$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa File: aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa (raw, json) Hash identifier: kYa/MzjyKL1yu9zmSM1toEKRwmqTEndJzK3WOmh9vfk= Subject key identifier: 10:0A:2B:85:40:E9:AB:5E:7F:D3:96:09:C1:BC:6E:B3:02:37:0A:4C Certificate issuer: /CN=4f12be01-5f55-4434-8f8a-921808f7c306 Certificate serial: 010D0C9F4328584E3069ACDBB50F75DB455B7980 Authority key identifier: B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa Signing time: Tue 16 Jun 2026 09:00:12 +0000 ROA not before: Tue 16 Jun 2026 09:00:12 +0000 ROA not after: Mon 14 Sep 2026 09:00:12 +0000 asID: 62582 IP address blocks: 199.5.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:69:ac:db:b5:0f:75:db:45:5b:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f12be01-5f55-4434-8f8a-921808f7c306 Validity Not Before: Jun 16 09:00:12 2026 GMT Not After : Sep 14 09:00:12 2026 GMT Subject: CN=bee7f7b3-e5ba-4f32-aaf3-20ca07828b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:31:aa:5a:3b:a9:59:c4:f7:95:51:f4:2e:d4: 4a:af:d7:7f:27:d7:34:b3:1d:bc:c9:1c:09:4c:3c: 93:a5:d2:a8:ab:ff:13:79:e3:07:05:4a:10:24:4d: ec:a0:00:2c:63:b7:b1:69:11:1f:2b:02:70:8d:bb: dc:5d:70:2c:18:88:a9:2a:71:8c:85:b5:d5:33:a6: c9:4e:38:67:c0:a6:42:e4:85:2c:84:66:ae:47:b4: a3:da:04:15:20:e7:5c:8a:6b:89:25:a5:07:96:e4: ba:ab:cd:dc:49:8e:4a:ca:65:c6:59:86:6b:f4:5d: 72:17:e0:fb:31:52:4a:7a:a1:72:69:0a:a0:fd:c1: 1e:fc:98:28:42:48:53:ee:d8:b1:fe:c6:35:3b:62: a5:30:90:33:23:72:fe:c7:2f:a7:35:56:56:4c:a5: f8:e9:7f:e0:7e:1b:c6:eb:27:e9:e8:18:e9:ca:bc: 11:87:78:ba:7f:03:cd:89:a5:66:3e:86:57:f9:c6: 63:a6:0b:8d:3c:98:94:a4:a9:74:4f:db:3b:ce:ed: dc:4c:34:fd:d9:eb:6f:d2:2c:4b:7b:b4:82:29:30: d7:e1:58:0b:bf:ae:e6:59:83:f1:40:30:ea:a5:58: 9b:a1:fb:04:14:7e:f8:89:4b:27:d4:f8:50:26:d1: 18:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:2B:85:40:E9:AB:5E:7F:D3:96:09:C1:BC:6E:B3:02:37:0A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl X509v3 Authority Key Identifier: keyid:B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer sbgp-ipAddrBlock: critical IPv4: 199.5.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b7:34:90:ba:57:96:60:81:b8:21:26:6d:16:5e:5d:a7:11: 94:21:ba:1c:f4:4c:1b:fc:04:c2:79:fb:e1:c3:f3:2c:e3:e8: 81:65:2a:e0:ca:69:b3:7e:7c:7e:ed:bf:f0:a8:ff:99:66:a9: 04:c4:5d:a0:40:24:51:9a:a6:1f:ee:21:f3:f3:b2:93:92:b1: 26:f3:ae:b9:da:a9:ae:90:6b:9f:bf:eb:ab:4d:76:7c:de:7f: 2b:7e:29:1e:85:27:f1:c5:46:35:35:0d:b4:e0:9e:21:b6:cd: 1f:a2:c0:2f:99:30:d7:d6:b3:7f:b8:b2:01:fe:1b:6b:e9:14: 5b:d9:7f:e6:09:30:6e:e2:cc:67:56:1e:b5:c4:e9:d5:91:26: 16:da:ab:57:df:cf:61:79:50:f3:1b:8b:57:ee:db:4c:c6:05: 0c:03:89:a3:6d:4c:1f:a8:04:28:aa:4d:91:8a:7d:20:6f:39: 54:bc:b0:8c:6e:06:3a:c9:e2:94:f3:f5:60:5c:85:8b:24:12: 20:a6:94:6d:c1:e3:d1:4d:e7:12:f1:d0:44:3e:f6:63:7e:fa: 6c:dc:43:c1:13:77:b3:47:db:19:9d:f6:a0:1f:51:fa:e2:10: 20:61:4b:0d:21:10:de:cc:28:ee:e4:aa:14:00:2e:71:2d:b2: fa:7a:01:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4waazbtQ9120VbeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxMmJlMDEtNWY1NS00NDM0LThmOGEtOTIxODA4Zjdj MzA2MB4XDTI2MDYxNjA5MDAxMloXDTI2MDkxNDA5MDAxMlowLzEtMCsGA1UEAxMk YmVlN2Y3YjMtZTViYS00ZjMyLWFhZjMtMjBjYTA3ODI4YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzGqWjupWcT3lVH0LtRKr9d/J9c0sx28yRwJ TDyTpdKoq/8TeeMHBUoQJE3soAAsY7exaREfKwJwjbvcXXAsGIipKnGMhbXVM6bJ TjhnwKZC5IUshGauR7Sj2gQVIOdcimuJJaUHluS6q83cSY5KymXGWYZr9F1yF+D7 MVJKeqFyaQqg/cEe/JgoQkhT7tix/sY1O2KlMJAzI3L+xy+nNVZWTKX46X/gfhvG 6yfp6BjpyrwRh3i6fwPNiaVmPoZX+cZjpguNPJiUpKl0T9s7zu3cTDT92etv0ixL e7SCKTDX4VgLv67mWYPxQDDqpVibofsEFH74iUsn1PhQJtEYfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAKK4VA6atef9OWCcG8brMCNwpMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEy YmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4MDhmN2MzMDYvYWE5MGUwOWUtODExMy0z ZTMzLWJlYWUtMWEzYjQ3Y2RjMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGYxMmJlMDEtNWY1NS00NDM0LThm OGEtOTIxODA4ZjdjMzA2LzRmMTJiZTAxLTVmNTUtNDQzNC04ZjhhLTkyMTgwOGY3 YzMwNi5jcmwwHwYDVR0jBBgwFoAUtLv3vFje/C9daN2yZNjbWRopEGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEyYmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4 MDhmN2MzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW3NJC6V5ZggbghJm0WXl2nEZQhuhz0TBv8BMJ5++HD8yzj6IFlKuDK abN+fH7tv/Co/5lmqQTEXaBAJFGaph/uIfPzspOSsSbzrrnaqa6Qa5+/66tNdnze fyt+KR6FJ/HFRjU1DbTgniG2zR+iwC+ZMNfWs3+4sgH+G2vpFFvZf+YJMG7izGdW HrXE6dWRJhbaq1ffz2F5UPMbi1fu20zGBQwDiaNtTB+oBCiqTZGKfSBvOVS8sIxu BjrJ4pTz9WBchYskEiCmlG3B49FN5xLx0EQ+9mN++mzcQ8ETd7NH2xmd9qAfUfri ECBhSw0hEN7MKO7kqhQALnEtsvp6Aag= -----END CERTIFICATE-----Generated at Fri Jun 26 23:07:23 2026 by rpki-client