$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f/00620e06-4730-3a38-bcf2-a236605b42b6.roa File: 00620e06-4730-3a38-bcf2-a236605b42b6.roa (raw, json) Hash identifier: plUDD6x/30LVWlGG/Id+t4r6SKXCCIjGZOIYe8gW0cc= Subject key identifier: D7:1C:39:0C:89:15:3A:53:00:10:04:B9:DB:0E:10:BC:67:A5:01:F5 Certificate issuer: /CN=4ee3b684-d7f1-42f2-a21a-5ab05734bf7f Certificate serial: 010D0C9F4328584DD955ABA51B760EC5EA68D336 Authority key identifier: C8:B5:A3:2A:38:F4:E4:57:CD:0F:DA:AE:EF:AC:98:E5:B1:F8:EE:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f/00620e06-4730-3a38-bcf2-a236605b42b6.roa Signing time: Sat 16 May 2026 04:24:36 +0000 ROA not before: Sat 16 May 2026 04:24:36 +0000 ROA not after: Fri 14 Aug 2026 04:24:36 +0000 asID: 1088 IP address blocks: 147.185.187.0/24 maxlen: 24 167.94.99.0/24 maxlen: 24 2606:ea40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d9:55:ab:a5:1b:76:0e:c5:ea:68:d3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee3b684-d7f1-42f2-a21a-5ab05734bf7f Validity Not Before: May 16 04:24:36 2026 GMT Not After : Aug 14 04:24:36 2026 GMT Subject: CN=a5f160d2-756f-4f6e-8a6f-c241454296a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:30:97:92:f8:57:b7:ca:72:b0:5c:21:05:e6: 61:9e:50:fa:7f:60:df:5e:e4:e7:56:30:79:87:16: 5d:35:33:64:e6:0c:79:2c:fb:41:41:34:8b:91:4d: 27:d1:20:91:33:32:f7:d9:e2:d3:27:0d:75:79:07: 85:18:c0:a2:c2:7a:8b:7f:62:9a:3b:dc:4a:b1:21: 02:c3:6f:8a:1c:75:f7:a6:3f:ee:3c:a8:a0:8d:a6: 00:36:e7:29:38:d5:98:1e:d5:ee:07:77:ae:e4:ba: 82:88:88:8f:a8:c5:23:c7:b5:1f:c9:4b:78:b9:ff: 32:22:67:0d:d2:5f:80:b3:51:f6:ed:55:ce:12:cb: 0d:1e:e8:89:23:3c:a4:97:d8:14:9c:33:4e:31:6e: d8:b0:17:de:37:cc:d9:25:80:d1:57:98:cd:0c:67: eb:0c:f3:8c:95:19:99:f0:66:ae:cb:1c:28:a3:06: 3c:62:ae:6f:08:01:e3:0d:d3:44:4b:fb:32:23:a5: 6b:c9:4b:e9:e8:42:0e:ad:c3:bc:6b:41:dc:96:81: 00:d6:f6:a4:de:32:0c:97:5b:2d:94:85:8c:b4:3b: 61:2b:a2:c2:0d:74:a9:ec:94:8b:08:5d:34:0c:2e: f8:58:f6:98:af:8d:2e:4a:8c:0f:5e:ca:dd:e5:05: 14:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1C:39:0C:89:15:3A:53:00:10:04:B9:DB:0E:10:BC:67:A5:01:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f/00620e06-4730-3a38-bcf2-a236605b42b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f.crl X509v3 Authority Key Identifier: keyid:C8:B5:A3:2A:38:F4:E4:57:CD:0F:DA:AE:EF:AC:98:E5:B1:F8:EE:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f.cer sbgp-ipAddrBlock: critical IPv4: 147.185.187.0/24 167.94.99.0/24 IPv6: 2606:ea40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:af:5c:77:ec:06:68:52:27:87:4b:86:e2:2a:bc:27:43:2a: 