$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/02b089c4-9047-3c67-8acb-3b2f7b4f4407.roa File: 02b089c4-9047-3c67-8acb-3b2f7b4f4407.roa (raw, json) Hash identifier: lezUlcj4wIZPoWC6+SN5HLnKnZT9ymnX8NihuXZFLc0= Subject key identifier: B7:18:C6:00:76:03:D1:CE:26:32:64:D8:8A:F4:A6:D7:B2:DE:52:93 Certificate issuer: /CN=e1484d3a-68b3-4aa9-928a-6ddb7e638ce1 Certificate serial: 010D0C9F4328584DFCBB7ECE4B70829A9F9E7300 Authority key identifier: DF:61:4B:9D:96:BD:BC:A7:9B:12:0B:5B:C9:6C:47:36:36:58:0A:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/02b089c4-9047-3c67-8acb-3b2f7b4f4407.roa Signing time: Thu 28 May 2026 20:43:04 +0000 ROA not before: Thu 28 May 2026 20:43:04 +0000 ROA not after: Wed 26 Aug 2026 20:43:04 +0000 asID: 15248 IP address blocks: 198.147.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fc:bb:7e:ce:4b:70:82:9a:9f:9e:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1484d3a-68b3-4aa9-928a-6ddb7e638ce1 Validity Not Before: May 28 20:43:04 2026 GMT Not After : Aug 26 20:43:04 2026 GMT Subject: CN=67a53834-0063-467d-9552-e38122af7acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:48:8f:d8:12:a5:7e:e1:8e:0a:17:d6:0e:ac: c3:1d:45:d8:2f:98:d9:11:df:10:17:6a:e1:83:c6: da:68:75:70:0e:37:68:d0:ca:de:5c:5e:0c:5f:a9: 1c:71:38:20:a7:9b:24:16:20:af:1a:ad:91:ad:37: ad:a2:40:5c:4d:02:89:c5:76:1f:82:e8:b3:45:cd: d6:f6:df:8f:0c:d9:a9:3c:ce:6c:26:b3:fc:06:90: f5:fb:5b:99:eb:72:c9:ee:5c:34:16:12:5e:42:6f: e6:98:fd:63:fd:34:ab:20:e9:a6:b6:30:0a:34:26: 88:95:2c:ce:9b:46:4a:7b:9b:7b:6b:2d:53:17:3d: b8:dd:4d:7f:51:a7:ab:65:3d:ec:6e:09:44:0b:b4: 0e:25:1e:49:b0:e6:f5:96:04:dc:f9:99:d3:ed:e0: 96:4d:25:4d:98:56:17:18:06:a9:77:d7:de:5e:dd: f6:2d:32:88:00:d2:a8:4a:cd:7d:ff:80:c6:68:85: f1:e9:f0:4e:6d:93:71:f3:0b:8d:d6:aa:da:46:4b: 69:f0:15:10:8a:05:c6:87:b9:31:b9:aa:8d:cf:77: 07:ca:c4:77:2a:67:d0:96:92:14:f1:a0:18:4f:bb: 5e:db:88:f7:92:d2:2e:10:29:d5:36:ad:8e:de:a7: 92:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:18:C6:00:76:03:D1:CE:26:32:64:D8:8A:F4:A6:D7:B2:DE:52:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/02b089c4-9047-3c67-8acb-3b2f7b4f4407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.crl X509v3 Authority Key Identifier: keyid:DF:61:4B:9D:96:BD:BC:A7:9B:12:0B:5B:C9:6C:47:36:36:58:0A:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.cer sbgp-ipAddrBlock: critical IPv4: 198.147.