$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/3311b045-820d-3d18-8dff-c3037c633202.roa File: 3311b045-820d-3d18-8dff-c3037c633202.roa (raw, json) Hash identifier: 7ISGNq2b6SQ32pjPdEZypisePBYrY2VLUVPIQvSNg4c= Subject key identifier: 55:B3:56:44:E2:06:DB:AB:53:57:90:D9:4D:67:B4:8D:C1:D3:66:87 Certificate issuer: /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Certificate serial: 010D0C9F4328584DE150836BF281E97FC3D77200 Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/3311b045-820d-3d18-8dff-c3037c633202.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 393981 IP address blocks: 204.239.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:83:6b:f2:81:e9:7f:c3:d7:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=6fcc0973-53df-4879-bf32-65b286ec7380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:77:69:3f:ea:07:f7:96:cd:5d:0d:29:f2:f9: 0a:61:e8:e1:cd:d6:86:10:c0:54:f0:6a:e4:5a:26: 2c:b2:de:ce:3f:59:dc:30:d8:51:05:2b:14:0a:43: e8:44:93:4f:bf:71:81:47:b9:e7:0f:d6:a0:b6:a8: 42:0e:ab:60:f0:c9:5f:f7:ab:9f:76:77:27:16:ca: bb:bc:42:7b:09:e1:43:1a:bb:20:b7:8a:a1:6f:cc: bb:07:f3:34:9b:e4:8c:b4:7b:8b:6b:64:5c:06:17: f1:1b:bf:6b:8d:da:f3:f8:9f:b1:d0:89:7e:a1:f8: 0d:b8:64:7a:eb:f5:07:69:0d:16:4a:3e:85:e1:70: 9b:76:20:28:51:57:31:e8:30:66:44:0a:ce:d2:a0: 03:38:32:1f:68:35:3d:80:c5:2f:36:33:75:cb:c5: cf:98:11:b1:13:de:88:21:ed:0b:dd:45:62:9b:5f: a4:ed:d6:01:dc:55:b2:29:c2:f2:6f:a6:af:f3:03: 11:d0:61:af:2d:46:83:63:5e:b3:b5:90:57:06:f5: 3a:72:2e:4b:0b:be:81:59:be:d5:cf:5b:cb:a9:66: d3:07:df:f3:af:2a:a0:ba:6a:16:ff:ea:82:c7:b0: a0:dd:09:12:d4:8e:d2:7e:32:27:7f:2b:f9:54:8e: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B3:56:44:E2:06:DB:AB:53:57:90:D9:4D:67:B4:8D:C1:D3:66:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/3311b045-820d-3d18-8dff-c3037c633202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl X509v3 Authority Key Identifier: keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer sbgp-ipAddrBlock: critical IPv4: 204.239.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2f:67:be:37:bb:66:d7:04:b7:3e:a3:63:11:f9:24:3a:b7: c8:34:e2:a1:96:19:3d:5e:31:f0:72:7f:8c:51:5e:df:54:6f: 48:76:93:b7:e9:6e:75:a5:2e:b1:b6:a2:0a:0b:3b:75:ba:86: 96:a4:c3:ed:bc:88:12:74:bb:ed:15:62:2c:90:2e:c0:3f:60: fd:ec:0e:1d:ee:d4:dd:4e:39:68:b2:91:32:22:bb:0b:13:27: 24:da:09:88:87:4a:47:05:74:6a:d8:ab:4f:51:b7:a4:43:20: cf:a2:3d:19:b2:21:2f:dd:10:cf:3a:04:f1:b4:79:ff:20:1d: d7:d8:23:f8:48:c6:a0:95:42:b4:70:15:4b:ef:da:8b:ae:8b: 14:8a:02:f1:56:86:3c:c1:0b:e3:7b:28:ce:f0:2c:5c:c1:ed: 3b:80:b5:dd:74:99:29:d6:74:48:e6:bf:95:b0:de:91:bb:84: db:de:1f:a2:ef:17:79:6b:53:54:ca:7c:4f:30:5d:a8:11:a4: 9c:0b:59:4f:1c:5a:04:fd:71:73:7c:54:66:32:f3:64:eb:14: fd:2b:a5:71:76:8a:e2:14:53:65:d1:fc:11:43:75:39:18:06: 3d:04:af:49:dc:86:89:25:e4:3f:80:85:d0:c8:d9:b7:c4:c5: f4:5e:ab:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUINr8oHpf8PXcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQxMGFjNjctZDhmZi00ZTJlLTkyZTktOTliOGFhMjcx OGVmMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk NmZjYzA5NzMtNTNkZi00ODc5LWJmMzItNjViMjg2ZWM3MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXdpP+oH95bNXQ0p8vkKYejhzdaGEMBU8Grk WiYsst7OP1ncMNhRBSsUCkPoRJNPv3GBR7nnD9agtqhCDqtg8Mlf96ufdncnFsq7 vEJ7CeFDGrsgt4qhb8y7B/M0m+SMtHuLa2RcBhfxG79rjdrz+J+x0Il+ofgNuGR6 6/UHaQ0WSj6F4XCbdiAoUVcx6DBmRArO0qADODIfaDU9gMUvNjN1y8XPmBGxE96I Ie0L3UVim1+k7dYB3FWyKcLyb6av8wMR0GGvLUaDY16ztZBXBvU6ci5LC76BWb7V z1vLqWbTB9/zryqgumoW/+qCx7Cg3QkS1I7SfjInfyv5VI52kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWzVkTiBturU1eQ2U1ntI3B02aHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEw YWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4YWEyNzE4ZWYvMzMxMWIwNDUtODIwZC0z ZDE4LThkZmYtYzMwMzdjNjMzMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGQxMGFjNjctZDhmZi00ZTJlLTky ZTktOTliOGFhMjcxOGVmLzRkMTBhYzY3LWQ4ZmYtNGUyZS05MmU5LTk5YjhhYTI3 MThlZi5jcmwwHwYDVR0jBBgwFoAUL4RfQ6yTgW/6VJUXKva2p0MINvkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEwYWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4 YWEyNzE4ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzO9UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEvZ743u2bXBLc+o2MR+SQ6t8g04qGWGT1eMfByf4xRXt9Ub0h2k7fp bnWlLrG2ogoLO3W6hpakw+28iBJ0u+0VYiyQLsA/YP3sDh3u1N1OOWiykTIiuwsT JyTaCYiHSkcFdGrYq09Rt6RDIM+iPRmyIS/dEM86BPG0ef8gHdfYI/hIxqCVQrRw FUvv2ouuixSKAvFWhjzBC+N7KM7wLFzB7TuAtd10mSnWdEjmv5Ww3pG7hNveH6Lv F3lrU1TKfE8wXagRpJwLWU8cWgT9cXN8VGYy82TrFP0rpXF2iuIUU2XR/BFDdTkY Bj0Er0nchokl5D+AhdDI2bfExfReq70= -----END CERTIFICATE-----Generated at Fri May 22 18:30:11 2026 by rpki-client