$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/04695c33-b0a3-3704-a5b6-180c9efa6484.roa File: 04695c33-b0a3-3704-a5b6-180c9efa6484.roa (raw, json) Hash identifier: Vx6N2CLa+rYssmI53fjkpCpLtFFMjhkpk1Nb4n9fsCk= Subject key identifier: F2:0A:9C:12:01:6C:F4:F1:4B:F8:AE:72:76:E8:4B:44:89:25:3A:E6 Certificate issuer: /CN=b9227650-f65a-47df-b36e-587872f9eb35 Certificate serial: 010D0C9F4328584E0D68E7399F48108BC9A46D00 Authority key identifier: 24:95:F0:A3:A0:F8:75:BB:4C:98:BF:21:E0:60:F3:F0:5C:8E:53:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/04695c33-b0a3-3704-a5b6-180c9efa6484.roa Signing time: Wed 03 Jun 2026 20:05:23 +0000 ROA not before: Wed 03 Jun 2026 20:05:23 +0000 ROA not after: Tue 01 Sep 2026 20:05:23 +0000 asID: 402128 IP address blocks: 167.254.192.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/b9227650-f65a-47df-b36e-587872f9eb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/b9227650-f65a-47df-b36e-587872f9eb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:68:e7:39:9f:48:10:8b:c9:a4:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9227650-f65a-47df-b36e-587872f9eb35 Validity Not Before: Jun 3 20:05:23 2026 GMT Not After : Sep 1 20:05:23 2026 GMT Subject: CN=1123db51-3680-42d5-b2d1-779dab590916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:ea:84:ea:bc:a1:bf:07:59:c3:12:28:f7: 49:63:e7:49:80:b8:ab:a4:83:d9:1c:ee:9f:52:9d: 6f:e5:2f:4c:1b:19:69:9f:9a:ee:2b:1d:9b:6f:e9: 18:49:a9:a9:d8:25:f6:d0:ec:13:bb:b1:66:97:a6: 7c:ff:0c:1c:5d:70:e2:91:be:74:5c:10:60:b1:8d: 58:b6:f0:d2:0c:37:6d:4a:85:3b:00:53:f1:bc:5e: 58:10:9e:34:4c:b0:9b:e3:e7:c0:c1:37:9f:7d:2a: 1e:52:40:c4:c8:05:e9:c9:da:b7:fc:f2:72:7d:7f: 8c:4b:02:89:10:d5:e4:ff:51:ff:78:c4:77:b4:56: b1:e7:54:3a:4b:ec:37:dd:63:01:af:d9:31:31:35: 86:91:90:07:0a:05:4c:a8:6e:8a:59:4a:7f:8e:27: 7b:f4:5c:39:8f:2c:0b:fd:20:b3:14:6b:7c:d4:83: 08:4d:61:be:0d:0f:3d:38:a1:30:a5:e3:16:88:50: 83:27:be:59:28:71:ec:21:a2:e1:12:42:5e:92:63: c2:b2:58:4c:29:4a:52:1d:d1:9c:b3:1f:52:14:d9: ac:57:4e:58:53:cc:c2:43:08:54:3a:0e:89:1f:95: 5a:83:e8:5a:d9:53:05:09:8d:57:d5:46:5d:b6:5a: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0A:9C:12:01:6C:F4:F1:4B:F8:AE:72:76:E8:4B:44:89:25:3A:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/04695c33-b0a3-3704-a5b6-180c9efa6484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/b9227650-f65a-47df-b36e-587872f9eb35.crl X509v3 Authority Key Identifier: keyid:24:95:F0:A3:A0:F8:75:BB:4C:98:BF:21:E0:60:F3:F0:5C:8E:53:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35.cer sbgp-ipAddrBlock: critical IPv4: 167.254.