$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa File: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (raw, json) Hash identifier: 0/66J0TIlIKdlvMRVdc4TuWJrxHGU03npHTdX3QW4Vw= Subject key identifier: 90:AC:6B:4D:BA:3F:F5:CA:19:2B:A8:14:1D:0B:45:01:48:BB:03:09 Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F4328584E1E4450ED0A069BD715E6F540 Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 54334 IP address blocks: 52.119.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:50:ed:0a:06:9b:d7:15:e6:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=01b6c838-f39b-49fd-b69e-51e38e831f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:c1:fb:91:04:b3:c1:3a:94:03:bd:30:f3: fd:e8:c4:1f:ca:5b:92:c9:c8:1d:50:38:10:1f:68: 63:cc:1a:e2:be:63:ff:f2:c7:bd:55:74:80:7b:d7: ca:03:f5:5d:03:a4:5f:c4:c1:23:18:b1:d4:ac:7d: 5b:74:0c:93:57:8f:af:6c:45:b5:00:30:21:32:31: 24:45:b5:67:09:2d:31:b0:7c:89:51:8e:40:96:f6: 53:49:f5:cd:3a:75:0e:7d:65:10:bb:61:eb:f9:28: b4:88:d6:99:61:f5:22:ec:f8:f9:2d:ac:e6:16:2e: 49:c4:39:83:18:4c:a5:90:26:94:ce:fa:39:17:e5: 28:50:f6:7b:34:9e:d0:aa:b5:15:9e:03:b2:93:42: 8d:b6:6b:6c:0c:73:3c:e8:24:94:05:40:ad:64:87: 16:6c:00:75:36:74:70:ae:4d:ea:21:04:4d:12:94: d2:62:76:d0:4e:a7:ff:a8:64:a3:6f:d7:5b:1e:d8: 0c:d5:6f:61:4b:e4:61:08:af:7c:e2:68:ca:48:3d: 0a:b3:d8:6e:27:24:1d:40:5b:84:6b:b6:41:58:3a: 06:e4:6d:0f:a1:0e:65:4c:f9:d3:b2:12:b2:2d:33: a8:41:d6:b3:59:17:c9:60:95:4a:50:17:b7:19:61: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AC:6B:4D:BA:3F:F5:CA:19:2B:A8:14:1D:0B:45:01:48:BB:03:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: 52.119.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:90:1a:51:d2:a6:9b:1e:c2:65:a9:1e:de:8b:be:1c:2e:1d: 78:e3:41:36:bb:9f:5b:50:7d:09:cf:b5:0b:b7:72:c6:b9:dd: 29:25:93:3b:95:59:08:7f:24:a1:80:7f:61:db:86:b0:01:10: c6:c4:73:de:8a:73:ef:5c:07:cb:8d:9b:ad:6e:45:65:8d:9e: 78:c3:63:f5:a7:01:5a:e7:cd:bc:80:9a:5d:55:25:21:74:16: 89:76:b1:7f:10:3c:4c:88:5e:72:6e:35:22:74:ea:aa:63:fe: e2:8f:66:49:58:e1:3d:1a:31:1b:7c:63:9d:ea:36:05:9b:b1: 23:1c:f4:16:d0:61:15:3c:d6:22:01:81:fe:65:5c:6c:de:b2: 0f:81:42:85:b5:0d:27:63:58:b4:99:cb:a0:c9:eb:68:6e:53: 95:80:d6:2a:94:ee:cd:cc:88:69:1a:e3:98:7a:88:e5:17:fe: 39:13:a1:32:27:9e:5f:7e:42:0b:88:7c:78:97:7e:b1:a0:da: 20:e8:5c:56:f3:10:a9:58:fd:c4:67:eb:0c:1d:91:76:b7:88: f1:10:a4:35:8d:71:cd:f0:18:ae:af:24:c2:28:e8:b7:19:49: e4:6b:59:10:0a:32:1a:08:2f:59:c8:12:f2:5d:45:de:38:19: 04:65:25:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFDtCgab1xXm9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk MDFiNmM4MzgtZjM5Yi00OWZkLWI2OWUtNTFlMzhlODMxZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl3B+5EEs8E6lAO9MPP96MQfyluSycgdUDgQ H2hjzBrivmP/8se9VXSAe9fKA/VdA6RfxMEjGLHUrH1bdAyTV4+vbEW1ADAhMjEk RbVnCS0xsHyJUY5AlvZTSfXNOnUOfWUQu2Hr+Si0iNaZYfUi7Pj5LazmFi5JxDmD GEylkCaUzvo5F+UoUPZ7NJ7QqrUVngOyk0KNtmtsDHM86CSUBUCtZIcWbAB1NnRw rk3qIQRNEpTSYnbQTqf/qGSjb9dbHtgM1W9hS+RhCK984mjKSD0Ks9huJyQdQFuE a7ZBWDoG5G0PoQ5lTPnTshKyLTOoQdazWRfJYJVKUBe3GWGyIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCsa026P/XKGSuoFB0LRQFIuwMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvYmY5YThlMTctOGE4Zi0z ODlhLTgwYjQtOGFiZjgyYTg1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGQGlHSppsewmWpHt6LvhwuHXjjQTa7n1tQfQnPtQu3csa53SklkzuV WQh/JKGAf2HbhrABEMbEc96Kc+9cB8uNm61uRWWNnnjDY/WnAVrnzbyAml1VJSF0 Fol2sX8QPEyIXnJuNSJ06qpj/uKPZklY4T0aMRt8Y53qNgWbsSMc9BbQYRU81iIB gf5lXGzesg+BQoW1DSdjWLSZy6DJ62huU5WA1iqU7s3MiGka45h6iOUX/jkToTIn nl9+QguIfHiXfrGg2iDoXFbzEKlY/cRn6wwdkXa3iPEQpDWNcc3wGK6vJMIo6LcZ SeRrWRAKMhoIL1nIEvJdRd44GQRlJRU= -----END CERTIFICATE-----Generated at Sat Jun 13 17:06:53 2026 by rpki-client