$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/625f129d-c0d1-3533-bbd1-eeda0cf1ce4a.roa File: 625f129d-c0d1-3533-bbd1-eeda0cf1ce4a.roa (raw, json) Hash identifier: y5ytfK+Kfq1rMfxEj2SlKfR5pAIhQcda6aNCz3nIl/g= Subject key identifier: 71:5E:4E:DB:07:77:21:C0:F9:E1:FB:C5:54:B9:12:59:12:B4:8D:1E Certificate issuer: /CN=b8e4e496-994f-4877-8328-aec6386bbc01 Certificate serial: 010D0C9F4328584E428E799EE7B81FD3D139EA60 Authority key identifier: 4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/625f129d-c0d1-3533-bbd1-eeda0cf1ce4a.roa Signing time: Mon 22 Jun 2026 20:58:56 +0000 ROA not before: Mon 22 Jun 2026 20:58:56 +0000 ROA not after: Sun 20 Sep 2026 20:58:56 +0000 asID: 10662 IP address blocks: 198.62.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:8e:79:9e:e7:b8:1f:d3:d1:39:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e4e496-994f-4877-8328-aec6386bbc01 Validity Not Before: Jun 22 20:58:56 2026 GMT Not After : Sep 20 20:58:56 2026 GMT Subject: CN=ed45233b-c7e7-42e6-a142-e12827cf8796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:0b:ab:0c:5e:b3:3a:ea:87:4c:3d:ad:10: 3b:b4:b1:b0:7b:e3:2b:b1:f2:2e:f2:3b:13:7f:b8: 57:91:63:13:36:4b:20:05:62:e9:f9:56:cf:7f:18: e4:c4:1d:85:99:6a:9a:c5:e4:6c:4e:05:a8:67:b5: 5f:5f:92:de:fa:d2:cd:3e:71:92:46:1d:6c:fd:86: a9:86:53:3a:02:7c:88:83:df:c2:d3:f3:02:2d:84: 38:d4:94:b5:f7:63:09:a0:6c:ec:ef:21:85:f6:af: d9:79:d4:a6:de:4c:c3:8e:b4:95:6b:73:c6:c7:2a: 15:76:0e:d9:36:87:2a:4f:58:58:f8:c2:df:a3:d4: 64:11:ec:d4:82:14:56:da:40:87:f7:89:5f:c7:fb: ce:34:bf:8d:de:dd:9d:88:bb:69:d3:38:25:65:5d: 5e:ec:c2:90:82:13:92:dc:53:dd:cb:be:a0:16:bf: 4a:76:06:01:25:43:50:f4:5d:bb:05:7d:f0:e2:a2: 8b:a1:d9:1c:08:f2:70:25:64:93:99:c8:63:e3:6d: 8f:7a:85:bc:9a:f8:de:b3:db:f1:ab:b3:27:3a:b0: ab:70:76:a5:5a:14:ef:85:bc:c2:2c:61:5a:d5:73: 1c:9c:af:c6:e6:37:10:c1:17:0d:03:f7:a0:41:8a: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5E:4E:DB:07:77:21:C0:F9:E1:FB:C5:54:B9:12:59:12:B4:8D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/625f129d-c0d1-3533-bbd1-eeda0cf1ce4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl X509v3 Authority Key Identifier: keyid:4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer sbgp-ipAddrBlock: critical IPv4: 198.62.