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:af:ef:7b:8b:54:e9:2a:33:95:93:4a:8f:07:2a:0d:1e:1f: be:ca:b0:15:19:17:b7:bc:95:ed:4f:70:b1:dd:19:b5:a7:b0: 7c:e0:61:e8:b7:06:f2:94:e3:e4:a9:69:89:1c:fc:d2:e0:25: 5c:0a:af:ae:2e:34:22:f3:39:1f:dc:55:47:77:8f:a7:33:c3: 66:46:a0:89:35:3c:21:76:2b:fd:bd:7d:88:85:b4:14:a3:9d: 07:6c:dd:98:7e:50:ea:76:88:45:6b:79:f7:3f:fe:58:11:e3: ba:01:96:76:32:a7:bd:b2:85:d2:ed:5b:7a:a5:a4:d3:fc:cf: 6b:cc:b5:fa:8d:7b:33:12:3a:1a:1b:fd:b6:df:d7:36:f5:12: e4:c4:ba:fc:50:11:8d:90:da:e6:60:9f:55:be:34:4e:c9:70: 95:06:5d:fe:02:68:f8:fd:a1:9b:39:96:8d:12:cd:a7:bd:07: bd:5c:86:d4:b2:04:da:0f:57:57:29:e2:75:d1:a3:f1:f0:00: a7:33:20:b6:7c:f7:f0:48:41:93:a2:70:a5:b6:5e:88:4f:cb: 75:cd:4a:71:ce:93:33:95:41:08:ff:ef:c9:c0:fa:a0:03:26: 6c:7d:bd:bb:06:38:c8:92:21:0e:f7:52:b2:6f:df:62:04:27: 3f:45:b0:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NaOc5n0gQi8mkbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkyMjc2NTAtZjY1YS00N2RmLWIzNmUtNTg3ODcyZjll YjM1MB4XDTI2MDYwMzIwMDUyM1oXDTI2MDkwMTIwMDUyM1owLzEtMCsGA1UEAxMk MTEyM2RiNTEtMzY4MC00MmQ1LWIyZDEtNzc5ZGFiNTkwOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4LqhOq8ob8HWcMSKPdJY+dJgLirpIPZHO6f Up1v5S9MGxlpn5ruKx2bb+kYSamp2CX20OwTu7Fml6Z8/wwcXXDikb50XBBgsY1Y tvDSDDdtSoU7AFPxvF5YEJ40TLCb4+fAwTeffSoeUkDEyAXpydq3/PJyfX+MSwKJ ENXk/1H/eMR3tFax51Q6S+w33WMBr9kxMTWGkZAHCgVMqG6KWUp/jid79Fw5jywL /SCzFGt81IMITWG+DQ89OKEwpeMWiFCDJ75ZKHHsIaLhEkJekmPCslhMKUpSHdGc sx9SFNmsV05YU8zCQwhUOg6JH5Vag+ha2VMFCY1X1UZdtlrp0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIKnBIBbPTxS/iucnboS0SJJTrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iOTIy NzY1MC1mNjVhLTQ3ZGYtYjM2ZS01ODc4NzJmOWViMzUvMDQ2OTVjMzMtYjBhMy0z NzA0LWE1YjYtMTgwYzllZmE2NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjkyMjc2NTAtZjY1YS00N2RmLWIz NmUtNTg3ODcyZjllYjM1L2I5MjI3NjUwLWY2NWEtNDdkZi1iMzZlLTU4Nzg3MmY5 ZWIzNS5jcmwwHwYDVR0jBBgwFoAUJJXwo6D4dbtMmL8h4GDz8FyOU54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iOTIyNzY1MC1mNjVhLTQ3ZGYtYjM2ZS01ODc4 NzJmOWViMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp/7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACv73uLVOkqM5WTSo8HKg0eH77KsBUZF7e8le1PcLHdGbWnsHzgYei3 BvKU4+SpaYkc/NLgJVwKr64uNCLzOR/cVUd3j6czw2ZGoIk1PCF2K/29fYiFtBSj nQds3Zh+UOp2iEVrefc//lgR47oBlnYyp72yhdLtW3qlpNP8z2vMtfqNezMSOhob /bbf1zb1EuTEuvxQEY2Q2uZgn1W+NE7JcJUGXf4CaPj9oZs5lo0Szae9B71chtSy BNoPV1cp4nXRo/HwAKczILZ89/BIQZOicKW2XohPy3XNSnHOkzOVQQj/78nA+qAD Jmx9vbsGOMiSIQ73UrJv32IEJz9FsGU= -----END CERTIFICATE-----Generated at Sat Jun 6 10:49:22 2026 by rpki-client