$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa File: 825702a4-e267-3fed-801c-e21c3ef74911.roa (raw, json) Hash identifier: Yq7jIt7iK7GYXkXfIXduwRF9C9Fik21crB60bRY+Wcw= Subject key identifier: 4F:21:10:92:01:B9:3E:AF:F0:A2:1F:DF:10:15:E9:D0:29:D3:FE:5E Certificate issuer: /CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Certificate serial: 010D0C9F4328584E4129D0ADA57BE1075665B6C0 Authority key identifier: 85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 53594 IP address blocks: 198.200.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:d0:ad:a5:7b:e1:07:56:65:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=696c13c4-9f29-4e22-953a-35c50370897f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:84:15:06:17:79:da:e9:19:b3:b2:c7:23: ad:7b:70:c2:72:bb:31:b7:29:f0:e4:42:50:90:c8: 5a:e5:00:4d:d2:9a:37:44:3b:6c:71:a4:6d:c1:e9: 44:38:d3:93:d8:26:01:b9:ab:6a:9c:d5:f3:54:0d: a6:bc:f7:63:8b:9e:12:98:6d:2f:d9:0f:2c:0d:24: e5:65:a5:6b:d6:7f:3f:fd:1f:72:24:ba:c9:42:1d: a8:34:6c:ea:3c:25:c4:7c:46:c6:38:af:9a:51:93: a6:5a:0c:05:8a:13:95:35:a3:38:91:6c:0e:47:43: 72:42:d2:4f:fe:f0:36:cd:b1:c0:b3:7a:13:80:04: 63:be:50:bc:39:46:4b:fd:54:a2:4f:56:3b:35:44: 70:d3:33:f2:fe:82:bb:7a:8b:58:f8:a6:ce:2f:62: 80:60:9d:55:bd:3c:77:76:8f:96:f2:c1:8c:c7:a6: 4e:3b:47:9d:59:a6:c5:1d:41:4a:dc:e2:19:97:54: b0:73:77:44:36:6c:bf:9b:e9:cc:8a:4d:63:2c:ee: 88:7d:c0:5f:41:11:43:2d:fb:82:c2:6b:15:e8:4e: f4:66:78:ad:24:9b:a3:00:3e:fe:44:31:f8:f6:a7: a6:c4:48:88:10:9c:f6:84:8b:d0:f1:9b:7c:70:40: 61:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:21:10:92:01:B9:3E:AF:F0:A2:1F:DF:10:15:E9:D0:29:D3:FE:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl X509v3 Authority Key Identifier: keyid:85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer sbgp-ipAddrBlock: critical IPv4: 198.200.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7e:89:80:04:fd:82:51:2d:22:df:a1:a8:ca:39:f8:ce:a3: 0d:52:df:cc:a7:08:66:8b:94:cb:c8:d9:64:e9:29:26:7c:9e: c3:13:e7:75:b8:ea:67:05:61:0b:8d:d1:60:61:af:8f:d6:ee: f2:46:d9:60:4f:0a:00:54:64:a5:5b:c5:05:98:d2:25:55:7f: 63:fa:64:75:6c:3d:d5:7a:15:99:70:2b:d6:d6:b3:70:3b:7d: b2:86:53:62:f1:94:2b:65:61:b2:9c:5c:5a:3b:20:d1:7f:6b: 35:68:38:dc:b6:e9:25:c7:e6:ad:2a:6a:e3:aa:de:fe:00:31: 22:7c:5f:4f:7d:69:8d:89:51:a2:37:92:53:b6:60:d5:77:fe: c7:d6:cc:22:86:6b:b9:d2:45:76:96:9d:19:4f:3a:ec:80:8f: d7:72:55:68:f3:8e:b2:a5:5c:4c:7e:bb:93:92:08:7d:35:2b: b2:e4:77:b9:10:03:06:e9:ad:77:5a:ab:b9:71:7a:73:63:e0: a3:5d:b6:f2:35:f1:9b:aa:9f:c2:b8:51:5a:d5:bc:c0:52:38: 49:d1:05:0b:19:04:4d:85:21:71:79:e3:dc:75:49:4b:4d:01: 25:f3:23:59:ba:fc:c5:a3:b7:8c:58:63:19:eb:28:54:ac:63: 41:bb:6e:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdCtpXvhB1ZltsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0NTZhNzMtMDMyZC00Njc1LThmMGEtMmRiN2IxZTU4 MTY4MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk Njk2YzEzYzQtOWYyOS00ZTIyLTk1M2EtMzVjNTAzNzA4OTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24eEFQYXedrpGbOyxyOte3DCcrsxtynw5EJQ kMha5QBN0po3RDtscaRtwelEONOT2CYBuatqnNXzVA2mvPdji54SmG0v2Q8sDSTl ZaVr1n8//R9yJLrJQh2oNGzqPCXEfEbGOK+aUZOmWgwFihOVNaM4kWwOR0NyQtJP /vA2zbHAs3oTgARjvlC8OUZL/VSiT1Y7NURw0zPy/oK7eotY+KbOL2KAYJ1VvTx3 do+W8sGMx6ZOO0edWabFHUFK3OIZl1Swc3dENmy/m+nMik1jLO6IfcBfQRFDLfuC wmsV6E70ZnitJJujAD7+RDH49qemxEiIEJz2hIvQ8Zt8cEBhbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8hEJIBuT6v8KIf3xAV6dAp0/5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1 NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3YjFlNTgxNjgvODI1NzAyYTQtZTI2Ny0z ZmVkLTgwMWMtZTIxYzNlZjc0OTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWE0NTZhNzMtMDMyZC00Njc1LThm MGEtMmRiN2IxZTU4MTY4LzVhNDU2YTczLTAzMmQtNDY3NS04ZjBhLTJkYjdiMWU1 ODE2OC5jcmwwHwYDVR0jBBgwFoAUhZ809TW+1VPdwe+7fz1JekZVV8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3 YjFlNTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxsgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl+iYAE/YJRLSLfoajKOfjOow1S38ynCGaLlMvI2WTpKSZ8nsMT53W4 6mcFYQuN0WBhr4/W7vJG2WBPCgBUZKVbxQWY0iVVf2P6ZHVsPdV6FZlwK9bWs3A7 fbKGU2LxlCtlYbKcXFo7INF/azVoONy26SXH5q0qauOq3v4AMSJ8X099aY2JUaI3 klO2YNV3/sfWzCKGa7nSRXaWnRlPOuyAj9dyVWjzjrKlXEx+u5OSCH01K7Lkd7kQ AwbprXdaq7lxenNj4KNdtvI18Zuqn8K4UVrVvMBSOEnRBQsZBE2FIXF549x1SUtN ASXzI1m6/MWjt4xYYxnrKFSsY0G7bs0= -----END CERTIFICATE-----Generated at Wed Jul 8 15:52:00 2026 by rpki-client