGPLE6CW7pWsGfX48wYAG2b2bzU5fzSRYuqELc0K0H Fa07K+ltTvnn2dTKffi+I2vQpCB004ExJG85dm6rZHfVua3baQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvQWvedw2IBRKWxr2JAC7WAMJaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzhhNzBmMjEtNWFiYS0z YmU1LWFmMGMtZDhhOTdhYWFlYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgPJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLbpQ3cR5jcBwcP72PXPRWsx8KnWgTm4Pa85iGufHIaf8o8IKwzfHDf 61N0NACl85r3VdTu1OzN1Qk5gYPc4hKwDKNlzC+rRmO59mkz2Co5U4kdFhCTKvud 60iizOf7jGFZv8NEZ7DAf1P3mCFsAxvuUldJwNfgzjcTgeotAb10K2REO0bbtWY6 pZtxHWQsG5vuymQR21RKWrbzqtFxJnw7SlNLpLrdjuI/Ne8JoN9kEKfmJOtYrHyH zsPY3+RQMyGA9aYCBS1taormi/avd7d9V3OfrPnvjdL0twwCJmAOMi2oBCCOaO58 e5cVXh95FSpQ/QPFi0VsUavPQkO+iyQ= -----END CERTIFICATE-----Generated at Fri Jun 12 06:28:50 2026 by rpki-client