$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b7b93d1b-f4de-3b1a-a8d4-d3f03f784d3e.roa File: b7b93d1b-f4de-3b1a-a8d4-d3f03f784d3e.roa (raw, json) Hash identifier: bWRJYmdCV2WyuCLRzHAwmRL/C3pbD+tYVC1+RP6Z7rE= Subject key identifier: 2A:AB:1A:60:04:78:1E:20:61:63:56:9B:7B:60:FF:7B:06:82:17:39 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584E2E8D2C793C548367756E1E80 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b7b93d1b-f4de-3b1a-a8d4-d3f03f784d3e.roa Signing time: Mon 15 Jun 2026 17:00:09 +0000 ROA not before: Mon 15 Jun 2026 17:00:09 +0000 ROA not after: Sun 13 Sep 2026 17:00:09 +0000 asID: 14618 IP address blocks: 143.13.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2e:8d:2c:79:3c:54:83:67:75:6e:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Jun 15 17:00:09 2026 GMT Not After : Sep 13 17:00:09 2026 GMT Subject: CN=30643235-8a5c-4d3a-87f2-cd42fbf6ef8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:ec:cd:74:aa:bb:c3:6f:ee:26:45:73:2e: 94:a2:ae:8f:33:e4:a8:35:52:dc:a2:8b:48:a5:b1: d2:2a:ba:71:1f:99:b2:ef:ae:3d:7b:f7:36:71:1d: f4:27:23:71:b7:e2:c2:c8:ff:74:3a:e9:26:4e:f7: 5e:e8:2e:18:22:70:2d:88:b9:f6:0d:97:0b:36:92: 6d:49:d9:dd:17:73:51:1c:47:98:4d:76:48:99:0a: bf:ef:f7:44:1d:5d:6c:2e:4c:c2:c6:82:45:42:4d: d4:e5:b7:4b:54:24:29:b9:98:10:6a:fb:fa:e0:bb: e9:d5:13:a3:8a:72:dc:6a:9c:9a:4f:ed:ad:49:5d: 18:b4:2a:80:9f:de:ae:b4:c4:6f:a3:be:f6:88:c4: de:42:3a:87:a4:59:17:d9:f8:dd:13:c7:98:7a:ff: c2:41:67:27:ca:7d:11:7e:97:72:96:dc:a5:7f:18: 94:d8:29:ca:78:1b:0d:fe:97:b6:79:44:1b:e9:4a: 57:fe:02:eb:c8:ba:60:20:77:4f:ad:4c:5d:9b:cd: 6d:4f:d0:41:22:69:d2:c0:47:61:57:c6:88:83:e2: 32:c7:dd:5d:73:b4:59:5f:e7:d1:82:80:91:aa:85: 5e:06:31:9c:51:73:c3:df:ef:21:66:53:85:f8:87: 7c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AB:1A:60:04:78:1E:20:61:63:56:9B:7B:60:FF:7B:06:82:17:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b7b93d1b-f4de-3b1a-a8d4-d3f03f784d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 143.13.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4e:23:11:c4:33:c0:0a:be:b3:dc:30:5e:61:d9:90:7d:18: b3:3e:50:9f:a1:88:1c:68:83:2c:c1:20:ad:59:c8:45:9c:7c: e7:28:97:80:13:a5:ed:33:8b:ab:7c:af:01:81:e7:84:6a:6b: 3f:c3:a9:f6:95:c5:4c:67:7a:b6:a0:d0:30:67:b2:da:cf:82: 44:2b:6b:51:23:9a:c1:c6:16:5d:1d:a2:50:69:05:31:5a:1f: 56:12:ed:1c:cd:0b:d8:94:6b:c0:fb:c3:13:95:c7:f4:ef:f9: 17:99:69:b3:e0:6b:75:b0:12:94:06:7e:44:3b:09:d0:03:34: d2:70:e8:fc:df:19:43:8e:40:44:12:7e:cf:6b:2f:83:d5:ec: 47:2f:61:c6:d7:d4:a5:b6:06:e4:99:85:e7:0e:b2:e9:24:21: a2:00:04:94:01:fc:63:bf:86:95:8d:d3:a0:c8:f7:af:ba:1a: 29:32:22:c2:35:39:b8:0b:b3:00:67:da:b3:48:0d:8c:5c:8f: 76:1d:9d:3c:32:60:2a:cd:88:37:04:fc:72:82:37:c8:50:ac: 0d:fb:87:49:69:ed:03:d6:e3:05:cb:ba:13:38:3f:ee:71:e8: f2:9b:82:28:47:e9:14:9b:a3:ee:9c:ec:a3:54:4a:e6:d2:82: c4:da:2b:24 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4ujSx5PFSDZ3VuHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDYxNTE3MDAwOVoXDTI2MDkxMzE3MDAwOVowLzEtMCsGA1UEAxMk MzA2NDMyMzUtOGE1Yy00ZDNhLTg3ZjItY2Q0MmZiZjZlZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8rszXSqu8Nv7iZFcy6Uoq6PM+SoNVLcootI pbHSKrpxH5my7649e/c2cR30JyNxt+LCyP90OukmTvde6C4YInAtiLn2DZcLNpJt SdndF3NRHEeYTXZImQq/7/dEHV1sLkzCxoJFQk3U5bdLVCQpuZgQavv64Lvp1ROj inLcapyaT+2tSV0YtCqAn96utMRvo772iMTeQjqHpFkX2fjdE8eYev/CQWcnyn0R fpdyltylfxiU2CnKeBsN/pe2eUQb6UpX/gLryLpgIHdPrUxdm81tT9BBImnSwEdh V8aIg+Iyx91dc7RZX+fRgoCRqoVeBjGcUXPD3+8hZlOF+Id88QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCqrGmAEeB4gYWNWm3tg/3sGghc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvYjdiOTNkMWItZjRkZS0z YjFhLWE4ZDQtZDNmMDNmNzg0ZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjw0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqk4jEcQzwAq+s9wwXmHZkH0Ysz5Qn6GIHGiDLMEgrVnIRZx85yiXgBOl 7TOLq3yvAYHnhGprP8Op9pXFTGd6tqDQMGey2s+CRCtrUSOawcYWXR2iUGkFMVof VhLtHM0L2JRrwPvDE5XH9O/5F5lps+BrdbASlAZ+RDsJ0AM00nDo/N8ZQ45ARBJ+ z2svg9XsRy9hxtfUpbYG5JmF5w6y6SQhogAElAH8Y7+GlY3ToMj3r7oaKTIiwjU5 uAuzAGfas0gNjFyPdh2dPDJgKs2INwT8coI3yFCsDfuHSWntA9bjBcu6Ezg/7nHo 8puCKEfpFJuj7pzso1RK5tKCxNorJA== -----END CERTIFICATE-----Generated at Mon Jul 6 18:15:47 2026 by rpki-client