9b:98:7d:84:ea:3b:7c:54:d1:f4:be:c9:4a:d6:cd:32:ef:94: 89:1b:7d:15:ca:a3:7f:cd:e3:72:87:ef:72:cf:c8:67:d3:3d: d7:84:8e:86:44:5f:1e:f2:5e:fa:c0:f3:ad:ba:3d:2e:fc:bb: 5e:48:92:d5:e2:09:9d:8c:b0:f3:7a:20:e8:f8:cf:54:16:9b: c6:6e:4f:42:91:ee:9c:c3:a0:ae:3c:71:14:6c:cd:b5:ea:6b: ef:a7:09:1f:3b:3a:32:5c:e4:06:3b:4f:d0:4f:2a:2e:fb:f1: 74:7f:cf:88:c2:bc:61:9f:88:52:6d:05:ff:3c:ba:08:e1:84: dd:88:e5:25:6c:e2:f9:ac:59:88:58:be:2d:2a:39:90:9d:cf: d5:33:77:a5:a3:44:4c:d0:0b:6e:c6:8c:e5:6c:2a:91:c5:a8: f0:a6:96:10:db:93:48:f1:40:4e:5c:4c:c7:7f:00:43:8b:4e: 03:b6:72:52:4e:f7:23:9f:7a:9d:34:c3:f1:19:90:b4:f1:30: e9:22:72:ea:be:5f:14:d7:9f:9a:f4:d4:77:e8:20:a6:bb:3e: 67:c9:87:02:0f:13:7b:d1:dd:21:76:d5:64:f9:8f:38:bd:b7: 5c:de:0f:4e -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE3ZVaulG3YOxepo0zYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlM2I2ODQtZDdmMS00MmYyLWEyMWEtNWFiMDU3MzRi ZjdmMB4XDTI2MDUxNjA0MjQzNloXDTI2MDgxNDA0MjQzNlowLzEtMCsGA1UEAxMk YTVmMTYwZDItNzU2Zi00ZjZlLThhNmYtYzI0MTQ1NDI5NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjCXkvhXt8pysFwhBeZhnlD6f2DfXuTnVjB5 hxZdNTNk5gx5LPtBQTSLkU0n0SCRMzL32eLTJw11eQeFGMCiwnqLf2KaO9xKsSEC w2+KHHX3pj/uPKigjaYANucpONWYHtXuB3eu5LqCiIiPqMUjx7UfyUt4uf8yImcN 0l+As1H27VXOEssNHuiJIzykl9gUnDNOMW7YsBfeN8zZJYDRV5jNDGfrDPOMlRmZ 8GauyxwoowY8Yq5vCAHjDdNES/syI6VryUvp6EIOrcO8a0HcloEA1vak3jIMl1st lIWMtDthK6LCDXSp7JSLCF00DC74WPaYr40uSowPXsrd5QUUWQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFNccOQyJFTpTABAEudsOELxnpQH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80ZWUz YjY4NC1kN2YxLTQyZjItYTIxYS01YWIwNTczNGJmN2YvMDA2MjBlMDYtNDczMC0z YTM4LWJjZjItYTIzNjYwNWI0MmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGVlM2I2ODQtZDdmMS00MmYyLWEy MWEtNWFiMDU3MzRiZjdmLzRlZTNiNjg0LWQ3ZjEtNDJmMi1hMjFhLTVhYjA1NzM0 YmY3Zi5jcmwwHwYDVR0jBBgwFoAUyLWjKjj05FfND9qu76yY5bH47mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80ZWUzYjY4NC1kN2YxLTQyZjItYTIxYS01YWIw NTczNGJmN2YuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAk7m7AwQA p15jMA0EAgACMAcDBQAmBupAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIGvXHfsBmhSJ4dLhuIqvCdDKpuY fYTqO3xU0fS+yUrWzTLvlIkbfRXKo3/N43KH73LPyGfTPdeEjoZEXx7yXvrA8626 PS78u15IktXiCZ2MsPN6IOj4z1QWm8ZuT0KR7pzDoK48cRRszbXqa++nCR87OjJc 5AY7T9BPKi778XR/z4jCvGGfiFJtBf88ugjhhN2I5SVs4vmsWYhYvi0qOZCdz9Uz d6WjREzQC27GjOVsKpHFqPCmlhDbk0jxQE5cTMd/AEOLTgO2clJO9yOfep00w/EZ kLTxMOkicuq+XxTXn5r01HfoIKa7PmfJhwIPE3vR3SF21WT5jzi9t1zeD04= -----END CERTIFICATE-----Generated at Sat Jun 6 12:05:53 2026 by rpki-client