$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8a400099-4ee5-4172-9488-6938b9f0cc3c/866276a6-2753-344c-9c31-3a4dc17cbfe5.roa File: 866276a6-2753-344c-9c31-3a4dc17cbfe5.roa (raw, json) Hash identifier: xTNb0tJFrBzImoOehiR1qjKTLDzHCq2h2xP2KUUm9ZE= Subject key identifier: 87:BA:2D:45:3B:87:69:39:F1:77:0E:A9:EF:EC:95:33:20:80:64:DE Certificate issuer: /CN=8a400099-4ee5-4172-9488-6938b9f0cc3c Certificate serial: 010D0C9F4328584DEF00339DA8DC6B308ADBA680 Authority key identifier: 6C:EA:D3:8C:67:3E:5F:E5:15:C3:19:4C:E8:1B:7C:DC:B0:59:B3:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8a400099-4ee5-4172-9488-6938b9f0cc3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8a400099-4ee5-4172-9488-6938b9f0cc3c/866276a6-2753-344c-9c31-3a4dc17cbfe5.roa Signing time: Sat 23 May 2026 22:40:11 +0000 ROA not before: Sat 23 May 2026 22:40:11 +0000 ROA not after: Fri 21 Aug 2026 22:40:11 +0000 asID: 64294 IP address blocks: 205.220.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8a400099-4ee5-4172-9488-6938b9f0cc3c/8a400099-4ee5-4172-9488-6938b9f0cc3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8a400099-4ee5-4172-9488-6938b9f0cc3c/8a400099-4ee5-4172-9488-6938b9f0cc3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8a400099-4ee5-4172-9488-6938b9f0cc3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:00:33:9d:a8:dc:6b:30:8a:db:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a400099-4ee5-4172-9488-6938b9f0cc3c Validity Not Before: May 23 22:40:11 2026 GMT Not After : Aug 21 22:40:11 2026 GMT Subject: CN=63f902fa-4aaa-4757-8d33-e7a33c7ce27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:36:43:06:15:d3:e4:94:ba:81:32:bb:ff:6a: f8:42:9e:8e:fb:c9:9f:2e:5e:f7:88:5e:76:ca:cd: 4d:80:ff:b2:6a:27:e0:47:a7:ad:89:29:07:52:3d: 34:28:5e:e7:7f:d5:fb:6d:85:39:e8:18:d0:9c:4a: 3d:14:3e:6d:65:c2:6c:19:dc:cb:f9:90:d4:95:bb: 9a:13:b3:9b:b1:0a:34:89:5f:d1:ae:28:e0:75:14: 61:10:ed:c4:70:75:f9:30:9b:5b:51:f3:d3:fc:9f: b3:cc:ad:cd:aa:ac:c0:4b:bc:6a:42:ca:dc:59:e7: 39:61:c1:bf:95:5e:43:63:0d:86:1e:00:7b:44:f6: 78:ab:a5:01:89:3e:db:a6:d4:bc:b7:e7:14:f3:54: f3:80:86:bc:95:b6:7a:07:f1:90:90:1f:b8:cb:b7: af:f0:d0:ff:4c:13:f6:e0:8e:81:95:a2:9a:52:e3: d3:70:3d:2d:59:e2:06:5f:60:90:70:ff:05:88:b7: c4:e6:bc:d6:56:76:f0:cb:0a:eb:8f:5e:94:9b:2e: 54:47:10:04:be:76:82:18:ec:1e:dc:8f:84:19:bf: dc:e8:38:e0:00:a2:51:81:c4:2a:dd:d2:e6:db:3f: 3c:5f:5c:85:24:40:dc:eb:b6:bf:76:b5:06:bc:e6: 75:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BA:2D:45:3B:87:69:39:F1:77:0E:A9:EF:EC:95:33:20:80:64:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8a400099-4ee5-4172-9488-6938b9f0cc3c/866276a6-2753-344c-9c31-3a4dc17cbfe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8a400099-4ee5-4172-9488-6938b9f0cc3c/8a400099-4ee5-4172-9488-6938b9f0cc3c.crl X509v3 Authority Key Identifier: keyid:6C:EA:D3:8C:67:3E:5F:E5:15:C3:19:4C:E8:1B:7C:DC:B0:59:B3:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8a400099-4ee5-4172-9488-6938b9f0cc3c.cer sbgp-ipAddrBlock: critical IPv4: 205.220.