$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa File: d8561cc0-42de-398c-82a6-2cae487ec735.roa (raw, json) Hash identifier: ah8i+GvQHg/Po0mW5Eq9PtXDQiaWLfJpusAdAzrtNjg= Subject key identifier: 66:8A:1E:BD:8E:85:C7:66:BE:F1:C7:6F:71:7E:C1:F4:E5:39:CD:22 Certificate issuer: /CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Certificate serial: 010D0C9F4328584E31CF091F2FD58BC0F58EABC0 Authority key identifier: BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 18863 IP address blocks: 64.28.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:09:1f:2f:d5:8b:c0:f5:8e:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=cba8b274-6b00-481c-8c69-92d384827112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fa:f5:c2:78:7d:08:83:99:eb:92:84:70:c6: e6:24:fa:d0:21:54:73:5e:48:b1:e3:f5:8f:27:da: b3:f7:a6:e6:16:41:c8:44:5b:f2:b2:1a:22:4b:b1: 37:df:d7:93:48:32:0a:f4:8d:81:e6:5d:85:4d:2d: 5d:6b:85:47:08:e2:13:de:1f:96:6f:ea:bb:e6:44: 28:c2:60:49:c0:01:87:e1:16:e4:a4:71:a6:48:a5: 6d:4f:9d:f8:91:a4:93:87:dc:5a:1c:87:5c:d5:48: e1:77:8b:bd:7c:7e:a5:23:5d:9c:05:23:e4:b7:7a: ad:4e:57:23:4f:30:e6:4a:71:c6:9d:ef:7b:b4:45: 09:75:c4:b9:a9:ac:e0:6d:b7:c4:4e:99:1c:9f:f4: 8d:b8:90:97:26:2a:ed:33:01:bf:b2:be:a4:c7:80: 98:39:d6:c8:02:7c:28:d7:2d:f2:ff:c6:d4:c4:5f: c4:c9:18:a5:3c:cc:ea:4e:80:7b:47:d2:07:18:de: e8:4d:49:b0:f0:59:e8:b4:f1:91:dd:bc:70:f6:7f: 6b:d5:35:d9:68:8e:2c:34:cf:ee:f9:91:68:5a:81: 8f:91:5d:c3:ef:49:11:c5:55:ec:fb:a2:9f:58:b3: 95:2d:53:4a:19:96:a7:a8:3f:58:ff:a9:5f:6c:a5: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8A:1E:BD:8E:85:C7:66:BE:F1:C7:6F:71:7E:C1:F4:E5:39:CD:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl X509v3 Authority Key Identifier: keyid:BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer sbgp-ipAddrBlock: critical IPv4: 64.28.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:99:a7:18:a4:1e:ad:72:11:eb:dd:f8:53:6f:a3:23:6b:8b: dd:2e:63:0c:11:e4:71:e5:1b:e1:f2:0c:22:cc:90:5e:72:2d: 46:2e:0b:d8:32:bd:a4:0a:ab:63:75:e6:2b:f6:cb:4f:39:96: f9:d3:ab:b7:d5:84:88:b5:7c:1a:35:dc:ea:6d:5c:33:e8:74: 07:72:f5:98:8b:76:a5:41:e7:a7:b0:a6:1b:2d:dc:4d:b1:df: 1b:ee:fa:12:58:4b:7c:1b:92:e7:5a:a8:5f:0c:18:d6:a5:e4: d9:37:2a:51:6f:56:7f:10:53:bd:ba:cc:53:9c:1c:22:42:60: 1e:ea:d1:17:52:b5:60:87:5f:bc:76:f2:fc:8e:e5:a6:f4:ee: ce:76:b1:9c:4e:68:e0:f3:a0:65:28:4d:27:7f:84:21:3c:1e: 74:2f:84:db:10:53:e1:97:87:54:c1:6f:33:d2:93:50:f2:69: 3b:c3:93:d8:a7:e5:63:60:5c:d8:9f:0a:31:4a:0f:9d:42:64: 84:05:4b:fc:97:25:57:eb:2e:53:f3:81:1f:37:b8:0e:ce:23: 16:b7:54:38:79:8f:42:62:7d:93:ff:3e:f9:5b:1d:f4:1a:77: ef:40:8d:d3:63:7c:ca:87:52:c8:4a:83:e8:81:41:08:3f:07: 98:0d:58:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzwkfL9WLwPWOq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI2ODNhMTYtZTljNC00ODlhLWE1ZTktM2JiMWI0MDFm MTkwMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk Y2JhOGIyNzQtNmIwMC00ODFjLThjNjktOTJkMzg0ODI3MTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPr1wnh9CIOZ65KEcMbmJPrQIVRzXkix4/WP J9qz96bmFkHIRFvyshoiS7E339eTSDIK9I2B5l2FTS1da4VHCOIT3h+Wb+q75kQo wmBJwAGH4RbkpHGmSKVtT534kaSTh9xaHIdc1Ujhd4u9fH6lI12cBSPkt3qtTlcj TzDmSnHGne97tEUJdcS5qazgbbfETpkcn/SNuJCXJirtMwG/sr6kx4CYOdbIAnwo 1y3y/8bUxF/EyRilPMzqToB7R9IHGN7oTUmw8FnotPGR3bxw9n9r1TXZaI4sNM/u +ZFoWoGPkV3D70kRxVXs+6KfWLOVLVNKGZanqD9Y/6lfbKWFRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaKHr2OhcdmvvHHb3F+wfTlOc0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4 M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIxYjQwMWYxOTAvZDg1NjFjYzAtNDJkZS0z OThjLTgyYTYtMmNhZTQ4N2VjNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWI2ODNhMTYtZTljNC00ODlhLWE1 ZTktM2JiMWI0MDFmMTkwLzFiNjgzYTE2LWU5YzQtNDg5YS1hNWU5LTNiYjFiNDAx ZjE5MC5jcmwwHwYDVR0jBBgwFoAUupsdKD3J+C8QFwwOpRR5BRY1TZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIx YjQwMWYxOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+ZpxikHq1yEevd+FNvoyNri90uYwwR5HHlG+HyDCLMkF5yLUYuC9gy vaQKq2N15iv2y085lvnTq7fVhIi1fBo13OptXDPodAdy9ZiLdqVB56ewphst3E2x 3xvu+hJYS3wbkudaqF8MGNal5Nk3KlFvVn8QU726zFOcHCJCYB7q0RdStWCHX7x2 8vyO5ab07s52sZxOaODzoGUoTSd/hCE8HnQvhNsQU+GXh1TBbzPSk1DyaTvDk9in 5WNgXNifCjFKD51CZIQFS/yXJVfrLlPzgR83uA7OIxa3VDh5j0JifZP/PvlbHfQa d+9AjdNjfMqHUshKg+iBQQg/B5gNWL0= -----END CERTIFICATE-----Generated at Wed Jul 8 15:49:10 2026 by rpki-client