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:05:dc:af:57:d2:4d:7c:d8:5b:6a:49:67:81:41:00:bc:fa: cf:4c:b0:ff:e0:bf:85:bf:3e:61:37:35:6b:7c:11:2c:26:f0: ee:0b:42:c1:80:89:2e:88:84:1c:86:75:15:47:ff:72:db:bb: a9:d5:2b:a2:7a:c2:ab:6f:2e:e9:1d:c3:90:55:e0:1a:74:8e: 16:69:5c:34:a4:cd:ba:7d:26:52:c8:66:1a:ad:4d:a4:fd:af: b5:73:cf:f1:09:af:24:a0:aa:5f:90:7f:16:1e:33:84:ac:b6: ee:98:ae:2c:9f:eb:1a:a3:25:16:4d:dd:fc:63:94:e7:af:1f: 0c:24:b5:0f:1e:7a:2e:0e:08:05:83:6f:2a:9e:dc:54:34:11: 01:b9:f5:4c:b7:73:d4:2b:1a:fc:1c:71:12:4e:da:36:0f:89: 8a:c6:bf:40:a1:ec:24:1d:75:34:c5:ff:e3:ab:e5:f3:fa:bf: 7d:11:49:f2:5a:58:e3:9e:67:b5:91:11:a1:a6:f5:c6:ac:4c: 3e:aa:7e:c0:ed:d1:5a:ca:5a:0d:39:40:10:93:76:3a:3d:d4: 3e:34:c0:09:95:71:43:65:fb:41:3c:6a:f9:1f:2c:83:90:ec: 98:d9:de:3e:b6:c2:4d:b0:86:49:89:95:9f:49:8e:4b:12:25: a7:fb:32:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE38u37OS3CCmp+ecwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ODRkM2EtNjhiMy00YWE5LTkyOGEtNmRkYjdlNjM4 Y2UxMB4XDTI2MDUyODIwNDMwNFoXDTI2MDgyNjIwNDMwNFowLzEtMCsGA1UEAxMk NjdhNTM4MzQtMDA2My00NjdkLTk1NTItZTM4MTIyYWY3YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0iP2BKlfuGOChfWDqzDHUXYL5jZEd8QF2rh g8baaHVwDjdo0MreXF4MX6kccTggp5skFiCvGq2RrTetokBcTQKJxXYfguizRc3W 9t+PDNmpPM5sJrP8BpD1+1uZ63LJ7lw0FhJeQm/mmP1j/TSrIOmmtjAKNCaIlSzO m0ZKe5t7ay1TFz243U1/UaerZT3sbglEC7QOJR5JsOb1lgTc+ZnT7eCWTSVNmFYX GAapd9feXt32LTKIANKoSs19/4DGaIXx6fBObZNx8wuN1qraRktp8BUQigXGh7kx uaqNz3cHysR3KmfQlpIU8aAYT7te24j3ktIuECnVNq2O3qeSaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcYxgB2A9HOJjJk2Ir0ptey3lKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lMTQ4 NGQzYS02OGIzLTRhYTktOTI4YS02ZGRiN2U2MzhjZTEvMDJiMDg5YzQtOTA0Ny0z YzY3LThhY2ItM2IyZjdiNGY0NDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZTE0ODRkM2EtNjhiMy00YWE5LTky OGEtNmRkYjdlNjM4Y2UxL2UxNDg0ZDNhLTY4YjMtNGFhOS05MjhhLTZkZGI3ZTYz OGNlMS5jcmwwHwYDVR0jBBgwFoAU32FLnZa9vKebEgtbyWxHNjZYCsQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lMTQ4NGQzYS02OGIzLTRhYTktOTI4YS02ZGRi N2U2MzhjZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpPiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQF3K9X0k182FtqSWeBQQC8+s9MsP/gv4W/PmE3NWt8ESwm8O4LQsGA iS6IhByGdRVH/3Lbu6nVK6J6wqtvLukdw5BV4Bp0jhZpXDSkzbp9JlLIZhqtTaT9 r7Vzz/EJrySgql+QfxYeM4Sstu6Yriyf6xqjJRZN3fxjlOevHwwktQ8eei4OCAWD byqe3FQ0EQG59Uy3c9QrGvwccRJO2jYPiYrGv0Ch7CQddTTF/+Or5fP6v30RSfJa WOOeZ7WREaGm9casTD6qfsDt0VrKWg05QBCTdjo91D40wAmVcUNl+0E8avkfLIOQ 7JjZ3j62wk2whkmJlZ9JjksSJaf7Mqw= -----END CERTIFICATE-----Generated at Sat Jun 6 12:04:15 2026 by rpki-client