$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/97478ed6-5899-301f-8e80-bfed0add1741.roa File: 97478ed6-5899-301f-8e80-bfed0add1741.roa (raw, json) Hash identifier: Nt1QUUNqWaGL3pXcpEfHYx5GHHjPz6atAaGGkrLegAs= Subject key identifier: BB:56:44:06:3A:1F:7A:46:E7:48:6C:A7:28:79:51:F9:FC:3A:C4:EF Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584DFFE897732CE3097FC49ABAC0 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/97478ed6-5899-301f-8e80-bfed0add1741.roa Signing time: Sat 30 May 2026 00:01:21 +0000 ROA not before: Sat 30 May 2026 00:01:21 +0000 ROA not after: Fri 28 Aug 2026 00:01:21 +0000 asID: 203075 IP address blocks: 198.29.72.0/24 maxlen: 24 198.29.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ff:e8:97:73:2c:e3:09:7f:c4:9a:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: May 30 00:01:21 2026 GMT Not After : Aug 28 00:01:21 2026 GMT Subject: CN=40af2f1c-1393-4f23-8023-36a8d1e5bfca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:00:87:61:91:ff:f5:20:3e:c0:3d:4f:89: f4:4a:7a:84:31:09:72:76:50:a8:b1:d4:a7:1d:18: 31:fd:c5:8b:fc:41:5c:f3:5e:04:77:0a:90:9e:4c: e8:f6:e3:4f:aa:26:10:1d:52:39:ff:b9:06:bc:a1: 48:83:18:b4:a6:34:1d:67:1f:eb:39:a9:a8:27:c0: fb:07:e1:7c:14:a5:94:c1:e8:fb:f8:e6:3c:55:47: 62:8e:21:e5:ca:a8:df:99:49:15:37:94:10:95:40: bd:da:61:b0:ce:c4:cb:02:7b:d7:ad:83:85:37:9b: 82:99:63:12:0e:87:b1:53:9d:2a:2a:af:49:c8:58: 58:ca:ff:1e:cd:e8:7a:43:22:ef:62:13:8d:bd:e4: 1f:04:6a:ad:8b:7a:5c:08:e5:b5:af:33:bd:1f:6e: 86:2b:0b:d9:03:25:64:58:73:f7:54:cb:44:77:ae: f0:bf:b0:94:e3:53:81:7d:aa:fc:e4:a1:e7:7d:29: 24:39:0f:19:e9:a9:13:1f:c8:02:18:74:b1:66:9f: 85:78:cd:31:ba:39:01:4e:63:6e:2f:75:55:63:22: 1d:d3:42:b4:41:61:bf:e1:05:5e:66:32:15:32:fa: dc:1c:bb:15:ff:b0:79:5a:b8:ed:7d:d1:1a:c9:f9: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:56:44:06:3A:1F:7A:46:E7:48:6C:A7:28:79:51:F9:FC:3A:C4:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/97478ed6-5899-301f-8e80-bfed0add1741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 198.29.72.0/24 198.29.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:09:2e:e3:a6:a0:37:ac:94:51:e6:45:9b:9d:68:c9:5e:b4: e1:5a:d4:2f:db:b9:51:6d:fc:2a:a2:fd:77:46:2d:e8:37:a0: 2f:b3:ea:c9:47:63:51:77:10:ae:00:ac:4d:fa:c4:35:d2:49: 01:b6:ea:dc:4e:6f:36:f1:2d:5c:37:ca:34:21:1b:5f:4f:71: 79:4b:36:c4:05:f1:23:7e:72:34:8d:1c:5c:c6:09:02:ef:b2: 87:c8:20:45:d2:6e:b5:55:7b:37:5e:21:74:2c:d7:31:c5:da: 29:bf:9b:ce:13:d6:83:f9:f9:43:20:dd:07:7e:53:98:c9:20: dc:a2:43:9e:a8:cb:ad:23:91:d6:49:b4:b8:86:b0:3e:80:d0: 87:bf:de:d7:a8:cd:81:ca:5f:a4:23:c2:61:9f:dd:3d:ac:82: 22:ab:f5:a2:25:7f:49:3a:27:be:65:0f:d5:cc:36:93:4f:47: c0:34:cc:19:12:e0:e7:14:e7:a3:0d:fe:91:98:59:b3:ac:ab: dc:9a:63:15:ac:0f:29:49:a4:26:74:fb:f6:a6:df:a4:2f:9b: 46:7e:bb:a2:16:00:40:7a:f4:4c:51:eb:5e:26:03:e2:18:23: 2e:dc:f4:54:55:68:c7:18:b5:92:c3:80:9f:c0:ee:f7:04:c1: 17:90:d0:6f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3/6JdzLOMJf8SausAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDUzMDAwMDEyMVoXDTI2MDgyODAwMDEyMVowLzEtMCsGA1UEAxMk NDBhZjJmMWMtMTM5My00ZjIzLTgwMjMtMzZhOGQxZTViZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxoAh2GR//UgPsA9T4n0SnqEMQlydlCosdSn HRgx/cWL/EFc814EdwqQnkzo9uNPqiYQHVI5/7kGvKFIgxi0pjQdZx/rOamoJ8D7 B+F8FKWUwej7+OY8VUdijiHlyqjfmUkVN5QQlUC92mGwzsTLAnvXrYOFN5uCmWMS DoexU50qKq9JyFhYyv8ezeh6QyLvYhONveQfBGqti3pcCOW1rzO9H26GKwvZAyVk WHP3VMtEd67wv7CU41OBfar85KHnfSkkOQ8Z6akTH8gCGHSxZp+FeM0xujkBTmNu L3VVYyId00K0QWG/4QVeZjIVMvrcHLsV/7B5WrjtfdEayfn7LQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLtWRAY6H3pG50hspyh5Ufn8OsTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvOTc0NzhlZDYtNTg5OS0z MDFmLThlODAtYmZlZDBhZGQxNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxh1IAwQA xh1PMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEoJLuOmoDeslFHmRZudaMletOFa1C/buVFt/Cqi/XdGLeg3 oC+z6slHY1F3EK4ArE36xDXSSQG26txObzbxLVw3yjQhG19PcXlLNsQF8SN+cjSN HFzGCQLvsofIIEXSbrVVezdeIXQs1zHF2im/m84T1oP5+UMg3Qd+U5jJINyiQ56o y60jkdZJtLiGsD6A0Ie/3teozYHKX6QjwmGf3T2sgiKr9aIlf0k6J75lD9XMNpNP R8A0zBkS4OcU56MN/pGYWbOsq9yaYxWsDylJpCZ0+/am36Qvm0Z+u6IWAEB69ExR 614mA+IYIy7c9FRVaMcYtZLDgJ/A7vcEwReQ0G8= -----END CERTIFICATE-----Generated at Wed Jun 3 09:19:19 2026 by rpki-client