$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/a75e9005-93f7-3801-9334-a4a5f7627a9b.roa File: a75e9005-93f7-3801-9334-a4a5f7627a9b.roa (raw, json) Hash identifier: iCEFAfaMObFqju8yTWfdCieiedE6tqx/SNNYyiLl5xQ= Subject key identifier: 76:57:41:CE:7C:38:81:87:45:68:15:7A:2D:AF:EA:88:69:53:92:35 Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F4328584DBA887159872D6F17C580A380 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/a75e9005-93f7-3801-9334-a4a5f7627a9b.roa Signing time: Tue 05 May 2026 03:36:51 +0000 ROA not before: Tue 05 May 2026 03:36:51 +0000 ROA not after: Mon 03 Aug 2026 03:36:51 +0000 asID: 30669 IP address blocks: 216.220.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:88:71:59:87:2d:6f:17:c5:80:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: May 5 03:36:51 2026 GMT Not After : Aug 3 03:36:51 2026 GMT Subject: CN=3184791e-a30b-42f0-81f6-64829cbd71a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:a3:09:5a:4b:95:67:20:cc:1b:c2:91:7f: ad:6b:3f:62:ab:1c:91:b3:51:a3:cc:dc:1b:e8:ea: 6e:60:93:71:6a:d3:e1:08:86:a3:7e:2e:1c:10:e7: d9:0d:de:c3:5a:8b:c3:0b:58:7d:34:31:6a:0c:e9: 8f:ce:37:1f:45:e1:0e:1f:ed:77:c2:9c:ca:14:31: 18:3c:f4:dd:c7:04:9f:e7:8f:a8:86:a9:f6:26:1c: 5c:3e:ac:f1:04:44:2a:94:c4:7f:83:93:b0:fa:b2: db:a5:a6:4f:a7:a6:68:94:4d:ae:10:b2:78:3f:b9: cd:69:f4:83:54:dd:b5:fb:1c:f9:de:24:36:17:81: af:cd:09:e2:b9:6f:84:65:3b:b6:ba:89:fe:04:e8: 27:c3:3b:6e:61:9c:9c:fe:48:72:ce:02:a8:51:8c: 25:e9:ad:fb:3f:e6:c1:54:02:65:4e:39:99:b6:b5: 09:5c:c5:17:aa:6b:e4:31:6d:6d:3a:c5:45:ce:85: 34:a0:5a:fc:00:e6:6b:f4:4b:41:a9:d5:6c:72:6b: 93:34:ae:89:8a:f7:e1:a9:a9:b2:bb:33:fd:7c:0e: 95:b0:04:cc:b1:d1:69:2e:c1:7f:f3:36:bc:09:07: b3:11:46:66:de:c1:ae:d5:35:9d:f3:76:ba:e2:65: 9a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:57:41:CE:7C:38:81:87:45:68:15:7A:2D:AF:EA:88:69:53:92:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/a75e9005-93f7-3801-9334-a4a5f7627a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 216.220.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:cd:da:b7:4b:c1:f0:ff:70:3d:e1:e1:40:db:e2:88:1e:fe: 8e:7a:87:b5:07:29:81:b7:74:37:64:7e:34:b1:76:6b:88:be: 54:3b:de:b9:92:69:88:61:eb:e1:1c:a4:9d:d2:c1:69:dc:52: 1a:e1:5e:6b:d9:63:b3:6a:41:13:7c:32:5e:14:6b:95:6b:9b: c6:d2:cf:84:44:11:b9:be:bf:d9:72:83:87:09:23:04:d0:1d: 25:cc:02:cc:8f:31:f9:d9:29:45:d7:67:8e:ef:0f:3a:6e:71: a4:ed:77:9d:d5:94:2a:ca:40:a5:b0:3b:39:fa:2c:51:05:dd: 45:22:da:f2:1c:f8:fd:fe:77:71:bc:e6:fa:02:5a:4b:25:36: d1:02:d9:c5:ce:a2:9e:f5:16:44:83:3a:27:3b:80:c3:f9:9e: f5:23:0d:ac:9e:6f:21:31:fe:22:0e:30:eb:06:92:63:53:96: 26:ee:b2:62:69:6d:03:ba:85:9b:43:0c:53:01:1c:4e:f9:d1: 58:e5:4d:bd:13:be:ab:12:71:c9:47:46:28:66:e5:7b:4b:39: 49:a2:d5:e0:5b:3c:e9:29:1d:5c:aa:cd:d6:0b:25:97:ef:45: 7a:e7:43:0d:22:5b:74:76:61:9a:6b:d2:9e:2b:e6:87:d6:4d: 2a:b4:7a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26iHFZhy1vF8WAo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI2MDUwNTAzMzY1MVoXDTI2MDgwMzAzMzY1MVowLzEtMCsGA1UEAxMk MzE4NDc5MWUtYTMwYi00MmYwLTgxZjYtNjQ4MjljYmQ3MWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA152jCVpLlWcgzBvCkX+taz9iqxyRs1GjzNwb 6OpuYJNxatPhCIajfi4cEOfZDd7DWovDC1h9NDFqDOmPzjcfReEOH+13wpzKFDEY PPTdxwSf54+ohqn2JhxcPqzxBEQqlMR/g5Ow+rLbpaZPp6ZolE2uELJ4P7nNafSD VN21+xz53iQ2F4GvzQniuW+EZTu2uon+BOgnwztuYZyc/khyzgKoUYwl6a37P+bB VAJlTjmZtrUJXMUXqmvkMW1tOsVFzoU0oFr8AOZr9EtBqdVscmuTNK6Jivfhqamy uzP9fA6VsATMsdFpLsF/8za8CQezEUZm3sGu1TWd83a64mWatwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZXQc58OIGHRWgVei2v6ohpU5I1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvYTc1ZTkwMDUtOTNmNy0z ODAxLTkzMzQtYTRhNWY3NjI3YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPN2rdLwfD/cD3h4UDb4oge/o56h7UHKYG3dDdkfjSxdmuIvlQ73rmS aYhh6+EcpJ3SwWncUhrhXmvZY7NqQRN8Ml4Ua5Vrm8bSz4REEbm+v9lyg4cJIwTQ HSXMAsyPMfnZKUXXZ47vDzpucaTtd53VlCrKQKWwOzn6LFEF3UUi2vIc+P3+d3G8 5voCWkslNtEC2cXOop71FkSDOic7gMP5nvUjDayebyEx/iIOMOsGkmNTlibusmJp bQO6hZtDDFMBHE750VjlTb0TvqsScclHRihm5XtLOUmi1eBbPOkpHVyqzdYLJZfv RXrnQw0iW3R2YZpr0p4r5ofWTSq0ejA= -----END CERTIFICATE-----Generated at Sun May 10 20:51:10 2026 by rpki-client