$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa File: 3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa (raw, json) Hash identifier: QS+Hlb9KNPkABrLycqFYAVFcG9jlLEufPfc8f7boz4U= Subject key identifier: 89:0D:E9:FE:8E:12:D2:F6:FB:08:4A:A9:D7:E6:A9:28:FB:3F:DD:65 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584E2AD45A5C580CF9557A742780 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 16509 IP address blocks: 192.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:5a:5c:58:0c:f9:55:7a:74:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=fa5d8422-575d-4cbf-8468-baf26980ef73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:9a:66:59:8a:9b:14:4a:34:a9:0f:0c:c0: cd:c9:ef:38:2d:1f:4a:8f:1b:b6:e0:39:32:86:92: 6a:23:db:68:e9:54:21:f6:a7:a1:1c:7e:a9:37:9f: 49:61:10:d7:ff:be:ec:43:b4:e0:08:3b:bf:97:a3: 88:f3:0f:3d:8b:a0:81:33:11:27:0c:2e:3d:49:ec: 52:cf:1c:aa:f1:55:4f:3d:13:de:ea:7c:c2:3c:85: 5f:15:96:52:07:a0:f8:d5:1a:9c:1f:c1:34:77:2a: dc:2f:a0:a5:4c:6c:da:ad:a6:ea:87:59:99:b1:9e: 5f:81:c6:3d:e9:38:6d:52:28:b1:45:36:0c:24:bc: 08:12:14:52:17:c2:60:98:1a:8c:3d:71:f9:c3:14: 7b:7c:9a:31:06:a9:07:91:67:48:38:39:e3:aa:1c: ce:1d:1c:e6:90:2a:b2:bf:c8:f7:c3:2f:7e:71:80: 40:42:dc:e6:87:18:6f:4f:f9:8b:92:f6:7c:fe:67: fe:9e:9f:9f:2c:86:14:e2:ba:84:6c:7f:b6:a5:78: a4:b2:b6:6b:0c:96:37:68:4c:a2:69:d8:b9:03:2e: df:c2:12:8c:71:f8:8e:c4:6d:3d:2b:7b:93:74:ac: 4a:69:af:1f:d2:f2:f3:1f:89:7c:b1:bd:be:5e:1d: 57:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0D:E9:FE:8E:12:D2:F6:FB:08:4A:A9:D7:E6:A9:28:FB:3F:DD:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b0:86:4a:ec:5c:4f:71:1c:ef:26:07:1d:d8:f7:f1:e2:8b: bf:ad:8e:db:3b:fd:e2:5b:3e:c6:7e:03:1d:e7:e2:c4:1c:59: 86:b6:25:97:c2:4f:39:2b:eb:ac:c7:82:2b:09:8a:5d:37:40: 4b:f0:7b:dc:be:ac:0c:41:e9:7f:08:72:96:e6:c4:76:7b:e2: 92:3b:13:d2:19:7e:f2:ec:43:3d:4f:b6:7a:60:42:99:f0:7a: 26:93:01:05:80:a5:8f:03:10:03:c9:0f:87:42:56:6d:d4:53: a7:39:be:ff:47:2c:10:69:19:35:a7:d5:c5:14:da:2a:d9:00: a8:f0:7b:b6:71:08:66:57:bc:1d:54:6b:a4:81:0f:23:57:99: f9:b8:98:9e:43:e7:c1:22:10:50:ac:88:08:55:f3:0c:4a:8c: c4:55:d1:04:e5:b7:d8:39:23:5a:a8:cc:1d:ce:ca:05:06:f3: 41:55:87:64:ff:93:d7:c7:00:b4:cd:29:c9:1d:39:3b:e6:76: 75:66:56:53:f4:17:4e:fc:83:e3:b0:6d:0c:46:79:8e:92:9e: 33:0a:0e:27:7b:53:6f:61:0f:a4:8c:fd:47:58:36:06:94:75: 57:4a:eb:52:0f:40:b0:04:22:b1:d7:fc:4c:72:e2:f9:f2:23: 3c:77:30:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1FpcWAz5VXp0J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk ZmE1ZDg0MjItNTc1ZC00Y2JmLTg0NjgtYmFmMjY5ODBlZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyCaZlmKmxRKNKkPDMDNye84LR9Kjxu24Dky hpJqI9to6VQh9qehHH6pN59JYRDX/77sQ7TgCDu/l6OI8w89i6CBMxEnDC49SexS zxyq8VVPPRPe6nzCPIVfFZZSB6D41RqcH8E0dyrcL6ClTGzarabqh1mZsZ5fgcY9 6ThtUiixRTYMJLwIEhRSF8JgmBqMPXH5wxR7fJoxBqkHkWdIODnjqhzOHRzmkCqy v8j3wy9+cYBAQtzmhxhvT/mLkvZ8/mf+np+fLIYU4rqEbH+2pXiksrZrDJY3aEyi adi5Ay7fwhKMcfiOxG09K3uTdKxKaa8f0vLzH4l8sb2+Xh1XOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkN6f6OEtL2+whKqdfmqSj7P91lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvM2Q4NzYwNDAtNjE1Yi0z ZmQ1LWI2YzctYjYzZjhjYzAwZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqwhkrsXE9xHO8mBx3Y9/Hii7+tjts7/eJbPsZ+Ax3n4sQcWYa2JZfC Tzkr66zHgisJil03QEvwe9y+rAxB6X8IcpbmxHZ74pI7E9IZfvLsQz1PtnpgQpnw eiaTAQWApY8DEAPJD4dCVm3UU6c5vv9HLBBpGTWn1cUU2irZAKjwe7ZxCGZXvB1U a6SBDyNXmfm4mJ5D58EiEFCsiAhV8wxKjMRV0QTlt9g5I1qozB3OygUG80FVh2T/ k9fHALTNKckdOTvmdnVmVlP0F078g+OwbQxGeY6SnjMKDid7U29hD6SM/UdYNgaU dVdK61IPQLAEIrHX/Exy4vnyIzx3MGQ= -----END CERTIFICATE-----Generated at Wed Jun 24 22:21:17 2026 by rpki-client