$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/f714b6cb-929e-3b31-9edc-51bc67a9687c.roa File: f714b6cb-929e-3b31-9edc-51bc67a9687c.roa (raw, json) Hash identifier: SXLqUTRvxn9Sui2l5BK+Lz8mkFVOlLsNCNNV3PbmW4Y= Subject key identifier: 0A:D7:65:3D:7A:04:BE:12:60:57:C2:43:91:CA:53:A8:0D:56:D4:38 Certificate issuer: /CN=588f7703-3750-4fb6-9651-634426b48a85 Certificate serial: 010D0C9F4328584E4292FC10AF9467B2B1BC4F20 Authority key identifier: 34:49:C4:2C:C8:D4:10:6D:2C:C7:B1:AE:0F:56:81:63:A4:A3:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/f714b6cb-929e-3b31-9edc-51bc67a9687c.roa Signing time: Mon 22 Jun 2026 21:08:01 +0000 ROA not before: Mon 22 Jun 2026 21:08:01 +0000 ROA not after: Sun 20 Sep 2026 21:08:01 +0000 asID: 35895 IP address blocks: 199.188.224.0/22 maxlen: 24 204.11.68.0/22 maxlen: 24 2602:ff5e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/588f7703-3750-4fb6-9651-634426b48a85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/588f7703-3750-4fb6-9651-634426b48a85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:92:fc:10:af:94:67:b2:b1:bc:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588f7703-3750-4fb6-9651-634426b48a85 Validity Not Before: Jun 22 21:08:01 2026 GMT Not After : Sep 20 21:08:01 2026 GMT Subject: CN=64f4264f-9f1f-4b6a-b650-65df0ad9ac91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8e:be:66:91:b7:d0:82:4f:d3:e3:5e:3a:f2: cc:63:70:1f:eb:af:f5:89:2e:6b:5f:fb:f6:0d:79: 69:c3:0c:eb:88:38:21:3f:18:3f:dc:01:35:02:73: 90:9e:1a:28:fb:3c:a4:4d:3f:8d:8a:53:f4:1a:d2: cb:31:59:0a:99:96:ed:42:78:f9:e3:74:e4:c0:e6: e0:16:3a:56:a8:91:43:be:55:a4:08:f2:a3:ef:ee: f3:7f:8f:86:4b:6f:85:a0:d6:ee:9b:9e:7d:88:80: 13:78:5c:93:c0:05:fa:36:00:d8:ed:d9:ac:49:0f: 07:5a:6b:fc:b5:d5:31:b1:2d:b4:25:68:f4:f1:f3: 06:60:8b:80:bb:ca:1b:ab:02:de:5c:4d:36:d0:3b: cf:31:75:10:40:74:2c:f1:51:58:61:f2:87:0d:73: 2e:3f:ba:08:7d:3c:4c:0f:71:06:7c:d9:53:28:74: 96:57:dc:5f:8a:00:31:e7:c4:0b:f2:36:b4:16:2a: bc:f5:ae:c2:5f:c8:ed:ef:05:f9:80:47:03:78:09: 52:d8:5c:45:58:64:dd:ba:93:7d:4f:74:75:64:9f: 71:7f:79:52:71:7c:5d:a2:96:3e:de:98:cc:b2:e4: 62:de:c2:ad:a7:8f:e3:a2:29:62:d9:31:d1:d7:e9: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D7:65:3D:7A:04:BE:12:60:57:C2:43:91:CA:53:A8:0D:56:D4:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/f714b6cb-929e-3b31-9edc-51bc67a9687c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85/588f7703-3750-4fb6-9651-634426b48a85.crl X509v3 Authority Key Identifier: keyid:34:49:C4:2C:C8:D4:10:6D:2C:C7:B1:AE:0F:56:81:63:A4:A3:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/588f7703-3750-4fb6-9651-634426b48a85.cer sbgp-ipAddrBlock: critical IPv4: 