$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa File: 8f41887f-e02f-3b1f-9011-a36a71b35c82.roa (raw, json) Hash identifier: D6L3alzDQkLE5wgxluueLDGdYpQkPlbyUpy/JXki9EQ= Subject key identifier: 1B:13:10:41:3E:EE:56:01:29:69:4D:DF:38:B1:C0:4C:DD:2D:24:4E Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584E4129CBF0F4B2624DFAAFC7E0 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 58580 IP address blocks: 199.101.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:cb:f0:f4:b2:62:4d:fa:af:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=fd28c7d4-34ec-46b4-b124-b0aa255e2d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:a9:5d:61:45:71:a0:93:85:07:23:42:2e: 9f:a5:94:d4:cd:ca:e3:69:70:e9:8f:a5:30:da:85: d5:98:f6:20:dd:ae:79:c1:5c:1a:e7:ec:6c:35:d9: e2:bb:72:f6:58:fa:8e:4d:e0:1e:bd:9a:ea:f4:c9: bf:71:6a:ee:8c:2c:21:ff:9a:b7:e5:b1:0e:f3:9e: 68:8d:bd:5d:01:1f:e7:24:da:2d:dc:78:7e:6f:80: b2:51:3c:7f:f5:fc:71:37:5a:4c:d9:7c:65:4f:df: be:16:2f:83:b0:15:cb:2d:7c:f4:d8:df:a0:8f:33: 01:d3:9f:be:f0:29:62:44:e5:de:a9:66:4e:b5:b5: 43:f1:da:d2:57:50:20:4d:cb:86:c0:7b:0b:d9:cc: 1b:92:32:ab:95:5d:f3:79:1e:84:51:6c:ba:91:da: f0:30:73:4c:d3:b7:44:99:0f:01:12:c0:dc:83:0b: 07:4b:43:09:7f:e1:6e:61:43:11:b8:19:82:36:89: f7:ab:65:f8:fc:91:bb:14:06:e8:0d:a0:ed:10:4c: ab:98:03:6d:69:45:70:4b:e1:65:9d:8d:94:6f:07: db:e6:31:da:5d:75:e2:95:8d:0e:61:00:e1:ad:8b: 35:40:89:06:82:7d:43:67:03:fa:e2:f4:ed:5a:0d: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:13:10:41:3E:EE:56:01:29:69:4D:DF:38:B1:C0:4C:DD:2D:24:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:52:3d:41:65:69:a4:c7:00:75:97:22:da:fb:de:75:ea:d9: 8b:05:8a:c1:54:b4:d2:dc:2c:53:8d:8a:2e:c6:06:99:3f:41: 80:56:91:54:9f:e8:11:66:50:8c:a9:04:73:b0:48:e8:f3:69: 5d:c8:05:4b:2e:dc:ad:98:48:28:64:4c:df:e2:2b:7e:82:63: 40:d5:62:e6:54:3f:6d:0e:4e:66:60:bc:7b:af:7a:b9:e9:97: 1e:98:8c:20:55:f8:0b:2e:91:f7:72:1f:5a:a5:87:b3:a7:da: 48:f7:d4:78:00:bd:af:8c:1d:89:da:ff:71:5a:48:69:ae:10: 0b:86:8d:f4:d7:96:a7:23:4f:7c:68:30:1a:0d:df:09:da:04: f1:1a:eb:a0:f6:36:8e:32:b0:d6:e2:e3:ac:e4:f5:7b:db:fa: 07:f0:33:a5:c4:b5:49:27:a0:0b:63:44:9f:dd:89:b2:94:21: 6c:e5:7a:20:bd:a5:34:7e:66:13:ae:9b:cd:0a:2c:41:b9:27: 0f:71:81:e5:47:24:36:60:f5:7a:aa:49:f9:b0:63:90:89:51: 0d:80:1c:06:cf:ec:2b:a0:0c:db:26:f9:c2:d4:9a:e7:1c:1a: d2:6b:48:5f:7b:d2:da:f3:cc:88:8f:a6:e6:52:2a:31:03:27: b1:ab:20:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKcvw9LJiTfqvx+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZmQyOGM3ZDQtMzRlYy00NmI0LWIxMjQtYjBhYTI1NWUyZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVipXWFFcaCThQcjQi6fpZTUzcrjaXDpj6Uw 2oXVmPYg3a55wVwa5+xsNdniu3L2WPqOTeAevZrq9Mm/cWrujCwh/5q35bEO855o jb1dAR/nJNot3Hh+b4CyUTx/9fxxN1pM2XxlT9++Fi+DsBXLLXz02N+gjzMB05++ 8CliROXeqWZOtbVD8drSV1AgTcuGwHsL2cwbkjKrlV3zeR6EUWy6kdrwMHNM07dE mQ8BEsDcgwsHS0MJf+FuYUMRuBmCNon3q2X4/JG7FAboDaDtEEyrmANtaUVwS+Fl nY2Ubwfb5jHaXXXilY0OYQDhrYs1QIkGgn1DZwP64vTtWg1PXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsTEEE+7lYBKWlN3zixwEzdLSROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvOGY0MTg4N2YtZTAyZi0z YjFmLTkwMTEtYTM2YTcxYjM1YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZSPUFlaaTHAHWXItr73nXq2YsFisFUtNLcLFONii7GBpk/QYBWkVSf 6BFmUIypBHOwSOjzaV3IBUsu3K2YSChkTN/iK36CY0DVYuZUP20OTmZgvHuvernp lx6YjCBV+AsukfdyH1qlh7On2kj31HgAva+MHYna/3FaSGmuEAuGjfTXlqcjT3xo MBoN3wnaBPEa66D2No4ysNbi46zk9Xvb+gfwM6XEtUknoAtjRJ/dibKUIWzleiC9 pTR+ZhOum80KLEG5Jw9xgeVHJDZg9XqqSfmwY5CJUQ2AHAbP7CugDNsm+cLUmucc GtJrSF970trzzIiPpuZSKjEDJ7GrIBo= -----END CERTIFICATE-----Generated at Wed Jun 24 16:05:45 2026 by rpki-client