$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa File: d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa (raw, json) Hash identifier: 5tDxWydcbFXCtX307Un0+x6EDmlEzMIKtzGFNjgBM0I= Subject key identifier: 4B:36:83:85:FA:38:E7:33:EA:77:C3:EE:E1:2D:F0:94:9C:79:91:1E Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584DF4DB92ECEA901E5E449B3B80 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 14618 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:92:ec:ea:90:1e:5e:44:9b:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=61bf9354-7c3a-4ba6-b22b-07f3b1ace763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:d3:98:a6:78:0c:d9:2a:de:0f:fd:bb:de: c5:eb:12:93:a9:98:fe:bb:db:1a:a9:6d:8d:95:78: f6:c6:0f:49:da:80:4b:da:9c:1c:03:22:ca:37:8b: f3:5a:0b:b3:13:b0:aa:72:48:78:65:a6:6f:ee:22: 17:5a:cf:ac:0d:ba:ee:76:96:56:c6:ce:21:ef:13: 4f:1b:03:fd:5e:39:06:97:94:5e:dc:3c:43:f8:26: 53:2b:77:0a:a7:a6:19:5b:c0:29:a0:c9:9d:1e:73: 8f:5a:ec:9c:b9:14:17:86:eb:51:15:43:6d:27:2c: 21:ec:77:66:ba:74:20:86:49:ea:7b:2f:4e:b0:e9: 74:0f:7a:3b:6e:49:7a:31:ce:fc:f0:cd:e9:0c:23: fd:cc:dc:29:c5:84:50:2e:8c:db:60:30:76:fd:a1: 59:74:3e:53:2e:96:9d:d6:8e:9a:ec:3c:31:ea:4c: c2:33:24:6c:33:17:ca:eb:2e:b5:39:6c:3b:4d:28: 7a:bc:f8:77:1e:e1:32:8a:92:3e:d7:67:eb:7a:8a: 19:80:ff:59:24:70:7d:b3:17:c7:42:de:1f:9b:98: a5:88:94:a3:65:fd:4e:1c:20:3c:99:21:8b:39:ff: 49:1c:7a:15:c0:73:33:60:6f:f6:0e:2a:ca:da:51: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:36:83:85:FA:38:E7:33:EA:77:C3:EE:E1:2D:F0:94:9C:79:91:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:06:6f:9a:3d:70:af:f5:c6:4a:ed:08:54:71:dd:8b:df:7c: f3:e5:c1:2d:21:60:f9:b9:18:8a:26:91:73:28:fe:35:a9:34: bf:83:23:16:65:e1:32:42:26:5f:46:d6:3d:9f:45:d2:aa:3a: e4:dc:70:84:66:65:68:4b:06:50:16:1b:02:8e:a5:98:d3:6c: 6c:7a:9d:68:cd:c2:12:fd:63:b4:67:c2:04:62:bb:13:be:a5: f2:2e:c8:2d:de:13:07:e2:45:06:dc:50:5b:cd:1b:4c:77:e9: 14:c8:7c:51:ca:57:f3:d8:b7:18:f7:d5:b2:e3:a0:3b:ef:93: 31:1f:91:c8:9b:70:80:91:7f:dd:3d:ee:0a:ac:8f:21:8a:7c: e8:7e:58:5e:46:74:74:b5:eb:06:6a:b7:e6:8b:93:fa:53:ac: 0c:aa:1a:c5:5c:23:e8:c3:2c:9d:ea:56:3c:1a:ee:17:39:2b: 42:98:d8:ca:92:c8:a5:ef:ac:b1:e2:85:a1:bd:52:d1:ff:d3: 1d:ff:2e:a1:e7:c7:e1:83:cc:ea:d8:9b:c1:ab:29:ab:dd:4b: db:12:e0:28:02:41:4f:1f:27:06:f7:3f:5b:ad:db:df:8b:38: 97:25:9c:ab:57:ad:76:3d:ba:55:d1:1c:bc:44:4a:ec:ec:e5: fe:4e:a5:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3025Ls6pAeXkSbO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NjFiZjkzNTQtN2MzYS00YmE2LWIyMmItMDdmM2IxYWNlNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw3TmKZ4DNkq3g/9u97F6xKTqZj+u9saqW2N lXj2xg9J2oBL2pwcAyLKN4vzWguzE7Cqckh4ZaZv7iIXWs+sDbrudpZWxs4h7xNP GwP9XjkGl5Re3DxD+CZTK3cKp6YZW8ApoMmdHnOPWuycuRQXhutRFUNtJywh7Hdm unQghknqey9OsOl0D3o7bkl6Mc788M3pDCP9zNwpxYRQLozbYDB2/aFZdD5TLpad 1o6a7Dwx6kzCMyRsMxfK6y61OWw7TSh6vPh3HuEyipI+12freooZgP9ZJHB9sxfH Qt4fm5iliJSjZf1OHCA8mSGLOf9JHHoVwHMzYG/2DirK2lGodQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEs2g4X6OOcz6nfD7uEt8JSceZEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDk0YzY2NmMtYWI1Ni0z Yjk0LThkM2EtMWM0MWVmYTM0OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAGb5o9cK/1xkrtCFRx3YvffPPlwS0hYPm5GIomkXMo/jWpNL+DIxZl 4TJCJl9G1j2fRdKqOuTccIRmZWhLBlAWGwKOpZjTbGx6nWjNwhL9Y7RnwgRiuxO+ pfIuyC3eEwfiRQbcUFvNG0x36RTIfFHKV/PYtxj31bLjoDvvkzEfkcibcICRf909 7gqsjyGKfOh+WF5GdHS16wZqt+aLk/pTrAyqGsVcI+jDLJ3qVjwa7hc5K0KY2MqS yKXvrLHihaG9UtH/0x3/LqHnx+GDzOrYm8GrKavdS9sS4CgCQU8fJwb3P1ut29+L OJclnKtXrXY9ulXRHLxESuzs5f5OpVE= -----END CERTIFICATE-----Generated at Wed Jun 3 20:15:46 2026 by rpki-client