$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa File: cf38211e-a9ed-37ec-9041-432fd370bc59.roa (raw, json) Hash identifier: 1ywfju+aETYkLEftOYQRx78bXsj2uga+HvlT53JusGI= Subject key identifier: 5A:52:92:4E:A9:62:D7:FE:B8:B2:CE:76:D5:26:C6:32:D6:2A:A3:00 Certificate issuer: /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Certificate serial: 010D0C9F4328584E0005DEE75F5F9C51718055C0 Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 398653 IP address blocks: 198.62.160.0/24 maxlen: 24 2602:fbd3::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:de:e7:5f:5f:9c:51:71:80:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=184dfc6d-d1f6-45d0-8d96-d87d5ddf921a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:c5:9d:cf:50:e1:45:8a:22:aa:42:82:7f: 43:5e:ad:df:62:af:ca:f9:f7:55:7e:2b:b0:73:be: 1a:fe:8b:91:5d:eb:4f:a5:17:91:88:ec:9d:e7:01: ed:46:17:70:cc:5f:44:e5:ad:7c:93:46:46:76:8c: 7d:81:21:ab:96:3e:73:d1:f4:c2:8d:30:95:39:66: 3e:72:c7:41:88:dc:98:88:cf:ee:e5:c9:b7:ab:1a: 17:a7:f9:49:55:9e:a3:62:f2:6d:f0:90:8c:c6:9d: 99:43:c0:19:00:1f:fa:e9:72:87:52:f1:d0:79:25: b3:03:cd:41:d3:5c:f5:56:11:00:b9:8a:42:19:2b: 07:43:7b:ea:36:a7:cf:08:d6:b3:da:05:ad:dc:18: 4d:71:57:6f:77:52:ce:25:92:70:67:c2:13:3e:ef: 44:31:6a:99:a6:91:c1:19:bd:b2:7d:bf:49:5f:db: ad:f7:ce:14:14:94:a3:5e:c6:d5:e6:03:90:80:51: fb:d5:09:e2:aa:5a:80:4f:0b:e2:6f:3b:75:4f:1d: fa:f4:4e:bb:bc:f4:de:b0:6a:92:48:79:e0:57:31: 7c:b1:32:ab:a6:19:27:c3:e9:c6:46:22:04:19:83: 8e:ac:bc:84:48:e1:1d:52:d3:fd:15:38:b0:0f:9b: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:52:92:4E:A9:62:D7:FE:B8:B2:CE:76:D5:26:C6:32:D6:2A:A3:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl X509v3 Authority Key Identifier: keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer sbgp-ipAddrBlock: critical IPv4: 198.62.160.0/24 IPv6: 2602:fbd3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:db:80:20:04:8e:b3:01:03:f2:59:4d:68:98:75:da:32:47: 6e:77:0a:11:11:e3:0f:f6:da:2b:cc:43:a7:8f:a2:e1:17:06: 18:65:b2:3c:79:d3:c8:57:f2:af:a6:ba:b7:1b:69:06:84:47: 0e:a5:76:36:93:36:34:63:b9:a3:d1:ab:6f:f8:8d:f0:22:8c: 91:73:68:60:cf:8c:31:25:9c:0e:dd:bc:14:0e:5d:6f:ec:49: bc:72:c6:79:53:6a:66:89:57:29:60:a9:2a:8a:2f:41:d1:79: 0d:7d:b3:de:b4:5d:e8:7d:1a:cc:1b:c6:36:85:67:85:b0:d0: 20:e5:3a:10:de:a4:1f:1d:6d:97:69:5f:94:c1:69:bf:9a:43: d5:11:70:88:21:92:ce:a7:41:2d:23:c2:e6:81:bb:01:a3:59: c4:3c:0e:fd:74:0a:eb:60:a7:fe:35:69:a1:ed:61:25:d7:c0: c2:6b:9d:29:30:b5:da:a2:48:7f:59:d5:54:78:df:a2:4e:d4: 29:55:c5:b2:14:82:64:43:e2:1f:51:75:55:42:38:f3:9b:69: f5:1e:a6:d6:00:d9:96:eb:13:bb:17:06:d2:41:e2:76:b9:94: dc:43:56:28:25:c4:a1:f3:5f:2a:fc:51:6a:cf:c0:8e:7d:30: a6:b4:e9:c3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4ABd7nX1+cUXGAVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRiZmI5ZTgtMWJhZS00NTQwLTljYWUtYjY4MTFlY2Fk ZmY1MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk MTg0ZGZjNmQtZDFmNi00NWQwLThkOTYtZDg3ZDVkZGY5MjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjvFnc9Q4UWKIqpCgn9DXq3fYq/K+fdVfiuw c74a/ouRXetPpReRiOyd5wHtRhdwzF9E5a18k0ZGdox9gSGrlj5z0fTCjTCVOWY+ csdBiNyYiM/u5cm3qxoXp/lJVZ6jYvJt8JCMxp2ZQ8AZAB/66XKHUvHQeSWzA81B 01z1VhEAuYpCGSsHQ3vqNqfPCNaz2gWt3BhNcVdvd1LOJZJwZ8ITPu9EMWqZppHB Gb2yfb9JX9ut984UFJSjXsbV5gOQgFH71QniqlqATwvibzt1Tx369E67vPTesGqS SHngVzF8sTKrphknw+nGRiIEGYOOrLyESOEdUtP9FTiwD5sCBwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFpSkk6pYtf+uLLOdtUmxjLWKqMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84NGJm YjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgxMWVjYWRmZjUvY2YzODIxMWUtYTllZC0z N2VjLTkwNDEtNDMyZmQzNzBiYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODRiZmI5ZTgtMWJhZS00NTQwLTlj YWUtYjY4MTFlY2FkZmY1Lzg0YmZiOWU4LTFiYWUtNDU0MC05Y2FlLWI2ODExZWNh ZGZmNS5jcmwwHwYDVR0jBBgwFoAUM4c53xys+Hm76OldhG+EVoMspWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84NGJmYjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgx MWVjYWRmZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxj6gMA4E AgACMAgDBgAmAvvTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBo24AgBI6zAQPyWU1omHXaMkdudwoREeMP 9torzEOnj6LhFwYYZbI8edPIV/Kvprq3G2kGhEcOpXY2kzY0Y7mj0atv+I3wIoyR c2hgz4wxJZwO3bwUDl1v7Em8csZ5U2pmiVcpYKkqii9B0XkNfbPetF3ofRrMG8Y2 hWeFsNAg5ToQ3qQfHW2XaV+UwWm/mkPVEXCIIZLOp0EtI8LmgbsBo1nEPA79dArr YKf+NWmh7WEl18DCa50pMLXaokh/WdVUeN+iTtQpVcWyFIJkQ+IfUXVVQjjzm2n1 HqbWANmW6xO7FwbSQeJ2uZTcQ1YoJcSh818q/FFqz8COfTCmtOnD -----END CERTIFICATE-----Generated at Thu Jun 11 17:07:03 2026 by rpki-client