$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa File: 1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa (raw, json) Hash identifier: 5IoXMEVlLwG950cIsCPxvI3Ob47yhfNWves8uDhmg6c= Subject key identifier: 5C:EC:6C:F0:45:38:DE:2E:30:A0:8A:C5:EC:9C:A0:80:F1:B2:60:7F Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584E0005E3B8A1235897A81B0550 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 8075 IP address blocks: 208.64.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:e3:b8:a1:23:58:97:a8:1b:05:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=47b598ed-8c68-45c9-bf83-fa558853a836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:ea:49:11:21:5a:c1:17:c4:4c:92:7d:e1: 73:7e:7c:1f:71:23:c3:b5:c3:81:76:93:04:45:a1: 11:e3:9b:22:04:d8:af:ee:5a:ec:cc:26:97:b0:e6: cb:10:60:6b:d6:09:75:f3:1d:f0:0b:04:6f:3f:42: eb:0a:f3:11:71:6c:91:c8:b3:b5:d0:da:00:5a:b9: 31:d2:38:ca:39:d6:75:3a:6d:34:5e:fc:e0:7d:a3: 00:e0:01:4d:3d:d9:08:16:99:fb:a5:32:bc:03:9b: 1e:cb:a3:e3:ad:74:eb:28:53:3e:cc:41:6f:06:d4: a6:5f:f0:50:36:12:81:56:01:f0:dd:1b:48:91:81: b3:e8:07:b3:a1:51:00:1b:fe:b4:e1:7f:c1:c3:37: f2:0e:2c:73:8d:f8:0d:85:41:1d:89:c2:e4:99:72: 70:66:ee:41:1d:2a:9a:50:23:a9:b7:a1:e3:fc:96: f5:cf:25:29:5d:10:89:a8:03:61:d4:62:52:da:8a: 2b:82:1b:8a:4a:67:d4:82:76:c4:12:ae:62:db:3c: 80:76:43:0a:52:f4:57:ec:ee:d3:99:41:de:be:4b: e0:88:b3:3d:dc:16:9f:d1:f1:61:10:48:dc:89:1d: 9e:41:58:cb:3a:08:7e:09:b0:34:a8:d3:dd:b5:2b: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EC:6C:F0:45:38:DE:2E:30:A0:8A:C5:EC:9C:A0:80:F1:B2:60:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:03:9f:eb:e6:9d:60:c8:a3:b1:af:45:da:a6:5e:6d:5b:4f: 97:e0:85:8e:ae:99:61:bf:ba:8a:dd:9f:d7:98:59:0c:de:2c: 92:c2:a4:37:8f:d3:05:04:5c:6e:3a:25:b4:e4:07:51:2f:ab: 1b:d3:e4:ee:a7:93:33:60:60:c0:25:3e:99:75:3f:51:ee:93: 17:76:f0:58:cd:0b:b2:b9:f2:be:ff:8f:dc:42:72:d0:93:2a: bb:b5:7d:c7:8a:32:94:ce:07:38:01:84:08:84:29:8c:be:07: fb:fc:39:3e:ce:0d:23:61:47:47:4a:48:1b:72:39:96:88:7e: 93:5a:cf:db:f0:0b:a1:bd:76:ea:dc:8b:7f:95:7c:6a:b2:30: 9f:b0:80:d8:ef:dc:dc:d6:ad:56:fc:60:e2:5a:8a:39:18:7c: ef:70:4d:f7:56:2f:3c:d9:ad:08:b3:51:a3:00:ba:f0:f2:15: 75:61:97:07:a4:62:01:49:64:86:9a:35:7e:d6:76:f7:69:e8: bb:4f:38:8d:30:55:6b:b4:f6:57:84:df:9b:fb:f0:9b:e7:19: e7:67:3d:d1:05:a6:cc:0b:e4:ae:62:88:7d:64:db:7e:8b:dd: 70:91:37:43:03:13:c6:c4:aa:60:63:bd:0b:1e:8a:3d:e2:96: 1b:01:05:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABeO4oSNYl6gbBVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk NDdiNTk4ZWQtOGM2OC00NWM5LWJmODMtZmE1NTg4NTNhODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NHqSREhWsEXxEySfeFzfnwfcSPDtcOBdpME RaER45siBNiv7lrszCaXsObLEGBr1gl18x3wCwRvP0LrCvMRcWyRyLO10NoAWrkx 0jjKOdZ1Om00XvzgfaMA4AFNPdkIFpn7pTK8A5sey6PjrXTrKFM+zEFvBtSmX/BQ NhKBVgHw3RtIkYGz6AezoVEAG/604X/BwzfyDixzjfgNhUEdicLkmXJwZu5BHSqa UCOpt6Hj/Jb1zyUpXRCJqANh1GJS2oorghuKSmfUgnbEEq5i2zyAdkMKUvRX7O7T mUHevkvgiLM93Baf0fFhEEjciR2eQVjLOgh+CbA0qNPdtSv1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzsbPBFON4uMKCKxeycoIDxsmB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvMWMyZDc2OWUtYjIxMC0z ZTZiLTkwOTUtZjA2NmI5Y2IzNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8Dn+vmnWDIo7GvRdqmXm1bT5fghY6umWG/uordn9eYWQzeLJLCpDeP 0wUEXG46JbTkB1EvqxvT5O6nkzNgYMAlPpl1P1Hukxd28FjNC7K58r7/j9xCctCT Kru1fceKMpTOBzgBhAiEKYy+B/v8OT7ODSNhR0dKSBtyOZaIfpNaz9vwC6G9durc i3+VfGqyMJ+wgNjv3NzWrVb8YOJaijkYfO9wTfdWLzzZrQizUaMAuvDyFXVhlwek YgFJZIaaNX7Wdvdp6LtPOI0wVWu09leE35v78JvnGednPdEFpswL5K5iiH1k236L 3XCRN0MDE8bEqmBjvQseij3ilhsBBQo= -----END CERTIFICATE-----Generated at Wed Jun 3 20:01:42 2026 by rpki-client