$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa File: 11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa (raw, json) Hash identifier: BZ+jEL3BcN5gaZihZ+yQZF5XvPlEVHFyvtSg6u74WFg= Subject key identifier: E0:4D:DC:4C:26:A4:A2:84:E7:14:7F:F3:07:42:E0:7A:A1:E0:64:91 Certificate issuer: /CN=86025be1-eb4b-4cf7-8cfe-9e4f5311802d Certificate serial: 010D0C9F4328584DDA55C3F585F1F0E11FB5D56C Authority key identifier: D9:75:3A:AC:0C:1F:CB:B4:06:00:A9:4F:34:E1:96:5C:7D:A3:E4:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa Signing time: Sat 16 May 2026 13:00:31 +0000 ROA not before: Sat 16 May 2026 13:00:31 +0000 ROA not after: Fri 14 Aug 2026 13:00:31 +0000 asID: 8075 IP address blocks: 199.189.36.0/24 maxlen: 24 199.189.37.0/24 maxlen: 24 199.189.38.0/24 maxlen: 24 199.189.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:da:55:c3:f5:85:f1:f0:e1:1f:b5:d5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86025be1-eb4b-4cf7-8cfe-9e4f5311802d Validity Not Before: May 16 13:00:31 2026 GMT Not After : Aug 14 13:00:31 2026 GMT Subject: CN=352a5fe2-14af-4ec9-8b73-d4691f502bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:12:ad:79:b8:bb:b5:b1:c7:59:0b:c3:fd: 46:70:de:98:c7:ff:b0:05:57:04:a4:46:f3:d2:01: 45:e8:2f:70:cd:54:95:a3:e2:5a:10:b7:7d:05:3d: 2c:96:23:e2:fd:fa:80:52:69:86:89:b1:a1:7a:f6: 87:c0:7b:6c:d8:06:d6:c8:7f:fa:82:6c:b9:e7:0a: c1:3f:e5:a6:9b:94:56:ab:7f:5b:83:0b:47:2d:39: 2e:7a:6c:70:cf:1e:3a:8c:75:c7:31:e9:e2:77:54: 3d:24:51:16:3b:36:52:2d:f5:22:75:af:bf:a4:46: cb:f4:d6:26:bf:dd:b0:30:61:48:13:44:db:17:47: bd:65:49:20:2e:0b:e0:61:ef:50:0c:e0:ce:b4:c1: e5:4d:af:29:4e:ef:c9:ad:60:8c:aa:09:7e:66:26: 35:b1:34:d7:e9:34:30:a8:3c:f9:26:b9:fc:50:8f: 53:3c:a0:70:8e:f7:30:b9:7c:0d:a7:53:e5:7b:16: 8a:2a:ff:f6:99:ac:ae:4d:e3:47:28:67:ee:02:18: 20:d5:57:bc:09:bd:57:70:7f:3a:01:d0:63:84:e7: 71:fb:93:29:00:cc:76:95:80:1b:22:29:13:6d:16: be:06:22:29:63:8f:eb:5d:56:f4:56:e5:b7:9a:f9: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4D:DC:4C:26:A4:A2:84:E7:14:7F:F3:07:42:E0:7A:A1:E0:64:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl X509v3 Authority Key Identifier: keyid:D9:75:3A:AC:0C:1F:CB:B4:06:00:A9:4F:34:E1:96:5C:7D:A3:E4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer sbgp-ipAddrBlock: critical IPv4: 199.189.