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f1:4a:93:36:a1:02:c7:df:9c:a7:ec:3a:79:04:02:e9:2e: 31:d6:2b:58:4b:6e:fe:e0:f8:de:6d:9c:d6:2f:84:73:3e:c2: 64:1c:02:3b:39:79:f9:10:7f:17:06:ab:f5:02:98:24:aa:f3: 14:9c:b0:66:86:21:2a:6c:99:72:e8:15:56:71:33:53:8e:9a: 1e:8d:8d:54:d3:38:96:8c:3f:06:7b:74:7d:af:ab:b2:58:1b: 30:e4:0d:85:7c:76:9d:b1:29:79:1a:54:3c:d9:da:3e:1b:59: c5:8e:bb:b3:7d:b4:13:63:83:62:b0:91:80:37:7c:62:85:06: ec:bd:93:ea:40:56:ab:85:1b:c7:31:60:f5:61:8d:20:11:95: eb:53:70:14:22:ca:2d:4c:ee:17:16:1b:a9:24:22:cf:d2:8b: c3:9c:60:89:6a:b2:b7:07:ea:b0:88:ed:99:5a:7f:48:18:31: ab:b8:87:40:62:15:7e:19:26:fd:60:ed:e3:46:46:62:06:05: 7c:16:4e:4f:25:20:fc:83:f7:2d:4b:7d:b2:9a:01:f4:74:c7: 2d:54:1c:ce:41:4f:bc:b7:83:b1:5a:f4:5b:0a:27:41:b1:cb: 8d:6d:8f:bf:89:86:b7:05:4b:22:46:cf:c1:62:6a:e0:87:93: 3e:7d:15:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vADOdqNxrMIrbpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0MDAwOTktNGVlNS00MTcyLTk0ODgtNjkzOGI5ZjBj YzNjMB4XDTI2MDUyMzIyNDAxMVoXDTI2MDgyMTIyNDAxMVowLzEtMCsGA1UEAxMk NjNmOTAyZmEtNGFhYS00NzU3LThkMzMtZTdhMzNjN2NlMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jZDBhXT5JS6gTK7/2r4Qp6O+8mfLl73iF52 ys1NgP+yaifgR6etiSkHUj00KF7nf9X7bYU56BjQnEo9FD5tZcJsGdzL+ZDUlbua E7ObsQo0iV/RrijgdRRhEO3EcHX5MJtbUfPT/J+zzK3NqqzAS7xqQsrcWec5YcG/ lV5DYw2GHgB7RPZ4q6UBiT7bptS8t+cU81TzgIa8lbZ6B/GQkB+4y7ev8ND/TBP2 4I6BlaKaUuPTcD0tWeIGX2CQcP8FiLfE5rzWVnbwywrrj16Umy5URxAEvnaCGOwe 3I+EGb/c6DjgAKJRgcQq3dLm2z88X1yFJEDc67a/drUGvOZ1eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe6LUU7h2k58XcOqe/slTMggGTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84YTQw MDA5OS00ZWU1LTQxNzItOTQ4OC02OTM4YjlmMGNjM2MvODY2Mjc2YTYtMjc1My0z NDRjLTljMzEtM2E0ZGMxN2NiZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGE0MDAwOTktNGVlNS00MTcyLTk0 ODgtNjkzOGI5ZjBjYzNjLzhhNDAwMDk5LTRlZTUtNDE3Mi05NDg4LTY5MzhiOWYw Y2MzYy5jcmwwHwYDVR0jBBgwFoAUbOrTjGc+X+UVwxlM6Bt83LBZsy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84YTQwMDA5OS00ZWU1LTQxNzItOTQ4OC02OTM4 YjlmMGNjM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzdyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfxSpM2oQLH35yn7Dp5BALpLjHWK1hLbv7g+N5tnNYvhHM+wmQcAjs5 efkQfxcGq/UCmCSq8xScsGaGISpsmXLoFVZxM1OOmh6NjVTTOJaMPwZ7dH2vq7JY GzDkDYV8dp2xKXkaVDzZ2j4bWcWOu7N9tBNjg2KwkYA3fGKFBuy9k+pAVquFG8cx YPVhjSARletTcBQiyi1M7hcWG6kkIs/Si8OcYIlqsrcH6rCI7Zlaf0gYMau4h0Bi FX4ZJv1g7eNGRmIGBXwWTk8lIPyD9y1LfbKaAfR0xy1UHM5BT7y3g7Fa9FsKJ0Gx y41tj7+JhrcFSyJGz8FiauCHkz59FTg= -----END CERTIFICATE-----Generated at Sat Jun 6 12:06:07 2026 by rpki-client