$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa File: 95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa (raw, json) Hash identifier: sJ0Wl0/93Z3bQz/Q+dZE5e1X2aZFJug0zHyqkRwjL8Y= Subject key identifier: 95:54:E3:B6:3F:60:66:D0:47:9B:7F:AE:61:58:0B:CC:EB:01:8D:41 Certificate issuer: /CN=d0677001-b062-4999-89f9-d882893f5a1c Certificate serial: 010D0C9F4328584DE5808B931A2FA88FF9F7C9C0 Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa Signing time: Wed 20 May 2026 13:00:31 +0000 ROA not before: Wed 20 May 2026 13:00:31 +0000 ROA not after: Tue 18 Aug 2026 13:00:31 +0000 asID: 393607 IP address blocks: 192.152.158.0/24 maxlen: 24 198.169.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:80:8b:93:1a:2f:a8:8f:f9:f7:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c Validity Not Before: May 20 13:00:31 2026 GMT Not After : Aug 18 13:00:31 2026 GMT Subject: CN=ef772b59-5bca-4a52-a4e7-e575d6a03ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:84:b1:75:95:3a:fa:67:04:b1:19:11:b5: 10:2c:a6:ad:fb:04:2f:45:4f:a3:f0:6b:0e:ff:38: ba:e4:21:b9:67:84:28:d3:2b:09:d7:4f:e7:2f:66: 9f:86:c0:ff:f4:3c:01:c3:51:8e:10:93:d8:9e:4a: d8:87:41:8b:73:bd:86:98:98:ac:0f:6a:b8:fe:ef: 74:08:38:42:30:a9:33:b9:51:78:6f:41:65:42:91: 1d:f3:72:63:22:0f:4a:20:a2:19:1b:ef:d9:b4:c5: a5:bc:3f:1a:1e:60:db:bc:b5:93:83:44:f7:fd:85: 41:65:45:e4:6d:b9:53:ae:ca:37:bd:8d:8f:2e:e8: 10:75:22:b5:3c:d3:1f:ac:0e:e5:c8:28:fc:3f:91: 91:9d:8e:82:fb:8c:68:87:70:06:29:bf:ec:96:a1: 9f:70:3a:42:d2:0f:25:c9:2f:e8:f9:e2:a5:dc:fb: 1a:33:e2:f0:3f:c0:89:1b:85:a8:a8:da:a9:7c:16: 02:c8:54:2a:d3:40:72:3f:ec:3e:78:c0:28:79:05: 3d:05:00:05:61:64:bd:83:da:51:23:7c:7a:65:78: c3:51:98:d3:30:c3:7c:c0:07:87:7b:7e:20:eb:a9: a7:06:03:c5:ad:4e:a1:72:06:30:18:01:7c:37:fa: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:54:E3:B6:3F:60:66:D0:47:9B:7F:AE:61:58:0B:CC:EB:01:8D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl X509v3 Authority Key Identifier: keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer sbgp-ipAddrBlock: critical IPv4: 192.152.158.0/24 198.169.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d8:66:7b:98:8b:2b:c5:7d:a0:fe:84:a9:f3:b3:2e:70:6c: e9:3c:d0:37:4d:74:f1:63:50:05:74:e7:c9:e5:e2:64:a0:0a: b5:ab:96:fb:11:a2:26:ef:04:3b:6e:b2:8f:49:b5:d6:fd:ea: 67:da:d5:f0:9f:65:3d:37:4c:f7:d8:84:4f:0c:b7:3e:43:2f: 0f:fe:93:9f:3c:dc:44:e2:93:eb:ae:38:5b:79:58:84:4d:fe: 99:05:12:ff:78:b0:ce:99:c3:d3:39:d1:0c:c9:25:82:9b:05: 3c:32:7b:3f:5a:66:b5:58:f1:c4:22:b9:6d:d1:2b:35:ac:bc: ee:56:fc:0d:01:53:cd:68:71:dd:02:01:9e:bc:b9:a7:66:18: 31:62:ee:ca:d0:aa:b0:f0:ca:b8:03:dc:61:f8:59:03:9d:9b: f1:f6:50:0d:26:43:99:9c:b3:ae:a0:c0:55:91:97:5c:18:98: c5:89:2b:82:d4:ba:20:fb:6b:ef:9b:63:4c:a2:c0:14:9e:0e: 0e:37:2a:cb:80:9a:e4:0a:78:83:d8:2a:a0:36:f5:36:15:00: 25:81:c9:5d:51:8b:ab:00:1e:18:9d:58:55:db:eb:31:79:01: fc:0e:68:05:73:e1:f4:6e:ba:30:1b:bf:7a:c8:ed:de:1f:ca: e9:3d:b2:23 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3lgIuTGi+oj/n3ycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2NzcwMDEtYjA2Mi00OTk5LTg5ZjktZDg4Mjg5M2Y1 YTFjMB4XDTI2MDUyMDEzMDAzMVoXDTI2MDgxODEzMDAzMVowLzEtMCsGA1UEAxMk ZWY3NzJiNTktNWJjYS00YTUyLWE0ZTctZTU3NWQ2YTAzYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7+EsXWVOvpnBLEZEbUQLKat+wQvRU+j8GsO /zi65CG5Z4Qo0ysJ10/nL2afhsD/9DwBw1GOEJPYnkrYh0GLc72GmJisD2q4/u90 CDhCMKkzuVF4b0FlQpEd83JjIg9KIKIZG+/ZtMWlvD8aHmDbvLWTg0T3/YVBZUXk bblTrso3vY2PLugQdSK1PNMfrA7lyCj8P5GRnY6C+4xoh3AGKb/slqGfcDpC0g8l yS/o+eKl3PsaM+LwP8CJG4WoqNqpfBYCyFQq00ByP+w+eMAoeQU9BQAFYWS9g9pR I3x6ZXjDUZjTMMN8wAeHe34g66mnBgPFrU6hcgYwGAF8N/p4XwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJVU47Y/YGbQR5t/rmFYC8zrAY1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMDY3 NzAwMS1iMDYyLTQ5OTktODlmOS1kODgyODkzZjVhMWMvOTUxMDYzMTYtYTBkMS0z ZGJmLThhYjItYzQ5OGM3MGY2YzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDA2NzcwMDEtYjA2Mi00OTk5LTg5 ZjktZDg4Mjg5M2Y1YTFjL2QwNjc3MDAxLWIwNjItNDk5OS04OWY5LWQ4ODI4OTNm NWExYy5jcmwwHwYDVR0jBBgwFoAULwDv5B+OOmyQRa+di2BLcNn0tSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMDY3NzAwMS1iMDYyLTQ5OTktODlmOS1kODgy ODkzZjVhMWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwJieAwQA xql+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFLYZnuYiyvFfaD+hKnzsy5wbOk80DdNdPFjUAV058nl4mSg CrWrlvsRoibvBDtuso9Jtdb96mfa1fCfZT03TPfYhE8Mtz5DLw/+k5883ETik+uu OFt5WIRN/pkFEv94sM6Zw9M50QzJJYKbBTwyez9aZrVY8cQiuW3RKzWsvO5W/A0B U81ocd0CAZ68uadmGDFi7srQqrDwyrgD3GH4WQOdm/H2UA0mQ5mcs66gwFWRl1wY mMWJK4LUuiD7a++bY0yiwBSeDg43KsuAmuQKeIPYKqA29TYVACWByV1Ri6sAHhid WFXb6zF5AfwOaAVz4fRuujAbv3rI7d4fyuk9siM= -----END CERTIFICATE-----Generated at Mon Jun 1 23:12:49 2026 by rpki-client