$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa File: 70158a40-1c67-3cb3-a454-85f651195ef6.roa (raw, json) Hash identifier: 8aE6OVUPaYXoVX7KDMTS3yjoPqyPTMppkzqEaZ+5GYk= Subject key identifier: F6:4D:87:9B:06:1F:14:C8:4B:93:A5:58:AE:25:21:47:5D:BD:B5:3B Certificate issuer: /CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Certificate serial: 010D0C9F4328584E147ED6E49050D56BA13B4200 Authority key identifier: 92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 397423 IP address blocks: 216.239.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:d6:e4:90:50:d5:6b:a1:3b:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=2d310285-d1d9-4203-b5b3-67ac102e4320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:07:10:7e:67:6f:38:96:b5:93:14:e0:7b: 15:da:29:17:ee:24:73:cd:37:d7:6c:1a:21:c2:25: 4f:25:d9:f9:28:ea:11:3b:61:82:2e:11:09:4c:e9: dc:c5:27:38:ab:39:3a:65:74:42:7f:93:44:ad:1a: 14:75:7e:b0:d2:13:33:a3:8b:d9:42:48:c8:31:58: 3f:01:5e:cf:89:c8:62:82:92:e3:41:0b:be:57:3f: bb:be:a6:18:98:cb:a6:07:39:a0:46:19:01:0b:d5: 99:0b:53:95:f0:ab:b6:b0:3c:2c:20:f5:b5:43:5e: fb:81:66:77:39:91:73:67:a9:0f:d7:d5:2a:75:36: b9:76:5c:ea:cb:8b:e4:15:ff:e9:d8:54:55:96:a1: 9c:e2:bb:c7:2e:99:d6:5d:ce:c6:13:1c:24:b5:05: 01:87:b3:c5:93:9c:d3:85:77:11:ab:e5:e0:8c:4a: a1:3e:85:21:28:a4:8d:44:9d:ea:96:37:aa:aa:9a: d8:6e:46:13:aa:4a:21:b9:d1:a4:35:4f:d5:42:a5: 3f:b2:c1:b7:6b:f6:58:30:aa:9f:8b:d7:c6:88:ad: e4:7a:dd:72:40:cc:07:a5:8c:c9:fd:19:14:f8:54: e1:2d:e7:e0:bd:81:ff:c9:8d:5c:d5:9a:b1:e9:ad: b3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4D:87:9B:06:1F:14:C8:4B:93:A5:58:AE:25:21:47:5D:BD:B5:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl X509v3 Authority Key Identifier: keyid:92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer sbgp-ipAddrBlock: critical IPv4: 216.239.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a7:48:07:9a:25:52:07:74:b2:c1:88:6c:fe:62:1b:9a:a6: d4:93:ef:ec:e9:bf:f6:7a:9c:64:a2:f4:32:89:27:e7:e2:ca: 0a:41:c8:cf:c8:42:59:37:f4:ac:09:e1:28:84:75:e8:e2:fe: 01:00:9b:34:d9:22:ba:d1:e7:82:63:81:6b:6a:b6:bd:b7:5a: 24:a7:7e:b1:20:08:fa:26:a5:f4:69:41:46:98:48:00:f6:12: f7:ca:fd:db:73:d2:cf:dd:90:df:a3:4f:d3:ab:ed:5c:34:bd: 80:20:5c:9b:88:5e:b9:b2:bb:54:18:71:db:f2:1d:d1:fa:3a: 6b:75:fd:83:5f:b6:d7:30:7e:47:7a:82:75:ce:69:06:23:4a: 92:f3:c6:02:d3:34:b4:79:b1:37:ce:80:0a:e1:e3:3f:42:b8: c6:ff:bd:10:ad:b9:09:ba:d8:82:a9:66:12:c0:0b:20:72:b4: 3b:e3:80:b7:3a:d8:f0:fc:1f:6f:2c:76:a2:95:46:15:33:ea: 51:25:18:1e:f8:68:b5:81:0f:d3:ed:ff:05:4e:8c:7d:45:42: 67:3a:dc:ad:6f:c4:5e:a1:bd:52:28:6b:7b:89:88:10:30:75: 4c:38:d2:4d:9b:10:f0:b3:1d:10:08:43:de:ac:bf:2a:e3:9e: 97:8b:e5:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftbkkFDVa6E7QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3ZDRhODQtOWYwZS00NDA4LTgyZTctODFjMDliN2M1 OTJkMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk MmQzMTAyODUtZDFkOS00MjAzLWI1YjMtNjdhYzEwMmU0MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr94HEH5nbziWtZMU4HsV2ikX7iRzzTfXbBoh wiVPJdn5KOoRO2GCLhEJTOncxSc4qzk6ZXRCf5NErRoUdX6w0hMzo4vZQkjIMVg/ AV7PichigpLjQQu+Vz+7vqYYmMumBzmgRhkBC9WZC1OV8Ku2sDwsIPW1Q177gWZ3 OZFzZ6kP19UqdTa5dlzqy4vkFf/p2FRVlqGc4rvHLpnWXc7GExwktQUBh7PFk5zT hXcRq+XgjEqhPoUhKKSNRJ3qljeqqprYbkYTqkohudGkNU/VQqU/ssG3a/ZYMKqf i9fGiK3ket1yQMwHpYzJ/RkU+FThLefgvYH/yY1c1Zqx6a2zDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZNh5sGHxTIS5OlWK4lIUddvbU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdk NGE4NC05ZjBlLTQ0MDgtODJlNy04MWMwOWI3YzU5MmQvNzAxNThhNDAtMWM2Ny0z Y2IzLWE0NTQtODVmNjUxMTk1ZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDY3ZDRhODQtOWYwZS00NDA4LTgy ZTctODFjMDliN2M1OTJkL2Q2N2Q0YTg0LTlmMGUtNDQwOC04MmU3LTgxYzA5Yjdj NTkyZC5jcmwwHwYDVR0jBBgwFoAUkvPQda9kMHx7T+8z7DqBfVdKjWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdkNGE4NC05ZjBlLTQ0MDgtODJlNy04MWMw OWI3YzU5MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2O9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKnSAeaJVIHdLLBiGz+YhuaptST7+zpv/Z6nGSi9DKJJ+fiygpByM/I Qlk39KwJ4SiEdeji/gEAmzTZIrrR54JjgWtqtr23WiSnfrEgCPompfRpQUaYSAD2 EvfK/dtz0s/dkN+jT9Or7Vw0vYAgXJuIXrmyu1QYcdvyHdH6Omt1/YNfttcwfkd6 gnXOaQYjSpLzxgLTNLR5sTfOgArh4z9CuMb/vRCtuQm62IKpZhLACyBytDvjgLc6 2PD8H28sdqKVRhUz6lElGB74aLWBD9Pt/wVOjH1FQmc63K1vxF6hvVIoa3uJiBAw dUw40k2bEPCzHRAIQ96svyrjnpeL5cU= -----END CERTIFICATE-----Generated at Wed Jun 10 03:41:00 2026 by rpki-client