$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa File: 620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa (raw, json) Hash identifier: QHmZb875cQWJasQUScNakz/FYr1APFVDnqHVVPzv4WU= Subject key identifier: 02:87:D7:1C:6C:9E:7E:7A:AB:04:63:83:99:03:6C:92:6D:52:4D:9D Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584DE41B629DAB4C27F10E638E40 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 10794 IP address blocks: 171.158.28.0/23 maxlen: 23 171.158.28.0/24 maxlen: 24 171.158.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:62:9d:ab:4c:27:f1:0e:63:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=f46d06e6-3e10-4492-8cc0-515ec845a75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:18:af:1d:52:3e:30:ad:20:c4:35:fa:79: 43:57:7a:ed:99:44:0a:45:61:3b:64:bf:5d:a1:8d: 29:0e:95:35:d6:88:15:ca:fa:95:d2:cf:92:86:ab: 39:ee:e8:4b:3b:d3:47:5f:1f:95:7a:a0:6e:cb:7f: e2:8c:ac:04:ee:86:9d:e7:b9:5f:d8:40:8c:d8:ef: 60:a1:9d:1b:8e:92:29:5d:d5:e3:1b:ac:ec:01:43: 4d:b8:fd:05:4e:5e:5a:ab:a5:99:8a:60:7d:82:7f: 36:f5:d7:a0:85:ff:84:63:5e:d2:ee:09:ea:51:2a: 38:55:cd:93:47:08:7b:1c:90:f7:75:65:bd:3e:67: d5:59:04:1e:80:3d:30:cd:0e:5f:ca:a2:31:ac:80: 79:78:37:62:1e:be:8a:1a:cc:85:51:e4:c4:42:7e: de:6c:2d:45:86:72:d6:2a:82:b3:e0:e8:d5:52:8d: 07:0e:7d:6a:96:2a:c1:47:8f:16:52:62:7f:c1:98: 15:0c:9d:4c:cf:02:10:49:8c:e4:16:7b:ce:e0:cf: 2d:9c:c8:20:ba:f0:70:09:02:68:4d:11:31:57:d0: a3:ca:48:34:d2:4a:b5:4d:f2:00:0d:8b:9b:5d:14: 5e:d5:6d:b0:94:ff:b3:95:d1:dd:96:c0:5f:6c:43: fc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:87:D7:1C:6C:9E:7E:7A:AB:04:63:83:99:03:6C:92:6D:52:4D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/620c8d56-28c5-3811-9ba7-0727e8c6eb95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.158.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d4:e0:86:d6:39:88:16:22:04:f3:60:da:86:01:e3:81:52: b3:bb:24:20:c0:3c:f4:fa:61:a8:f5:b5:f4:d5:e0:a9:57:2c: f4:24:f7:46:e4:23:fa:71:ab:0e:27:44:3f:8e:a7:cf:9f:bf: 58:1d:f6:d6:a2:2b:3b:c1:b3:53:1c:c3:9d:ce:50:cb:f5:da: 3a:9a:da:24:d8:4b:2b:ce:10:5b:02:df:32:a4:4f:3a:35:10: db:44:c6:a3:a4:1a:4b:9c:b9:14:10:3b:71:38:e1:a3:61:19: 9b:47:7d:df:f4:65:dd:9a:37:54:05:53:92:f4:00:5c:85:b2: 2c:b7:a1:ff:d7:5f:31:b4:0c:88:37:d2:22:e1:7d:07:de:e4: b1:a6:a7:f3:53:88:14:91:41:a0:67:8e:20:a4:59:c9:e3:28: 7d:c4:ad:83:4f:fb:f3:6c:48:57:09:a7:41:6c:1e:25:f8:83: 8b:38:b5:5b:63:1d:b6:1f:f1:71:17:cc:82:ce:76:7d:ba:30: 12:b0:79:34:4d:77:7d:4c:ca:f4:72:05:c5:4c:39:7c:a7:77: 35:0d:0f:f0:40:8d:e1:b5:d7:62:ed:3b:ca:c7:f0:36:a0:a3: a0:9a:ee:13:69:40:27:56:5b:0a:53:22:78:05:0f:55:54:b0: 39:ee:f9:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG2Kdq0wn8Q5jjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk ZjQ2ZDA2ZTYtM2UxMC00NDkyLThjYzAtNTE1ZWM4NDVhNzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUwYrx1SPjCtIMQ1+nlDV3rtmUQKRWE7ZL9d oY0pDpU11ogVyvqV0s+Shqs57uhLO9NHXx+VeqBuy3/ijKwE7oad57lf2ECM2O9g oZ0bjpIpXdXjG6zsAUNNuP0FTl5aq6WZimB9gn829deghf+EY17S7gnqUSo4Vc2T Rwh7HJD3dWW9PmfVWQQegD0wzQ5fyqIxrIB5eDdiHr6KGsyFUeTEQn7ebC1FhnLW KoKz4OjVUo0HDn1qlirBR48WUmJ/wZgVDJ1MzwIQSYzkFnvO4M8tnMgguvBwCQJo TRExV9Cjykg00kq1TfIADYubXRRe1W2wlP+zldHdlsBfbEP8/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKH1xxsnn56qwRjg5kDbJJtUk2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNjIwYzhkNTYtMjhjNS0z ODExLTliYTctMDcyN2U4YzZlYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq54cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnU4IbWOYgWIgTzYNqGAeOBUrO7JCDAPPT6Yaj1tfTV4KlXLPQk90bk I/pxqw4nRD+Op8+fv1gd9taiKzvBs1Mcw53OUMv12jqa2iTYSyvOEFsC3zKkTzo1 ENtExqOkGkucuRQQO3E44aNhGZtHfd/0Zd2aN1QFU5L0AFyFsiy3of/XXzG0DIg3 0iLhfQfe5LGmp/NTiBSRQaBnjiCkWcnjKH3ErYNP+/NsSFcJp0FsHiX4g4s4tVtj HbYf8XEXzILOdn26MBKweTRNd31MyvRyBcVMOXyndzUND/BAjeG112LtO8rH8Dag o6Ca7hNpQCdWWwpTIngFD1VUsDnu+VY= -----END CERTIFICATE-----Generated at Thu May 21 18:32:32 2026 by rpki-client