199.188.224.0/22 204.11.68.0/22 IPv6: 2602:ff5e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:97:50:4d:c1:a1:62:1d:94:a7:50:ec:93:9d:da:1d:4f:cb: de:ab:25:7e:69:3f:e4:0c:be:20:c7:91:4a:ff:32:79:02:a2: 3e:22:9e:3e:df:ce:8e:80:ad:e9:7a:b2:6f:79:c8:56:3d:44: 52:cf:93:b0:1b:ad:5d:43:80:c4:a0:68:db:35:7d:1d:6f:27: 2f:4b:ad:b8:00:7b:f7:cd:be:3d:64:d6:15:c8:ad:a8:a6:a7: 43:2e:eb:ee:52:72:40:f7:a8:9e:73:37:1a:9e:0f:12:78:ee: 3f:03:25:d2:bd:10:8e:74:d1:79:5a:cd:d2:18:10:f2:7f:5c: d0:b8:53:3f:42:c3:fe:d5:ba:3a:e3:39:a9:5d:1d:7d:bd:dd: af:c7:32:79:3f:6e:c4:dd:81:2d:73:24:b8:14:8c:0d:0c:fe: fe:9b:eb:2c:87:e6:da:f8:2b:91:f5:2d:b6:da:e0:6c:9e:f3: 3d:79:00:d5:49:ee:1c:a9:dc:d4:cc:d1:6d:fb:e6:5f:5d:95: 1d:12:05:30:21:b1:a9:4c:ae:10:93:e2:15:d9:1c:a9:c3:e9: 02:57:70:f7:86:64:9f:24:53:88:9e:44:12:6c:c2:2e:37:18: 62:e1:27:4e:98:71:44:ae:c1:8e:d4:64:77:0a:59:c2:01:44: 19:b2:03:db -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE5CkvwQr5RnsrG8TyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg4Zjc3MDMtMzc1MC00ZmI2LTk2NTEtNjM0NDI2YjQ4 YTg1MB4XDTI2MDYyMjIxMDgwMVoXDTI2MDkyMDIxMDgwMVowLzEtMCsGA1UEAxMk NjRmNDI2NGYtOWYxZi00YjZhLWI2NTAtNjVkZjBhZDlhYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY6+ZpG30IJP0+NeOvLMY3Af66/1iS5rX/v2 DXlpwwzriDghPxg/3AE1AnOQnhoo+zykTT+NilP0GtLLMVkKmZbtQnj543TkwObg FjpWqJFDvlWkCPKj7+7zf4+GS2+FoNbum559iIATeFyTwAX6NgDY7dmsSQ8HWmv8 tdUxsS20JWj08fMGYIuAu8obqwLeXE020DvPMXUQQHQs8VFYYfKHDXMuP7oIfTxM D3EGfNlTKHSWV9xfigAx58QL8ja0Fiq89a7CX8jt7wX5gEcDeAlS2FxFWGTdupN9 T3R1ZJ9xf3lScXxdopY+3pjMsuRi3sKtp4/joili2THR1+nAlQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFArXZT16BL4SYFfCQ5HKU6gNVtQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ODhm NzcwMy0zNzUwLTRmYjYtOTY1MS02MzQ0MjZiNDhhODUvZjcxNGI2Y2ItOTI5ZS0z YjMxLTllZGMtNTFiYzY3YTk2ODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTg4Zjc3MDMtMzc1MC00ZmI2LTk2 NTEtNjM0NDI2YjQ4YTg1LzU4OGY3NzAzLTM3NTAtNGZiNi05NjUxLTYzNDQyNmI0 OGE4NS5jcmwwHwYDVR0jBBgwFoAUNEnELMjUEG0sx7GuD1aBY6SjExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ODhmNzcwMy0zNzUwLTRmYjYtOTY1MS02MzQ0 MjZiNDhhODUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCx7zgAwQC zAtEMA4EAgACMAgDBgQmAv9eADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEl1BNwaFiHZSnUOyTndodT8ve qyV+aT/kDL4gx5FK/zJ5AqI+Ip4+386OgK3perJvechWPURSz5OwG61dQ4DEoGjb NX0dbycvS624AHv3zb49ZNYVyK2opqdDLuvuUnJA96ieczcang8SeO4/AyXSvRCO dNF5Ws3SGBDyf1zQuFM/QsP+1bo64zmpXR19vd2vxzJ5P27E3YEtcyS4FIwNDP7+ m+ssh+ba+CuR9S222uBsnvM9eQDVSe4cqdzUzNFt++ZfXZUdEgUwIbGpTK4Qk+IV 2Rypw+kCV3D3hmSfJFOInkQSbMIuNxhi4SdOmHFErsGO1GR3ClnCAUQZsgPb -----END CERTIFICATE-----Generated at Mon Jun 29 10:33:35 2026 by rpki-client