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1f:c8:6e:ea:ff:c1:36:d4:7a:4a:e9:6b:27:07:16:30:a3: a3:79:b7:68:7a:21:74:33:22:b8:63:75:24:3c:ab:bf:38:75: 1f:16:1a:56:ea:45:f7:a6:53:a8:65:ca:e6:1a:6f:60:07:f6: 03:04:a0:0a:dc:af:c1:3d:27:0e:4f:f9:5c:e4:ba:13:cb:70: d2:20:4e:ea:36:9d:62:90:32:80:bb:7f:17:5d:0d:2a:f7:95: 1a:d0:64:62:1e:07:43:61:06:56:e1:20:38:ad:ce:a1:f1:ea: 75:46:40:75:83:30:96:52:90:e7:8b:e9:0a:b7:42:e8:30:27: b4:43:b0:4d:fb:2e:09:17:5a:0c:8d:20:09:af:79:b8:b4:e1: 37:4b:00:cd:5a:6a:5e:55:4a:70:35:08:35:28:13:b2:22:d4: 9d:42:41:71:20:fb:df:08:83:07:50:12:64:36:b9:d8:c7:f6: 52:07:4a:8d:74:20:64:1c:70:79:7d:82:fa:e0:70:e4:70:cb: 1a:85:f2:1c:11:3e:47:05:59:a5:cd:9e:da:1b:a2:0d:bb:8b: 9d:6c:3d:62:d4:f3:41:d5:06:59:ac:60:ef:01:42:95:80:9c: 6c:86:ae:19:b8:78:95:08:14:76:8d:3d:46:20:c8:f9:8c:bf: df:99:6e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Cjnme57gf09E56mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhlNGU0OTYtOTk0Zi00ODc3LTgzMjgtYWVjNjM4NmJi YzAxMB4XDTI2MDYyMjIwNTg1NloXDTI2MDkyMDIwNTg1NlowLzEtMCsGA1UEAxMk ZWQ0NTIzM2ItYzdlNy00MmU2LWExNDItZTEyODI3Y2Y4Nzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/sLqwxeszrqh0w9rRA7tLGwe+MrsfIu8jsT f7hXkWMTNksgBWLp+VbPfxjkxB2FmWqaxeRsTgWoZ7VfX5Le+tLNPnGSRh1s/Yap hlM6AnyIg9/C0/MCLYQ41JS192MJoGzs7yGF9q/ZedSm3kzDjrSVa3PGxyoVdg7Z NocqT1hY+MLfo9RkEezUghRW2kCH94lfx/vONL+N3t2diLtp0zglZV1e7MKQghOS 3FPdy76gFr9KdgYBJUNQ9F27BX3w4qKLodkcCPJwJWSTmchj422PeoW8mvjes9vx q7MnOrCrcHalWhTvhbzCLGFa1XMcnK/G5jcQwRcNA/egQYqTLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFeTtsHdyHA+eH7xVS5ElkStI0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iOGU0 ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2Mzg2YmJjMDEvNjI1ZjEyOWQtYzBkMS0z NTMzLWJiZDEtZWVkYTBjZjFjZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjhlNGU0OTYtOTk0Zi00ODc3LTgz MjgtYWVjNjM4NmJiYzAxL2I4ZTRlNDk2LTk5NGYtNDg3Ny04MzI4LWFlYzYzODZi YmMwMS5jcmwwHwYDVR0jBBgwFoAUT5WbHKn9XvdgJocLvrogfHrzWm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iOGU0ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2 Mzg2YmJjMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxj4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYfyG7q/8E21HpK6WsnBxYwo6N5t2h6IXQzIrhjdSQ8q784dR8WGlbq RfemU6hlyuYab2AH9gMEoArcr8E9Jw5P+VzkuhPLcNIgTuo2nWKQMoC7fxddDSr3 lRrQZGIeB0NhBlbhIDitzqHx6nVGQHWDMJZSkOeL6Qq3QugwJ7RDsE37LgkXWgyN IAmvebi04TdLAM1aal5VSnA1CDUoE7Ii1J1CQXEg+98IgwdQEmQ2udjH9lIHSo10 IGQccHl9gvrgcORwyxqF8hwRPkcFWaXNntobog27i51sPWLU80HVBlmsYO8BQpWA nGyGrhm4eJUIFHaNPUYgyPmMv9+ZbqU= -----END CERTIFICATE-----Generated at Mon Jun 29 11:31:38 2026 by rpki-client