$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa File: 67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa (raw, json) Hash identifier: sP9Mar5OzmjbxYI8+OzOwYSX2er/kXFjqSXCeHQxel8= Subject key identifier: 49:61:9C:CD:BC:1F:9B:63:F7:11:1B:BE:DD:B0:22:C7:2B:06:5F:DC Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584E428F2A365F913446CFF69580 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa Signing time: Mon 22 Jun 2026 21:00:12 +0000 ROA not before: Mon 22 Jun 2026 21:00:12 +0000 ROA not after: Sun 20 Sep 2026 21:00:12 +0000 asID: 3128 IP address blocks: 128.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:8f:2a:36:5f:91:34:46:cf:f6:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Jun 22 21:00:12 2026 GMT Not After : Sep 20 21:00:12 2026 GMT Subject: CN=a4927ff2-8990-4d7a-a956-b8be7c883903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:0a:f7:7b:42:fd:00:28:2b:c4:c0:df:f1: cc:70:85:96:31:e0:d4:58:6d:7e:2a:c9:f8:6c:a9: 6b:98:c3:73:da:69:53:25:67:03:2d:ef:fc:58:4b: 70:14:35:13:c9:76:85:1d:a4:86:06:e6:b2:53:63: 24:b9:0a:0a:82:f7:a4:18:ba:09:42:a9:d2:1d:d2: 24:10:d3:b9:b2:35:47:92:82:11:ae:7b:93:14:9c: fb:6b:e9:32:12:4d:af:17:c6:92:11:0d:84:35:4a: ea:91:0b:95:5d:79:20:a1:49:fd:80:c2:3d:67:6f: 5b:d5:37:1e:e7:a3:89:ce:92:a7:3e:08:14:0f:10: 8e:0f:bc:b8:d9:0c:6e:0b:ff:93:4b:c8:f3:64:83: 0c:57:e5:23:7d:ab:64:7c:1f:c8:89:9e:87:b6:ea: 1d:01:72:40:a6:2d:60:b6:5c:fa:d8:5a:80:d2:16: b6:12:bf:76:a9:23:3e:90:22:4d:55:ee:c9:8e:83: 28:40:62:84:a4:37:4c:bf:34:68:a8:51:b5:50:46: 90:95:5e:83:5f:eb:0e:5c:c0:06:bb:a2:d2:06:84: 5d:7d:dd:a6:33:de:2e:ea:4b:6b:9f:b9:15:ae:e0: d5:5c:fe:aa:7d:0b:da:d8:9e:8a:ab:56:d6:fb:76: dc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:61:9C:CD:BC:1F:9B:63:F7:11:1B:BE:DD:B0:22:C7:2B:06:5F:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 128.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a6:a3:01:b8:5a:24:24:88:d2:29:99:70:7f:01:4f:c9:98: 8f:ae:dc:3b:08:11:33:99:6f:ef:28:2a:16:11:fb:15:16:82: bb:cf:62:6c:5a:0b:22:83:11:4d:49:7f:84:f0:1a:47:95:f7: a5:56:ce:41:f3:aa:b9:f5:28:39:b3:bc:47:03:e3:c1:3e:5e: f4:6d:45:7d:f7:6e:b1:f3:b1:1e:19:d8:0d:4e:98:51:c6:77: 78:7c:97:3a:5c:11:48:ec:d4:36:ac:05:ee:5a:7c:79:ff:86: 8f:41:1a:d1:6f:af:85:e6:eb:f3:49:ba:2d:2e:d8:97:31:dc: 4c:91:4b:e3:88:4c:52:7c:39:10:51:b8:94:21:b4:08:51:0b: dc:00:39:cf:77:7b:8f:4f:0b:a1:e0:9d:90:8f:39:94:66:b8: 04:50:0a:58:b9:dd:be:9c:ac:be:01:34:f7:0e:6f:90:f2:8d: d7:ce:4f:53:40:1d:02:0c:7a:4e:11:9c:eb:a2:18:78:f6:11: 01:b8:3c:4f:d2:66:b3:42:06:52:0a:e0:2c:df:6b:10:e6:8c: 9c:c5:25:b0:b7:2d:e6:fa:fa:50:30:74:e6:a8:c6:9f:0d:9f: c8:4f:fb:4e:2c:02:df:1f:0f:3c:9b:df:f2:29:f6:c7:9c:2c: cf:9c:8c:0e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5Cjyo2X5E0Rs/2lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI2MDYyMjIxMDAxMloXDTI2MDkyMDIxMDAxMlowLzEtMCsGA1UEAxMk YTQ5MjdmZjItODk5MC00ZDdhLWE5NTYtYjhiZTdjODgzOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAAK93tC/QAoK8TA3/HMcIWWMeDUWG1+Ksn4 bKlrmMNz2mlTJWcDLe/8WEtwFDUTyXaFHaSGBuayU2MkuQoKgvekGLoJQqnSHdIk ENO5sjVHkoIRrnuTFJz7a+kyEk2vF8aSEQ2ENUrqkQuVXXkgoUn9gMI9Z29b1Tce 56OJzpKnPggUDxCOD7y42QxuC/+TS8jzZIMMV+UjfatkfB/IiZ6HtuodAXJApi1g tlz62FqA0ha2Er92qSM+kCJNVe7JjoMoQGKEpDdMvzRoqFG1UEaQlV6DX+sOXMAG u6LSBoRdfd2mM94u6ktrn7kVruDVXP6qfQva2J6Kq1bW+3bc7wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFElhnM28H5tj9xEbvt2wIscrBl/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvNjdjZDI4ZDItZGY0ZC0z YjBkLTkxOTgtNzBjMmE3MDRmZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgGgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAj6ajAbhaJCSI0imZcH8BT8mYj67cOwgRM5lv7ygqFhH7FRaCu89ibFoL IoMRTUl/hPAaR5X3pVbOQfOqufUoObO8RwPjwT5e9G1FffdusfOxHhnYDU6YUcZ3 eHyXOlwRSOzUNqwF7lp8ef+Gj0Ea0W+vhebr80m6LS7YlzHcTJFL44hMUnw5EFG4 lCG0CFEL3AA5z3d7j08LoeCdkI85lGa4BFAKWLndvpysvgE09w5vkPKN185PU0Ad Agx6ThGc66IYePYRAbg8T9Jms0IGUgrgLN9rEOaMnMUlsLct5vr6UDB05qjGnw2f yE/7TiwC3x8PPJvf8in2x5wsz5yMDg== -----END CERTIFICATE-----Generated at Wed Jun 24 09:28:02 2026 by rpki-client