$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa File: ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa (raw, json) Hash identifier: 3h1H4Rqn0WU6fzW/08cCRY0t/YbEyB9HLleuhZeehVI= Subject key identifier: D6:11:0E:67:9A:44:F9:14:32:CB:3B:F2:95:F6:32:26:8B:BB:8B:13 Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F4328584E1E4452D7A12BD8E9985D1FC0 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 216.24.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:52:d7:a1:2b:d8:e9:98:5d:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=256fa12b-d0e3-4100-9a77-630cccb95a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8e:70:f6:cd:40:11:4e:5d:34:55:4b:ec:ef: af:41:ef:25:7e:7c:96:7d:07:02:23:d0:83:50:58: a0:39:79:c5:30:9c:e7:6b:75:92:07:76:ea:7e:80: 2d:8a:d9:c5:79:63:06:a6:38:db:da:4e:0d:06:e8: 52:27:17:3b:a2:74:ea:3a:a5:36:1c:00:a5:66:28: 8d:ec:8f:66:8b:34:8a:5c:cd:2d:50:cf:05:d4:64: 36:2a:fe:8f:ce:a6:cd:49:62:b0:4c:5f:af:cb:b0: 39:8b:25:2e:90:93:3c:e2:fe:e8:a2:72:8d:83:2b: 87:64:0f:58:ca:56:fc:05:ae:a0:eb:c3:af:3c:bd: e9:b1:b8:6e:95:3b:9c:08:49:47:7e:7f:2b:da:73: dc:02:9f:dd:a4:50:66:a0:cb:39:2d:eb:4b:cd:9d: 4e:1d:a8:5c:4b:6b:14:34:44:13:f0:1f:60:c0:9a: e8:1e:c6:51:df:1a:ce:dd:ab:5c:9f:1d:56:54:4e: 7f:4f:6c:78:9a:61:dd:2b:49:b5:a6:eb:b9:9f:57: 9d:d9:cb:6b:d0:f9:55:54:76:81:88:3c:46:ce:be: aa:cc:54:44:53:d1:e6:f6:ab:0e:b6:56:5e:54:f0: 22:b7:00:53:aa:f9:cc:d5:1e:46:9b:b6:76:41:96: 04:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:11:0E:67:9A:44:F9:14:32:CB:3B:F2:95:F6:32:26:8B:BB:8B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 216.24.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f8:17:90:30:ba:50:c9:ea:64:74:ae:dd:8d:45:c1:34:d0: 7e:3a:93:df:66:c1:e5:f2:18:15:01:3d:6e:c2:1a:4c:31:28: 92:db:a3:cf:e4:c6:c9:21:06:5a:ad:12:c6:61:f4:3d:50:fc: d8:96:4e:8e:4a:3e:69:3d:d5:5e:27:33:11:ee:9b:05:bc:cf: 4a:c1:94:93:9e:87:de:2f:db:45:23:40:5d:d8:a2:73:01:eb: c3:de:ca:f8:0f:58:4d:9f:a8:ca:a5:50:65:34:a7:27:d5:0d: bc:60:c9:82:fd:9c:79:81:bd:f0:31:ed:2a:6f:ff:54:df:4f: f8:4a:de:51:d1:f2:aa:34:76:e8:c7:0c:7a:bf:84:eb:ef:7d: 7d:ba:e5:ef:ad:49:a9:e6:9a:5a:db:87:22:d9:a3:52:f3:a8: 41:f8:20:41:2b:1f:58:b2:c3:c0:2f:1a:38:21:06:82:ab:3f: b9:f6:25:32:f4:0a:68:91:cb:b9:93:01:5c:bb:29:ee:c6:d2: a2:2a:9f:cb:4d:8f:d5:cf:44:4d:1b:00:30:50:3e:96:73:d7: e4:76:15:f8:c0:c1:56:cf:7c:6e:ab:93:db:3b:02:6e:63:43: fe:01:15:33:49:6d:7b:c8:e5:07:43:3b:39:1d:36:0e:7c:c1: 0f:4c:de:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFLXoSvY6ZhdH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk MjU2ZmExMmItZDBlMy00MTAwLTlhNzctNjMwY2NjYjk1YTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY5w9s1AEU5dNFVL7O+vQe8lfnyWfQcCI9CD UFigOXnFMJzna3WSB3bqfoAtitnFeWMGpjjb2k4NBuhSJxc7onTqOqU2HAClZiiN 7I9mizSKXM0tUM8F1GQ2Kv6PzqbNSWKwTF+vy7A5iyUukJM84v7oonKNgyuHZA9Y ylb8Ba6g68OvPL3psbhulTucCElHfn8r2nPcAp/dpFBmoMs5LetLzZ1OHahcS2sU NEQT8B9gwJroHsZR3xrO3atcnx1WVE5/T2x4mmHdK0m1puu5n1ed2ctr0PlVVHaB iDxGzr6qzFREU9Hm9qsOtlZeVPAitwBTqvnM1R5Gm7Z2QZYEuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYRDmeaRPkUMss78pX2MiaLu4sTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvZWMzMGZiZDctMmU5MS0z YzhjLThkYjAtMzY3Mzc4N2UxOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/4F5AwulDJ6mR0rt2NRcE00H46k99mweXyGBUBPW7CGkwxKJLbo8/k xskhBlqtEsZh9D1Q/NiWTo5KPmk91V4nMxHumwW8z0rBlJOeh94v20UjQF3YonMB 68PeyvgPWE2fqMqlUGU0pyfVDbxgyYL9nHmBvfAx7Spv/1TfT/hK3lHR8qo0dujH DHq/hOvvfX265e+tSanmmlrbhyLZo1LzqEH4IEErH1iyw8AvGjghBoKrP7n2JTL0 CmiRy7mTAVy7Ke7G0qIqn8tNj9XPRE0bADBQPpZz1+R2FfjAwVbPfG6rk9s7Am5j Q/4BFTNJbXvI5QdDOzkdNg58wQ9M3sU= -----END CERTIFICATE-----Generated at Sat Jun 13 10:02:42 2026 by rpki-client