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:32:04:aa:54:a0:70:b3:66:d1:38:ea:08:44:c7:b3:f2:44: ef:c5:59:09:65:25:ad:6e:25:39:11:50:d6:0a:43:c2:f6:ba: cf:42:21:8c:6c:94:bf:b0:e4:1c:7b:a6:6c:f6:c3:bf:df:f7: 7e:e7:94:03:a4:a3:c0:ad:13:be:36:6f:0b:16:dc:87:01:11: 33:e4:bf:d5:f7:50:ff:27:d5:73:a4:3d:dd:07:cd:c3:d4:69: e2:bb:97:15:44:23:c3:0b:c2:4b:21:0c:ba:19:a1:ed:89:5f: 08:b4:86:5b:57:54:97:e9:a8:b5:8e:dd:05:f8:4d:9a:5b:9e: 9b:5d:69:85:c4:4a:28:19:af:18:5c:94:56:15:30:8f:69:59: 90:8d:60:23:64:2e:3b:98:be:d4:47:0d:3b:7b:26:74:5d:d5: a2:2d:49:02:2e:80:5e:c5:3f:53:b7:d0:4d:ff:49:28:b4:e3: 90:e9:34:48:de:58:a1:e3:b2:30:73:e5:88:c4:5a:aa:c0:73: 4c:e8:20:9a:06:e1:de:47:af:dd:6e:2e:39:7d:8b:b0:7a:7a: 14:d9:7d:c0:52:d4:9b:8c:ee:ba:ba:65:ee:38:b8:67:46:a4: 14:56:8f:d2:71:c7:0a:c9:4a:56:53:95:95:25:3a:0f:22:2d: 5a:41:0b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3aVcP1hfHw4R+11WwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwMjViZTEtZWI0Yi00Y2Y3LThjZmUtOWU0ZjUzMTE4 MDJkMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk MzUyYTVmZTItMTRhZi00ZWM5LThiNzMtZDQ2OTFmNTAyYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0YSrXm4u7Wxx1kLw/1GcN6Yx/+wBVcEpEbz 0gFF6C9wzVSVo+JaELd9BT0sliPi/fqAUmmGibGhevaHwHts2AbWyH/6gmy55wrB P+Wmm5RWq39bgwtHLTkuemxwzx46jHXHMenid1Q9JFEWOzZSLfUida+/pEbL9NYm v92wMGFIE0TbF0e9ZUkgLgvgYe9QDODOtMHlTa8pTu/JrWCMqgl+ZiY1sTTX6TQw qDz5Jrn8UI9TPKBwjvcwuXwNp1PlexaKKv/2mayuTeNHKGfuAhgg1Ve8Cb1XcH86 AdBjhOdx+5MpAMx2lYAbIikTbRa+BiIpY4/rXVb0VuW3mvmizwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBN3EwmpKKE5xR/8wdC4Hqh4GSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NjAy NWJlMS1lYjRiLTRjZjctOGNmZS05ZTRmNTMxMTgwMmQvMTFhYTdlZTYtMGViMy0z MzkwLTg0ODUtMWIyYzI5YjRjYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODYwMjViZTEtZWI0Yi00Y2Y3LThj ZmUtOWU0ZjUzMTE4MDJkLzg2MDI1YmUxLWViNGItNGNmNy04Y2ZlLTllNGY1MzEx ODAyZC5jcmwwHwYDVR0jBBgwFoAU2XU6rAwfy7QGAKlPNOGWXH2j5BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NjAyNWJlMS1lYjRiLTRjZjctOGNmZS05ZTRm NTMxMTgwMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx70kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYyBKpUoHCzZtE46ghEx7PyRO/FWQllJa1uJTkRUNYKQ8L2us9CIYxs lL+w5Bx7pmz2w7/f937nlAOko8CtE742bwsW3IcBETPkv9X3UP8n1XOkPd0HzcPU aeK7lxVEI8MLwkshDLoZoe2JXwi0hltXVJfpqLWO3QX4TZpbnptdaYXESigZrxhc lFYVMI9pWZCNYCNkLjuYvtRHDTt7JnRd1aItSQIugF7FP1O30E3/SSi045DpNEje WKHjsjBz5YjEWqrAc0zoIJoG4d5Hr91uLjl9i7B6ehTZfcBS1JuM7rq6Ze44uGdG pBRWj9JxxwrJSlZTlZUlOg8iLVpBC80= -----END CERTIFICATE-----Generated at Wed Jun 3 19:46:22 2026 by rpki-client