$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa File: b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa (raw, json) Hash identifier: 1VXxpd/PSUntMWV+N2aD8Ktf6ZoiRCPtJ8lO5J+6bD0= Subject key identifier: DA:67:3E:A1:E5:29:B6:27:B8:99:27:78:9F:FC:5B:97:2E:C5:59:41 Certificate issuer: /CN=580e739b-bb2f-4e02-9a24-4813328e39cf Certificate serial: 010D0C9F4328584DD8F084CCB796BECD65F3E480 Authority key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 3736 IP address blocks: 204.138.71.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:84:cc:b7:96:be:cd:65:f3:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580e739b-bb2f-4e02-9a24-4813328e39cf Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=f7421575-1655-4df8-8b17-f289a574ec62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:30:a5:7e:46:bf:46:1b:9e:e1:f9:ab:bf: 8d:ec:dc:c6:48:3e:6e:51:c4:45:c8:2e:ec:75:66: fa:de:ef:36:d0:f4:24:c6:3b:ed:5d:d0:3b:26:92: 67:cf:7a:cd:4b:f4:e1:08:5b:da:0e:7f:fe:3d:6c: ca:41:9f:aa:3b:17:f5:7e:15:18:d2:07:0d:80:01: f7:80:f7:0f:76:e2:aa:b1:0e:e3:5b:90:75:17:07: b5:e7:6f:0e:8f:32:4e:2f:fc:c0:aa:3a:44:2f:81: fb:c5:16:0f:75:f0:b3:31:94:4b:db:fc:7f:86:a3: e1:b1:3b:bf:ff:bf:bf:91:59:28:65:52:c9:0c:ac: 98:ba:3a:1d:27:aa:db:6d:a9:53:a3:73:22:b0:c3: d6:bd:a8:fa:60:7a:1b:63:41:53:0c:e3:a5:70:c9: 34:d1:61:ba:a6:94:e5:93:a4:d2:14:1a:1b:4e:30: 49:d2:ac:ab:d0:89:9f:54:78:cb:a3:09:76:fc:aa: dc:5c:3d:b5:c9:b2:85:8b:7e:5b:c5:02:df:71:56: 90:c4:ac:3c:5d:e7:31:4b:34:6e:34:29:e5:c2:bd: ff:6e:3e:1e:f8:0f:d4:d1:13:77:d0:86:b0:f5:57: 6c:8d:73:95:6b:95:d5:84:a5:3f:21:72:02:c8:c1: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:67:3E:A1:E5:29:B6:27:B8:99:27:78:9F:FC:5B:97:2E:C5:59:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl X509v3 Authority Key Identifier: keyid:E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer sbgp-ipAddrBlock: critical IPv4: 204.138.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:16:a5:27:32:e6:00:9f:3a:9a:ec:98:b0:56:e0:92:f3:15: 32:77:f2:fe:7a:63:2a:a2:72:f1:aa:0e:d9:41:3b:a7:39:f6: ef:2e:67:b6:16:f0:2a:8c:8a:3f:c1:bb:9f:7f:04:31:90:b7: 01:16:fd:a4:c3:a7:48:21:5d:b8:45:3c:8c:1b:50:71:33:b1: e6:04:6c:27:68:19:37:b9:c7:43:86:db:50:f6:4f:38:3b:15: 74:3c:5a:be:37:c1:35:39:a7:19:08:b3:5b:f0:27:71:a9:5f: 24:bf:3a:e8:9d:46:75:ed:c7:65:6e:1a:42:3c:11:6b:7d:47: 32:6e:1b:36:1c:21:fe:4b:66:40:b4:9d:10:4e:06:36:30:8d: 87:bb:ca:c5:73:5c:50:09:9c:3b:ea:0f:98:01:69:71:af:12: 69:3c:c4:45:7c:b3:13:f0:94:94:dd:2d:be:45:bb:c1:f0:4a: 6e:3c:47:f7:39:cc:1d:9e:71:f2:a7:f5:7b:f5:28:26:ca:46: d8:9a:d4:3e:f4:50:d2:5d:d6:ee:a5:75:b2:99:70:0f:a4:1d: ca:fb:bc:2d:4e:20:14:da:e2:10:8f:f5:d6:6d:6e:73:21:d4: ff:38:9d:d1:00:03:19:b9:f8:b6:a8:72:07:a5:7c:0e:08:8c: 5a:8d:58:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8ITMt5a+zWXz5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgwZTczOWItYmIyZi00ZTAyLTlhMjQtNDgxMzMyOGUz OWNmMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk Zjc0MjE1NzUtMTY1NS00ZGY4LThiMTctZjI4OWE1NzRlYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QAwpX5Gv0YbnuH5q7+N7NzGSD5uUcRFyC7s dWb63u820PQkxjvtXdA7JpJnz3rNS/ThCFvaDn/+PWzKQZ+qOxf1fhUY0gcNgAH3 gPcPduKqsQ7jW5B1Fwe1528OjzJOL/zAqjpEL4H7xRYPdfCzMZRL2/x/hqPhsTu/ /7+/kVkoZVLJDKyYujodJ6rbbalTo3MisMPWvaj6YHobY0FTDOOlcMk00WG6ppTl k6TSFBobTjBJ0qyr0ImfVHjLowl2/KrcXD21ybKFi35bxQLfcVaQxKw8XecxSzRu NCnlwr3/bj4e+A/U0RN30Iaw9VdsjXOVa5XVhKU/IXICyMEQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpnPqHlKbYnuJkneJ/8W5cuxVlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBl NzM5Yi1iYjJmLTRlMDItOWEyNC00ODEzMzI4ZTM5Y2YvYjhmMWIwZDQtNTQ4Ny0z YzUxLTlmNjEtNGU5NzcyNmUzNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTgwZTczOWItYmIyZi00ZTAyLTlh MjQtNDgxMzMyOGUzOWNmLzU4MGU3MzliLWJiMmYtNGUwMi05YTI0LTQ4MTMzMjhl MzljZi5jcmwwHwYDVR0jBBgwFoAU53lu1AwCQP2Zt3JGcoLlodSJyLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBlNzM5Yi1iYjJmLTRlMDItOWEyNC00ODEz MzI4ZTM5Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwWpScy5gCfOprsmLBW4JLzFTJ38v56YyqicvGqDtlBO6c59u8uZ7YW 8CqMij/Bu59/BDGQtwEW/aTDp0ghXbhFPIwbUHEzseYEbCdoGTe5x0OG21D2Tzg7 FXQ8Wr43wTU5pxkIs1vwJ3GpXyS/OuidRnXtx2VuGkI8EWt9RzJuGzYcIf5LZkC0 nRBOBjYwjYe7ysVzXFAJnDvqD5gBaXGvEmk8xEV8sxPwlJTdLb5Fu8HwSm48R/c5 zB2ecfKn9Xv1KCbKRtia1D70UNJd1u6ldbKZcA+kHcr7vC1OIBTa4hCP9dZtbnMh 1P84ndEAAxm5+LaocgelfA4IjFqNWFQ= -----END CERTIFICATE-----Generated at Mon Jun 1 22:00:29 2026 by rpki-client