$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa File: 43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa (raw, json) Hash identifier: D7fDY0mtVFgHTjE3ggDT3xYHwdoeOFfZOw0sEnLrH3E= Subject key identifier: 39:C9:C9:C7:64:8B:E8:78:B1:15:B9:0D:D3:9C:D4:19:B0:73:6F:EA Certificate issuer: /CN=c799c313-5f2f-4c52-84c3-f723dee23f2a Certificate serial: 010D0C9F4328584DFA706F78B92C5C25DC007D00 Authority key identifier: 07:AA:E2:8B:A4:EC:F8:B4:81:9B:4E:25:D2:0C:21:C8:4C:E9:6E:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 17378 IP address blocks: 204.239.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:6f:78:b9:2c:5c:25:dc:00:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c799c313-5f2f-4c52-84c3-f723dee23f2a Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=eb97eddc-6918-48dc-9219-9fcbd4939d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:66:56:a6:bc:b5:9d:3f:4c:aa:3b:8f:cb:a7: 43:83:38:5a:d9:8e:46:29:44:0b:1f:4f:28:52:61: 4f:7b:52:96:c5:4d:bd:6d:30:83:fc:2e:70:b3:c6: 62:9d:e7:7d:b1:bd:7a:49:bd:35:70:1a:9a:f2:4d: 36:8e:17:0c:3e:d7:67:c9:04:6b:eb:e7:56:83:19: 05:b2:36:81:3c:0a:ed:29:69:d4:66:ed:88:b1:e3: 3e:9b:17:5b:66:92:8a:64:46:c1:9d:72:3f:c1:05: a4:94:3e:43:f1:a7:95:53:d1:41:a6:d5:58:f3:b1: 4b:9b:a9:68:3d:aa:fa:2c:bd:4a:96:d3:5a:82:73: ba:a1:43:65:a9:91:43:4e:70:20:c2:3d:7b:f2:80: 75:13:69:6e:47:5d:61:47:5b:72:2a:e2:85:74:dc: b6:39:9e:1b:cb:49:df:ee:13:54:4c:7c:93:a2:f1: 80:11:9d:cc:ad:59:cd:f0:d2:14:b4:88:f1:c4:88: 9b:c3:3d:38:07:8c:68:e4:5f:3f:43:8e:68:fd:ba: e6:60:59:31:53:aa:cd:72:17:92:7e:b8:c3:eb:ef: 55:61:e3:e0:06:6f:ea:9a:35:6d:03:47:fc:77:59: 00:da:14:00:c6:2b:4f:34:28:94:e3:69:5e:60:66: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C9:C9:C7:64:8B:E8:78:B1:15:B9:0D:D3:9C:D4:19:B0:73:6F:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.crl X509v3 Authority Key Identifier: keyid:07:AA:E2:8B:A4:EC:F8:B4:81:9B:4E:25:D2:0C:21:C8:4C:E9:6E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer sbgp-ipAddrBlock: critical IPv4: 204.239.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:9e:aa:91:f8:f8:df:ed:0b:88:ec:29:6f:07:ee:4f:cc:a6: d3:70:19:3f:3d:63:3d:ed:67:85:d1:0a:d4:7b:c1:11:35:d6: f3:43:13:a8:c9:35:d1:45:22:6c:96:bf:65:1c:ea:64:bf:81: f2:fe:60:3b:d1:f3:1a:6a:d9:18:11:98:07:93:a4:d8:43:1e: c5:f3:70:cc:d7:a1:b6:4c:9c:13:75:26:6e:01:8c:ff:5a:4a: c8:76:53:81:ad:b2:b4:62:fb:97:fc:65:77:5d:58:60:fe:b1: ab:3c:d7:f5:a8:88:9b:e0:ad:c6:8e:9d:a0:e7:fe:66:a4:8e: 07:43:3e:b1:c4:c0:56:60:73:b6:bb:7b:68:0d:dc:bd:a8:74: a6:ee:b4:d9:cd:e3:43:4c:f0:60:9b:11:51:bc:32:75:29:7b: b2:23:86:84:3e:26:92:3a:1a:33:20:19:2c:ff:c7:9b:40:40: 6d:28:ac:6b:88:59:a6:8d:15:ff:37:56:1b:cf:15:e3:e8:ed: fb:54:18:ac:79:bc:b5:e6:f9:b7:23:e3:6e:d1:52:a4:73:2c: 85:51:67:96:46:90:f4:ad:d8:fb:4b:97:92:30:2f:bb:be:e2: f9:17:b2:41:2d:ab:68:8c:da:9d:ab:d0:e2:6a:cc:3b:5a:5a: 5f:15:46:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cG94uSxcJdwAfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5OWMzMTMtNWYyZi00YzUyLTg0YzMtZjcyM2RlZTIz ZjJhMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZWI5N2VkZGMtNjkxOC00OGRjLTkyMTktOWZjYmQ0OTM5ZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42ZWpry1nT9MqjuPy6dDgzha2Y5GKUQLH08o UmFPe1KWxU29bTCD/C5ws8Zined9sb16Sb01cBqa8k02jhcMPtdnyQRr6+dWgxkF sjaBPArtKWnUZu2IseM+mxdbZpKKZEbBnXI/wQWklD5D8aeVU9FBptVY87FLm6lo Par6LL1KltNagnO6oUNlqZFDTnAgwj178oB1E2luR11hR1tyKuKFdNy2OZ4by0nf 7hNUTHyTovGAEZ3MrVnN8NIUtIjxxIibwz04B4xo5F8/Q45o/brmYFkxU6rNcheS frjD6+9VYePgBm/qmjVtA0f8d1kA2hQAxitPNCiU42leYGZL4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnJycdki+h4sRW5DdOc1Bmwc2/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzk5 YzMxMy01ZjJmLTRjNTItODRjMy1mNzIzZGVlMjNmMmEvNDNlY2UwY2UtY2U4MS0z ZThmLTg4ZDgtYTZkNmRjMzcxODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzc5OWMzMTMtNWYyZi00YzUyLTg0 YzMtZjcyM2RlZTIzZjJhL2M3OTljMzEzLTVmMmYtNGM1Mi04NGMzLWY3MjNkZWUy M2YyYS5jcmwwHwYDVR0jBBgwFoAUB6rii6Ts+LSBm04l0gwhyEzpbhcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNzk5YzMxMy01ZjJmLTRjNTItODRjMy1mNzIz ZGVlMjNmMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKeqpH4+N/tC4jsKW8H7k/MptNwGT89Yz3tZ4XRCtR7wRE11vNDE6jJ NdFFImyWv2Uc6mS/gfL+YDvR8xpq2RgRmAeTpNhDHsXzcMzXobZMnBN1Jm4BjP9a Ssh2U4GtsrRi+5f8ZXddWGD+sas81/WoiJvgrcaOnaDn/makjgdDPrHEwFZgc7a7 e2gN3L2odKbutNnN40NM8GCbEVG8MnUpe7IjhoQ+JpI6GjMgGSz/x5tAQG0orGuI WaaNFf83VhvPFePo7ftUGKx5vLXm+bcj427RUqRzLIVRZ5ZGkPSt2PtLl5IwL7u+ 4vkXskEtq2iM2p2r0OJqzDtaWl8VRoA= -----END CERTIFICATE-----Generated at Wed Jun 3 20:14:57 2026 by rpki-client