$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa File: 5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa (raw, json) Hash identifier: bI0qv7MT1Q22mUFPEr7JfeCSmO3VwMMBgXQJe8KZq9M= Subject key identifier: D6:93:98:86:53:E8:67:E6:7A:0C:B9:5B:97:F7:F7:FC:74:0C:0E:80 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E0AD4F18078E90359C8D440C0 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa Signing time: Tue 02 Jun 2026 21:55:39 +0000 ROA not before: Tue 02 Jun 2026 21:55:39 +0000 ROA not after: Mon 31 Aug 2026 21:55:39 +0000 asID: 5650 IP address blocks: 192.26.60.0/22 maxlen: 24 192.82.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:d4:f1:80:78:e9:03:59:c8:d4:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jun 2 21:55:39 2026 GMT Not After : Aug 31 21:55:39 2026 GMT Subject: CN=070e3e2d-5569-40b7-be60-134ed315edd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:60:b4:2b:8b:41:9f:85:bc:1c:a5:d2:c6: f6:b2:bb:04:4b:2a:80:43:62:d5:30:13:32:26:ff: de:cc:08:ad:31:3f:d8:34:5d:03:77:c3:19:44:30: d7:95:13:36:17:53:1e:e3:96:81:ca:6d:ee:94:ae: ca:5c:af:c3:2d:5b:64:96:51:a9:e6:e4:d9:ca:46: 24:25:ba:30:3a:99:e5:e0:27:47:d4:f3:29:be:f0: 64:f6:9e:88:91:6a:5a:7a:d3:d1:b5:86:d9:d8:5b: 4e:2c:65:fd:35:a4:3b:ed:4a:b9:d5:cb:a3:77:dc: 1d:41:e3:b1:b3:ea:b6:bd:0e:09:7f:80:af:f4:7f: 9c:56:61:77:93:18:7a:f4:1d:c1:19:06:5b:12:15: c4:70:08:d2:f0:4d:3c:af:5d:a2:33:a7:c5:9f:5b: ca:e3:2d:21:3b:cc:00:50:4c:60:39:28:b5:cb:5e: 09:e7:ef:da:14:fe:1b:8a:e0:f9:25:44:43:0e:43: 27:e9:ed:70:0d:46:21:ab:74:1c:31:a4:cb:9c:cb: 8f:85:43:50:b9:83:66:a9:bb:d3:bf:a8:26:99:07: 38:9a:17:8d:f2:c7:8e:f0:4f:99:ac:f9:c7:53:43: fd:9a:55:c4:38:6c:e5:9d:81:a4:a7:ab:94:aa:c3: d9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:93:98:86:53:E8:67:E6:7A:0C:B9:5B:97:F7:F7:FC:74:0C:0E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 192.26.60.0/22 192.82.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a2:6c:d2:55:a0:bb:46:67:e8:c2:c3:ce:47:40:ca:d8:ae: 80:6b:90:d5:c3:2e:00:9a:77:df:1e:8a:2e:4e:69:7a:44:0b: c4:40:0d:c6:3e:be:c9:c7:ae:27:ce:8f:04:8b:5e:1e:64:fc: 5a:6d:e5:24:a5:30:01:24:ea:4e:57:27:b5:55:c1:9f:a2:fc: f5:a5:70:b6:bc:d0:78:0c:23:f6:f7:e9:93:a3:07:36:da:6b: 14:6e:3a:85:7b:ec:c7:16:8c:f8:6b:1c:52:1c:6d:ac:8a:5e: 23:2a:8c:b6:3a:57:14:83:aa:b4:eb:71:49:22:34:19:b0:dc: 85:81:6f:ae:61:39:be:52:ef:74:9b:bd:d7:fb:99:1a:ec:62: 55:44:70:c8:08:6a:6a:a0:c5:15:7d:29:cf:d7:eb:e0:33:67: ff:53:c7:8e:66:9e:eb:f1:62:36:84:43:5f:77:0e:5b:0f:8d: 41:ea:7f:df:25:ec:e1:a5:da:e9:ae:d5:c1:eb:4f:91:58:93: 49:ce:19:01:6f:2f:76:28:b3:be:ef:90:3c:bb:a6:7b:a0:d6: a1:4d:a8:ea:c5:f2:b0:9a:da:7c:57:b3:68:c6:02:12:19:5d: d7:cc:fe:d8:93:85:e6:b1:e0:fe:4c:e6:b7:72:ae:68:21:a0: eb:fe:65:5f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4K1PGAeOkDWcjUQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDYwMjIxNTUzOVoXDTI2MDgzMTIxNTUzOVowLzEtMCsGA1UEAxMk MDcwZTNlMmQtNTU2OS00MGI3LWJlNjAtMTM0ZWQzMTVlZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4JgtCuLQZ+FvByl0sb2srsESyqAQ2LVMBMy Jv/ezAitMT/YNF0Dd8MZRDDXlRM2F1Me45aBym3ulK7KXK/DLVtkllGp5uTZykYk JbowOpnl4CdH1PMpvvBk9p6IkWpaetPRtYbZ2FtOLGX9NaQ77Uq51cujd9wdQeOx s+q2vQ4Jf4Cv9H+cVmF3kxh69B3BGQZbEhXEcAjS8E08r12iM6fFn1vK4y0hO8wA UExgOSi1y14J5+/aFP4biuD5JURDDkMn6e1wDUYhq3QcMaTLnMuPhUNQuYNmqbvT v6gmmQc4mheN8seO8E+ZrPnHU0P9mlXEOGzlnYGkp6uUqsPZMQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNaTmIZT6Gfmegy5W5f39/x0DA6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNWM1Yjg4YzItNjAzMC0z M2Y1LWIyOWUtMGJkNGI3YTI0ODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwBo8AwQD wFKwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD2ibNJVoLtGZ+jCw85HQMrYroBrkNXDLgCad98eii5OaXpE C8RADcY+vsnHrifOjwSLXh5k/Fpt5SSlMAEk6k5XJ7VVwZ+i/PWlcLa80HgMI/b3 6ZOjBzbaaxRuOoV77McWjPhrHFIcbayKXiMqjLY6VxSDqrTrcUkiNBmw3IWBb65h Ob5S73Sbvdf7mRrsYlVEcMgIamqgxRV9Kc/X6+AzZ/9Tx45mnuvxYjaEQ193DlsP jUHqf98l7OGl2umu1cHrT5FYk0nOGQFvL3Yos77vkDy7pnug1qFNqOrF8rCa2nxX s2jGAhIZXdfM/tiTheax4P5M5rdyrmghoOv+ZV8= -----END CERTIFICATE-----Generated at Wed Jun 3 08:16:26 2026 by rpki-client