$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43c07166-857c-4009-8936-3bf8ae58ade1/197dba58-6b8b-3935-b847-4dba22ceea21.roa File: 197dba58-6b8b-3935-b847-4dba22ceea21.roa (raw, json) Hash identifier: XNjdF/9kR5sjcdpY0EbAYwP4AkuoP6MN7oqkIgXSwhE= Subject key identifier: 6D:99:22:50:AD:18:2F:2C:28:8E:71:B1:DC:D8:1A:3B:78:8D:71:1F Certificate issuer: /CN=43c07166-857c-4009-8936-3bf8ae58ade1 Certificate serial: 010D0C9F4328584DE14431BE05DD17B2CED47B40 Authority key identifier: FA:5E:BF:B8:96:87:14:06:D0:E0:B0:8D:51:78:F4:2C:31:D0:B2:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43c07166-857c-4009-8936-3bf8ae58ade1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43c07166-857c-4009-8936-3bf8ae58ade1/197dba58-6b8b-3935-b847-4dba22ceea21.roa Signing time: Tue 19 May 2026 00:35:51 +0000 ROA not before: Tue 19 May 2026 00:35:51 +0000 ROA not after: Mon 17 Aug 2026 00:35:51 +0000 asID: 402500 IP address blocks: 208.71.254.0/24 maxlen: 24 2602:f3c2::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43c07166-857c-4009-8936-3bf8ae58ade1/43c07166-857c-4009-8936-3bf8ae58ade1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43c07166-857c-4009-8936-3bf8ae58ade1/43c07166-857c-4009-8936-3bf8ae58ade1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43c07166-857c-4009-8936-3bf8ae58ade1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:44:31:be:05:dd:17:b2:ce:d4:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43c07166-857c-4009-8936-3bf8ae58ade1 Validity Not Before: May 19 00:35:51 2026 GMT Not After : Aug 17 00:35:51 2026 GMT Subject: CN=1573145b-19f1-4d0c-ac17-72bfb15d9a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:24:e7:4b:9d:95:78:80:eb:c1:aa:f5:93: 22:4e:50:21:84:b8:8b:3c:fd:f3:ce:7b:05:4f:61: 14:15:d2:82:8d:71:34:11:df:0e:bc:d8:91:41:c5: 50:ab:3c:53:c9:e3:a4:a3:0a:8b:97:89:9b:d5:3d: dc:16:f2:f7:02:8a:77:dd:35:b3:d7:42:a8:5f:c3: 79:c0:9a:4c:2f:36:0b:36:01:01:e7:75:e2:90:e9: f9:d5:81:b5:a6:b6:1f:04:7b:97:5d:ff:ae:7c:ae: 31:32:f5:1c:f3:08:ea:40:d7:46:e4:6e:bc:48:99: fe:7e:42:f1:83:1c:e4:03:23:75:aa:70:36:e3:7b: aa:2f:95:55:58:05:92:02:46:3e:a4:89:22:ec:34: a5:3b:04:50:d1:29:05:94:55:55:67:53:03:48:63: 94:f7:5f:1b:70:cc:b1:e8:ce:59:df:77:ac:de:ef: ef:08:34:74:e3:dc:e6:b8:10:98:5b:6b:5c:a4:55: 00:f4:69:a7:0d:e0:d8:47:2d:40:c7:f1:21:2f:4e: 1d:ab:30:98:d3:35:2c:c8:bf:2f:42:e6:b3:64:8a: ed:eb:51:71:84:bd:d9:b5:df:99:29:8c:3c:c4:03: 72:52:e3:e5:c4:6f:da:4d:28:4e:6d:cd:aa:b1:bd: b3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:99:22:50:AD:18:2F:2C:28:8E:71:B1:DC:D8:1A:3B:78:8D:71:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43c07166-857c-4009-8936-3bf8ae58ade1/197dba58-6b8b-3935-b847-4dba22ceea21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43c07166-857c-4009-8936-3bf8ae58ade1/43c07166-857c-4009-8936-3bf8ae58ade1.crl X509v3 Authority Key