$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/89eaad9a-c679-3b5d-800a-328d1b3617b9.roa File: 89eaad9a-c679-3b5d-800a-328d1b3617b9.roa (raw, json) Hash identifier: xmbdgIEhPLGWCk3R6J4lR4rmAv2pvH7gBhUR8RakO+M= Subject key identifier: 6E:8D:DF:04:48:E9:99:BA:B4:BB:20:C1:15:7C:E7:82:EB:1E:70:86 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584DFEA0765E6857BC57500D1540 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/89eaad9a-c679-3b5d-800a-328d1b3617b9.roa Signing time: Fri 29 May 2026 13:00:10 +0000 ROA not before: Fri 29 May 2026 13:00:10 +0000 ROA not after: Thu 27 Aug 2026 13:00:10 +0000 asID: 11232 IP address blocks: 161.199.184.0/22 maxlen: 22 208.118.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:a0:76:5e:68:57:bc:57:50:0d:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: May 29 13:00:10 2026 GMT Not After : Aug 27 13:00:10 2026 GMT Subject: CN=a0da78dc-c8a1-4177-9e7a-d3cfabf97bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e2:c3:d4:c3:2f:dd:71:f8:96:5b:07:0b:38: 5d:7d:d4:74:27:05:c1:6b:27:fd:cb:b7:9d:18:1f: 3d:b5:f8:33:9e:2b:f1:89:45:f4:5e:40:48:c9:30: b9:17:da:01:1a:8b:ae:53:e1:fa:3b:69:5e:d3:07: d9:a1:a7:d0:78:aa:09:18:89:89:b9:0a:c4:f0:28: 77:41:70:46:ee:60:37:15:3a:3e:1e:7a:0f:f5:cd: ef:83:5e:be:84:63:c5:f4:29:d9:36:16:dc:71:36: 0c:86:83:69:d2:b1:b1:f5:53:53:e8:e5:21:8c:83: 30:60:5f:28:ac:52:b5:c7:a5:14:4e:6b:8f:6e:8f: b5:af:97:a8:cb:52:61:d2:43:5d:05:59:b6:9e:49: 63:77:7a:40:a9:94:9d:ef:89:ba:e7:95:f9:d1:ca: d4:62:be:69:63:06:8a:a7:f5:8b:ec:7a:51:c4:95: 33:10:08:a0:20:21:55:c8:44:79:4e:33:2a:3a:2c: 8b:b3:91:10:ec:54:1c:16:db:7e:10:b9:b0:4b:97: f2:04:e0:b9:e1:86:ff:ff:95:02:80:6c:71:4f:0c: ed:03:75:88:e5:4e:d9:26:ce:d9:a5:19:c6:5f:a4: 37:9f:13:cf:a4:6c:23:75:c1:af:dc:a2:09:80:0b: 37:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8D:DF:04:48:E9:99:BA:B4:BB:20:C1:15:7C:E7:82:EB:1E:70:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/89eaad9a-c679-3b5d-800a-328d1b3617b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 161.199.184.0/22 208.118.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0a:15:e3:fa:5b:71:75:cd:b7:40:e9:06:fa:6e:2d:4b:58: 39:92:51:07:e3:a3:d7:9e:e0:97:b1:62:0a:92:5c:df:c0:23: f9:1b:04:90:73:1f:c5:9d:99:5e:2c:ee:18:b0:94:98:9a:f9: 5e:bf:30:63:ec:b3:70:6f:e7:73:22:0b:34:c4:33:ec:d5:2d: 7a:bc:59:c8:b9:ba:bf:1e:70:db:5f:f7:0d:da:b4:85:5a:94: 21:5a:23:6a:e6:18:a0:66:02:cb:8f:b1:2f:9f:ba:11:bc:07: 7b:1f:0c:f1:64:03:9b:39:2f:55:fa:61:09:24:24:f8:19:69: e2:f2:b0:3c:93:32:03:cd:77:cb:f7:a5:c9:6d:ee:4e:ff:04: 43:0a:8a:46:e0:c9:f6:22:3e:7f:dd:28:92:9f:2b:4f:81:94: cf:0c:60:ae:4c:17:ee:db:4e:f1:c3:1f:54:e6:cf:ab:0a:cb: 01:68:9f:0f:42:27:79:43:1f:f2:7a:6f:4a:58:1a:69:e3:e4: 62:6f:fa:86:73:46:35:97:eb:d6:bb:f7:eb:57:11:ff:e2:76: b5:0f:e1:2b:f3:90:ee:ec:9d:6e:7d:f5:bc:66:72:a5:62:1a: c1:d7:00:b8:a8:23:86:6c:a1:aa:73:66:50:35:b7:91:94:2d: cd:b7:f0:4e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3+oHZeaFe8V1ANFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDUyOTEzMDAxMFoXDTI2MDgyNzEzMDAxMFowLzEtMCsGA1UEAxMk YTBkYTc4ZGMtYzhhMS00MTc3LTllN2EtZDNjZmFiZjk3YmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeLD1MMv3XH4llsHCzhdfdR0JwXBayf9y7ed GB89tfgznivxiUX0XkBIyTC5F9oBGouuU+H6O2le0wfZoafQeKoJGImJuQrE8Ch3 QXBG7mA3FTo+HnoP9c3vg16+hGPF9CnZNhbccTYMhoNp0rGx9VNT6OUhjIMwYF8o rFK1x6UUTmuPbo+1r5eoy1Jh0kNdBVm2nkljd3pAqZSd74m655X50crUYr5pYwaK p/WL7HpRxJUzEAigICFVyER5TjMqOiyLs5EQ7FQcFtt+ELmwS5fyBOC54Yb//5UC gGxxTwztA3WI5U7ZJs7ZpRnGX6Q3nxPPpGwjdcGv3KIJgAs3oQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG6N3wRI6Zm6tLsgwRV854LrHnCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvODllYWFkOWEtYzY3OS0z YjVkLTgwMGEtMzI4ZDFiMzYxN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCoce4AwQE 0HaQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGUKFeP6W3F1zbdA6Qb6bi1LWDmSUQfjo9ee4JexYgqSXN/A I/kbBJBzH8WdmV4s7hiwlJia+V6/MGPss3Bv53MiCzTEM+zVLXq8Wci5ur8ecNtf 9w3atIValCFaI2rmGKBmAsuPsS+fuhG8B3sfDPFkA5s5L1X6YQkkJPgZaeLysDyT MgPNd8v3pclt7k7/BEMKikbgyfYiPn/dKJKfK0+BlM8MYK5MF+7bTvHDH1Tmz6sK ywFonw9CJ3lDH/J6b0pYGmnj5GJv+oZzRjWX69a79+tXEf/idrUP4SvzkO7snW59 9bxmcqViGsHXALioI4ZsoapzZlA1t5GULc238E4= -----END CERTIFICATE-----Generated at Fri May 29 16:13:16 2026 by rpki-client