$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa File: e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa (raw, json) Hash identifier: DqTO4lAiWVuaaHsnXsRHFr4w5C15sLILqUa9zsD44LE= Subject key identifier: BF:19:A6:07:00:8B:38:E1:28:8F:9A:77:78:EC:9E:6F:DC:7D:2A:0E Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F4328584E50849045D0CFEED43AADF940 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 92 IP address blocks: 128.153.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:90:45:d0:cf:ee:d4:3a:ad:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=40d0e14d-c9df-4754-8002-b3edb06f142e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:08:51:10:83:d7:a1:89:d9:a0:bb:04:f3:05: 31:df:5a:3f:05:ce:ed:eb:cc:f9:1a:99:c8:bd:3e: 86:a4:8a:18:ce:34:92:2c:2d:1d:20:4f:02:3a:50: 71:0a:bb:db:6a:34:0c:13:b4:a3:3d:68:56:4c:f9: 6e:c2:7c:bb:4d:65:96:06:4d:1d:bc:f5:9a:02:70: bc:68:5d:97:c1:2b:94:9e:55:cc:2d:72:80:48:80: 9d:da:a2:4a:79:f9:da:eb:ec:68:f5:05:c4:5c:30: 0d:5f:bf:d0:fb:0b:60:4b:b5:e0:4c:f6:3f:e0:91: c8:af:cd:48:94:8f:aa:d0:e1:7b:59:bb:a7:78:22: 7f:1d:22:6c:cd:dd:d3:4e:5f:1c:bc:a7:37:b6:83: 25:a0:97:a0:7f:bc:63:04:a5:38:01:ec:69:13:a7: e9:0a:4b:59:96:6e:f7:4a:64:50:2a:1c:f5:ff:bd: de:a0:a7:64:67:f0:43:02:76:22:7a:a8:a7:bb:19: e8:ce:70:8c:ba:2e:d6:f3:de:81:8b:92:80:c6:22: 60:8f:1a:00:e7:d3:db:df:7f:5d:30:78:11:7a:f4: c0:b3:86:34:68:0c:c4:a8:39:37:71:3a:48:cf:43: 71:ab:4b:4d:61:db:e5:c4:12:1e:28:c4:8c:20:7a: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:19:A6:07:00:8B:38:E1:28:8F:9A:77:78:EC:9E:6F:DC:7D:2A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:db:16:1a:56:ac:00:a8:d6:71:97:7a:bb:6e:af:fd:d4:a9: c1:fc:f0:c9:25:46:35:fc:54:6f:6c:2a:51:09:3a:82:b8:ae: 3d:eb:20:58:c2:0e:09:bb:b3:3a:0d:cd:8a:f1:62:f5:17:e1: f9:62:21:02:e1:9d:6d:08:e3:55:35:0d:ee:cf:6a:67:04:52: a6:de:45:cc:55:d8:0c:70:ca:86:11:6a:bd:6a:44:57:71:cc: b4:a3:c4:13:4e:53:fd:41:1f:0c:5b:0f:18:bc:66:f3:45:e0: 57:5b:ed:d1:2e:f3:74:83:ea:7d:f4:e2:ed:71:36:e7:3c:a4: 70:40:23:50:17:4d:10:f1:0c:e2:60:43:ea:31:ff:5e:db:15: 4e:84:29:a0:5c:2a:72:95:30:cb:55:6d:2e:22:bf:97:59:ec: 56:ca:e8:a5:0b:e1:c1:e8:5c:66:da:51:21:ab:b4:c2:37:43: 91:06:03:68:5d:fa:32:85:c1:37:44:05:6d:11:ae:5d:b0:d8: 86:00:24:f8:4e:6d:70:db:d3:e5:ee:a0:5e:c3:61:34:bd:d6: 4b:cf:13:1e:69:1e:6f:d0:0c:3e:ca:af:38:80:b3:6a:19:1d: 6c:c3:6b:e8:72:44:81:56:51:fe:0c:10:93:e1:1c:6d:5a:b9: 03:d2:57:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhJBF0M/u1Dqt+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk NDBkMGUxNGQtYzlkZi00NzU0LTgwMDItYjNlZGIwNmYxNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwhREIPXoYnZoLsE8wUx31o/Bc7t68z5GpnI vT6GpIoYzjSSLC0dIE8COlBxCrvbajQME7SjPWhWTPluwny7TWWWBk0dvPWaAnC8 aF2XwSuUnlXMLXKASICd2qJKefna6+xo9QXEXDANX7/Q+wtgS7XgTPY/4JHIr81I lI+q0OF7WbuneCJ/HSJszd3TTl8cvKc3toMloJegf7xjBKU4AexpE6fpCktZlm73 SmRQKhz1/73eoKdkZ/BDAnYieqinuxnoznCMui7W896Bi5KAxiJgjxoA59Pb339d MHgRevTAs4Y0aAzEqDk3cTpIz0Nxq0tNYdvlxBIeKMSMIHr+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8ZpgcAizjhKI+ad3jsnm/cfSoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvZTg4MTY3NTQtZTE2YS0z MmE3LWJiMWYtYTU2ZTI1NGUwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3bFhpWrACo1nGXertur/3UqcH88MklRjX8VG9sKlEJOoK4rj3rIFjC Dgm7szoNzYrxYvUX4fliIQLhnW0I41U1De7PamcEUqbeRcxV2AxwyoYRar1qRFdx zLSjxBNOU/1BHwxbDxi8ZvNF4Fdb7dEu83SD6n304u1xNuc8pHBAI1AXTRDxDOJg Q+ox/17bFU6EKaBcKnKVMMtVbS4iv5dZ7FbK6KUL4cHoXGbaUSGrtMI3Q5EGA2hd +jKFwTdEBW0Rrl2w2IYAJPhObXDb0+XuoF7DYTS91kvPEx5pHm/QDD7KrziAs2oZ HWzDa+hyRIFWUf4MEJPhHG1auQPSV4A= -----END CERTIFICATE-----Generated at Sun Jun 28 17:20:05 2026 by rpki-client