Identifier: keyid:FA:5E:BF:B8:96:87:14:06:D0:E0:B0:8D:51:78:F4:2C:31:D0:B2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43c07166-857c-4009-8936-3bf8ae58ade1.cer sbgp-ipAddrBlock: critical IPv4: 208.71.254.0/24 IPv6: 2602:f3c2::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0a:e4:aa:b5:78:62:59:cc:7e:ec:42:f6:14:a1:32:4c:e9: eb:a8:ef:7a:45:59:a8:54:60:bb:22:d4:0d:f4:0a:fb:80:01: ff:de:e0:f3:6c:c0:1a:0b:c1:dd:cd:47:ec:f9:07:be:48:bf: 38:75:e1:2b:4b:16:dc:e2:d9:63:2d:f9:20:85:fc:ef:13:29: f4:6b:30:06:a8:46:9a:64:0e:84:e1:35:45:f8:d8:59:3e:4f: a3:58:c7:d0:3b:c0:66:71:1e:98:7e:76:06:7d:ff:7d:7e:e5: 22:d2:ab:6b:2a:b3:2f:77:58:4a:ac:79:a2:70:68:96:aa:d0: 9a:0f:bb:f9:91:85:06:cf:ae:27:ba:88:2b:ce:5c:65:fd:ce: d3:f7:9c:80:e9:82:5f:94:10:d1:26:aa:39:12:b4:fb:a8:65: 8f:24:ea:33:7e:22:d3:0a:f9:9c:c2:f2:34:7a:78:9f:3c:c0: 24:a9:43:94:5b:90:98:d0:d6:99:46:f2:11:b8:b4:f4:91:f0: c3:ce:51:3b:af:b3:df:b4:12:16:f8:2e:06:51:1e:d2:a9:a9: 23:6e:1f:c4:96:71:74:a5:bd:f0:80:b8:de:7f:19:db:43:24: 27:e2:bb:e5:fd:6a:4b:f4:5b:18:08:e6:5f:06:fd:80:1a:96: 8e:fc:78:aa -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3hRDG+Bd0Xss7Ue0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNjMDcxNjYtODU3Yy00MDA5LTg5MzYtM2JmOGFlNThh ZGUxMB4XDTI2MDUxOTAwMzU1MVoXDTI2MDgxNzAwMzU1MVowLzEtMCsGA1UEAxMk MTU3MzE0NWItMTlmMS00ZDBjLWFjMTctNzJiZmIxNWQ5YTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs4k50udlXiA68Gq9ZMiTlAhhLiLPP3zznsF T2EUFdKCjXE0Ed8OvNiRQcVQqzxTyeOkowqLl4mb1T3cFvL3Aop33TWz10KoX8N5 wJpMLzYLNgEB53XikOn51YG1prYfBHuXXf+ufK4xMvUc8wjqQNdG5G68SJn+fkLx gxzkAyN1qnA243uqL5VVWAWSAkY+pIki7DSlOwRQ0SkFlFVVZ1MDSGOU918bcMyx 6M5Z33es3u/vCDR049zmuBCYW2tcpFUA9GmnDeDYRy1Ax/EhL04dqzCY0zUsyL8v QuazZIrt61FxhL3Ztd+ZKYw8xANyUuPlxG/aTShObc2qsb2zjQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFG2ZIlCtGC8sKI5xsdzYGjt4jXEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80M2Mw NzE2Ni04NTdjLTQwMDktODkzNi0zYmY4YWU1OGFkZTEvMTk3ZGJhNTgtNmI4Yi0z OTM1LWI4NDctNGRiYTIyY2VlYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDNjMDcxNjYtODU3Yy00MDA5LTg5 MzYtM2JmOGFlNThhZGUxLzQzYzA3MTY2LTg1N2MtNDAwOS04OTM2LTNiZjhhZTU4 YWRlMS5jcmwwHwYDVR0jBBgwFoAU+l6/uJaHFAbQ4LCNUXj0LDHQsqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80M2MwNzE2Ni04NTdjLTQwMDktODkzNi0zYmY4 YWU1OGFkZTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA0Ef+MA4E AgACMAgDBgAmAvPCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYCuSqtXhiWcx+7EL2FKEyTOnrqO96RVmo VGC7ItQN9Ar7gAH/3uDzbMAaC8HdzUfs+Qe+SL84deErSxbc4tljLfkghfzvEyn0 azAGqEaaZA6E4TVF+NhZPk+jWMfQO8BmcR6YfnYGff99fuUi0qtrKrMvd1hKrHmi cGiWqtCaD7v5kYUGz64nuogrzlxl/c7T95yA6YJflBDRJqo5ErT7qGWPJOozfiLT CvmcwvI0enifPMAkqUOUW5CY0NaZRvIRuLT0kfDDzlE7r7PftBIW+C4GUR7Sqakj bh/ElnF0pb3wgLjefxnbQyQn4rvl/WpL9FsYCOZfBv2AGpaO/Hiq -----END CERTIFICATE-----Generated at Sat Jun 6 12:06:04 2026 by rpki-client