$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa File: cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa (raw, json) Hash identifier: br//AwoLfjHPl1GPpplbprVtRr/7M6hJECHg0VYA25I= Subject key identifier: 4E:1D:EA:85:04:F3:7E:6F:07:A7:85:DA:1C:D5:DD:9E:49:89:B9:EB Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E3A2F1A03B35031D81F736700 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 1280 IP address blocks: 204.152.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:1a:03:b3:50:31:d8:1f:73:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=9955feb3-79af-4c01-ab56-a53baf7863fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:50:b6:a3:3d:3b:4b:55:26:59:bc:61:de: 28:1d:db:af:74:cb:06:a1:c1:63:20:01:83:13:ac: 2f:b0:b1:c7:fd:94:18:1d:ae:b4:99:79:9c:3d:66: 59:7a:5a:91:33:a3:0a:17:e2:4a:91:05:11:8a:86: b2:dd:d3:2d:f4:fc:2c:1c:f9:d1:94:ac:d8:1f:ee: ef:5a:d2:a6:8f:d2:9f:3f:83:63:07:22:b5:49:15: 8f:ca:6b:22:3d:8a:0c:10:46:ba:a9:79:16:93:79: ec:d3:23:18:49:65:e4:76:31:a8:78:b1:7b:0b:92: 79:cf:ea:37:3f:89:37:f1:00:32:99:ec:95:aa:48: de:13:24:3b:21:a7:b4:de:87:07:36:9c:36:9b:f5: 6d:be:cc:8e:b6:db:d1:18:e4:80:7e:90:f0:3f:c5: d6:d3:43:e5:12:58:5d:86:2d:67:56:df:23:0c:b2: 18:ba:df:e4:68:17:12:09:9f:0b:e3:5f:ba:7a:af: 1a:a6:01:99:8c:d7:d9:b4:24:3a:6e:33:0f:52:79: 93:71:2c:c9:43:06:c9:d9:77:17:7a:44:75:77:f9: 0f:d6:3d:a9:33:a4:4c:d5:81:31:4c:cf:7b:6c:e1: ad:36:4f:c5:2e:fe:48:74:2d:72:e8:3c:f4:82:bd: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1D:EA:85:04:F3:7E:6F:07:A7:85:DA:1C:D5:DD:9E:49:89:B9:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:00:d1:49:6a:ad:b4:ae:37:7a:bb:4b:be:de:5d:e4:19:1a: 0b:aa:bb:c2:06:13:dd:36:aa:74:2c:4f:15:2c:99:9a:0d:c0: 59:ff:fc:6e:92:7c:69:d6:fa:67:16:6e:4f:05:60:b5:9e:28: 7e:28:86:65:d0:ae:ff:af:4c:5a:84:23:4a:c2:f1:1d:70:fc: ac:67:3c:2f:f2:68:0b:73:d3:3c:83:be:89:93:b2:87:f8:3f: 72:ef:c4:9f:72:5d:18:7b:96:45:f6:58:e1:6c:6a:c3:de:3a: a4:94:f9:87:08:bc:62:f6:14:ec:ac:4d:e7:66:cc:91:9c:50: 62:d1:4c:66:8f:8f:ef:2f:1e:4d:7f:cf:27:d4:e1:9b:e8:d6: 70:18:40:ea:ce:23:e0:13:df:db:7a:5d:08:d8:7d:b7:b6:79: 98:a8:01:7a:c4:fc:bb:9a:c2:9b:c9:b9:0b:96:b3:46:5b:62: b8:a0:7a:27:0d:6e:74:ca:07:87:67:cd:e6:9f:1d:de:99:8e: 87:5f:eb:57:55:8b:c5:7b:65:ce:a0:ca:cf:f6:ae:68:b0:16: 16:ca:b2:f8:50:19:d4:e9:fd:20:6a:8b:62:07:db:11:61:3e: 55:b3:ca:5b:01:99:92:eb:3c:eb:6f:f8:12:74:71:3c:40:ff: 92:e7:bb:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LxoDs1Ax2B9zZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk OTk1NWZlYjMtNzlhZi00YzAxLWFiNTYtYTUzYmFmNzg2M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYdQtqM9O0tVJlm8Yd4oHduvdMsGocFjIAGD E6wvsLHH/ZQYHa60mXmcPWZZelqRM6MKF+JKkQURioay3dMt9PwsHPnRlKzYH+7v WtKmj9KfP4NjByK1SRWPymsiPYoMEEa6qXkWk3ns0yMYSWXkdjGoeLF7C5J5z+o3 P4k38QAymeyVqkjeEyQ7Iae03ocHNpw2m/VtvsyOttvRGOSAfpDwP8XW00PlElhd hi1nVt8jDLIYut/kaBcSCZ8L41+6eq8apgGZjNfZtCQ6bjMPUnmTcSzJQwbJ2XcX ekR1d/kP1j2pM6RM1YExTM97bOGtNk/FLv5IdC1y6Dz0gr3V9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4d6oUE835vB6eF2hzV3Z5JibnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvY2ZlYTMyZjQtZDU5MS0z YTM3LTljMjItNGZlYjZmYTRhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0A0UlqrbSuN3q7S77eXeQZGguqu8IGE902qnQsTxUsmZoNwFn//G6S fGnW+mcWbk8FYLWeKH4ohmXQrv+vTFqEI0rC8R1w/KxnPC/yaAtz0zyDvomTsof4 P3LvxJ9yXRh7lkX2WOFsasPeOqSU+YcIvGL2FOysTedmzJGcUGLRTGaPj+8vHk1/ zyfU4Zvo1nAYQOrOI+AT39t6XQjYfbe2eZioAXrE/LuawpvJuQuWs0ZbYrigeicN bnTKB4dnzeafHd6Zjodf61dVi8V7Zc6gys/2rmiwFhbKsvhQGdTp/SBqi2IH2xFh PlWzylsBmZLrPOtv+BJ0cTxA/5LnuxU= -----END CERTIFICATE-----Generated at Wed Jul 1 09:29:03 2026 by rpki-client