$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa File: d01de867-d842-3f15-838a-d66341794f48.roa (raw, json) Hash identifier: wxmakFBcUjrQMq7i7IRzg5UJGMLPr3RTLSSuwlbtXD0= Subject key identifier: 89:B3:1C:F8:B9:B0:52:10:4E:69:5D:6B:68:39:ED:DB:A0:A9:08:60 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584DF4DB99B7FEC82024DA7E1500 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 16509 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:99:b7:fe:c8:20:24:da:7e:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=8e68a50b-0438-46cb-ad07-4a7299b07660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:95:af:97:f0:d8:df:2d:a2:5f:d4:6f:7c: 17:99:cd:9b:ed:ef:13:4b:6e:72:14:e1:b6:c2:2a: 94:99:6a:81:1a:69:6f:ae:7d:17:9a:24:b5:cf:03: ea:4e:12:ba:2a:ca:a8:f8:90:28:79:bb:eb:bf:e9: 7e:22:fb:6b:4b:46:e6:bb:fd:10:7e:91:d4:ef:61: d2:d9:73:4f:f5:db:9f:5e:cb:bb:b8:bc:ec:42:8e: b7:0c:10:02:61:f2:7d:6f:8e:ee:b6:65:c5:a9:17: 15:df:ba:f5:6b:60:96:06:27:a2:20:fa:b2:33:72: 59:b1:76:2d:82:e1:1f:f9:bc:77:0e:83:33:4d:e1: 1f:19:97:7c:05:59:5e:9b:4d:09:b5:ce:6b:cc:0b: c4:26:45:cd:14:08:90:4c:80:fe:29:d1:1f:6d:f7: 00:ce:a6:89:3b:2c:cc:0d:52:bb:aa:5b:ed:d3:38: 00:fc:cc:a9:b6:e7:f4:31:9c:1b:b2:64:03:62:a2: 63:8b:dd:f7:ba:b4:5e:c8:7c:e2:e1:c5:b9:e0:73: 09:6b:e8:f3:63:e5:79:55:11:18:3d:e1:9f:c4:66: e2:f5:72:87:fd:b9:3f:9e:b9:f8:dd:c0:a4:3d:cd: ae:13:0c:44:ef:7c:22:e7:9f:60:8c:ea:d1:7b:35: b9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B3:1C:F8:B9:B0:52:10:4E:69:5D:6B:68:39:ED:DB:A0:A9:08:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2f:6b:03:f0:52:04:c2:3c:17:87:03:1b:b6:c4:94:7d:83: 16:20:33:a1:8f:a7:5d:a8:cb:d7:29:de:25:f9:4f:e4:17:3b: 9d:a6:b6:11:e6:87:72:0f:ac:5d:f2:32:fa:47:d8:43:b4:b8: cd:eb:99:ea:8c:59:22:fa:a1:70:9f:08:a6:0f:75:52:ef:78: d5:be:fb:3d:ae:7f:8b:73:e0:79:f8:40:33:5a:ff:74:6c:f7: 6f:4b:32:2c:8e:74:45:85:f6:80:90:24:a9:9b:50:7c:0e:7c: eb:3d:34:51:50:b2:36:55:02:e4:d9:df:95:6f:87:b2:7e:94: a2:74:e8:12:15:54:81:48:38:9d:78:7e:6b:89:d3:aa:f3:d2: ca:e1:a6:92:7b:cc:d9:8a:d5:46:ba:04:e4:4a:7a:70:62:f9: 9e:3e:a5:b5:34:71:43:26:f1:44:cb:cd:3a:ef:12:c7:21:db: 7c:7a:2e:3d:30:bc:30:82:28:9b:72:db:1b:8a:a1:01:c3:2c: 8c:07:ac:ff:5c:5c:69:bd:18:84:b5:b7:5f:51:f7:10:8e:7e: 37:f6:2b:74:42:08:21:07:fc:c2:4e:63:3d:1c:ea:e8:0e:5f: 26:05:7e:ad:db:02:da:30:e0:14:e0:09:97:8e:65:78:7b:3c: 7f:41:0f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3025m3/sggJNp+FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk OGU2OGE1MGItMDQzOC00NmNiLWFkMDctNGE3Mjk5YjA3NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyyVr5fw2N8tol/Ub3wXmc2b7e8TS25yFOG2 wiqUmWqBGmlvrn0XmiS1zwPqThK6Ksqo+JAoebvrv+l+IvtrS0bmu/0QfpHU72HS 2XNP9dufXsu7uLzsQo63DBACYfJ9b47utmXFqRcV37r1a2CWBieiIPqyM3JZsXYt guEf+bx3DoMzTeEfGZd8BVlem00Jtc5rzAvEJkXNFAiQTID+KdEfbfcAzqaJOyzM DVK7qlvt0zgA/Myptuf0MZwbsmQDYqJji933urReyHzi4cW54HMJa+jzY+V5VREY PeGfxGbi9XKH/bk/nrn43cCkPc2uEwxE73wi559gjOrRezW5fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImzHPi5sFIQTmlda2g57dugqQhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDAxZGU4NjctZDg0Mi0z ZjE1LTgzOGEtZDY2MzQxNzk0ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYvawPwUgTCPBeHAxu2xJR9gxYgM6GPp12oy9cp3iX5T+QXO52mthHm h3IPrF3yMvpH2EO0uM3rmeqMWSL6oXCfCKYPdVLveNW++z2uf4tz4Hn4QDNa/3Rs 929LMiyOdEWF9oCQJKmbUHwOfOs9NFFQsjZVAuTZ35Vvh7J+lKJ06BIVVIFIOJ14 fmuJ06rz0srhppJ7zNmK1Ua6BORKenBi+Z4+pbU0cUMm8UTLzTrvEsch23x6Lj0w vDCCKJty2xuKoQHDLIwHrP9cXGm9GIS1t19R9xCOfjf2K3RCCCEH/MJOYz0c6ugO XyYFfq3bAtow4BTgCZeOZXh7PH9BD2k= -----END CERTIFICATE-----Generated at Wed Jun 3 20:16:46 2026 by rpki-client