$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa File: 01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa (raw, json) Hash identifier: c+KbHaofwkR8lw3X9K1qjTjtjL9IXkv8WItuiHd//sI= Subject key identifier: DD:D4:F3:77:1E:75:BB:3A:D6:5F:9C:97:D3:A4:5B:CD:89:A4:5C:3E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C4F2F187EBBB380D8D880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 172.253.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:4f:2f:18:7e:bb:b3:80:d8:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=f2aa7efa-43b6-4fae-8c04-4ed65c02c03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2f:98:65:7d:f0:06:fe:7c:56:95:7b:14:24: f1:09:93:d0:64:d6:e5:ac:bc:61:9d:5a:43:05:8f: 8d:8e:3d:02:01:d5:5e:6c:b0:37:65:05:78:2e:84: 9d:7a:86:c6:fe:6e:cc:24:25:59:bc:1e:14:eb:cc: ab:c1:d8:a8:aa:ac:6f:98:2c:40:35:63:5a:4e:67: 91:83:19:fa:8f:68:07:65:22:dc:5b:17:21:d7:e8: c0:df:75:cf:84:7c:3c:64:37:19:ae:77:1a:3d:4e: 43:7b:f5:f6:17:fa:e5:f1:08:f4:b7:7e:61:a8:cd: 21:3c:e1:b0:35:09:a0:bd:1a:53:b6:87:21:0a:71: 8b:78:67:f2:da:d5:d4:5c:8b:4b:6d:80:ce:03:d0: a5:39:f4:b4:2b:11:e6:0a:15:01:e8:44:a8:8c:81: b9:df:a8:fc:4a:75:ab:aa:3c:d3:12:3a:ff:b4:cf: 3c:67:0d:70:f7:45:d7:78:eb:71:f2:2d:bc:76:95: f7:0b:01:33:eb:42:96:b0:a9:23:1b:12:58:2b:d9: b1:f9:f2:37:c6:1f:4f:b3:33:c6:5c:e9:2a:23:e3: d0:3c:c1:02:72:51:f4:fc:4b:75:74:6a:19:85:56: b3:8c:1d:1b:65:60:0f:ad:e2:90:58:f3:c8:fe:f3: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D4:F3:77:1E:75:BB:3A:D6:5F:9C:97:D3:A4:5B:CD:89:A4:5C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:74:3f:15:31:b5:67:78:18:07:c1:e7:50:2e:7e:cd:06:f2: 8f:b5:ff:ec:03:63:15:66:07:bc:46:9d:7f:35:19:1b:36:95: f4:aa:ce:41:f1:34:f4:61:53:93:7d:b1:b9:15:ef:36:09:9a: 8a:14:de:92:b6:53:c5:4a:45:13:1f:f4:ae:7d:d3:fd:d1:00: 8e:a1:ef:fd:61:77:b0:5e:0c:24:fa:93:3d:22:d5:42:75:6d: b6:4e:92:af:22:ac:74:06:ba:11:9a:59:0b:2b:db:b2:fd:6b: 26:ad:a4:bb:c6:67:25:4a:a0:d1:4f:6b:3c:b0:a1:9c:eb:f4: 3f:af:91:3c:1f:ac:63:c2:94:25:53:37:c3:b4:63:4d:c8:ea: 5c:dc:e6:21:4e:db:69:ca:22:3c:0d:30:00:59:8c:81:d1:24: 91:08:71:b2:b1:18:75:b3:27:cb:94:86:07:fd:aa:63:2e:c8: 9d:d6:a5:79:55:59:14:d9:81:22:8a:d0:16:de:f1:bd:68:f0: 32:0c:ea:24:39:2b:ff:e7:0f:82:a3:64:6f:5e:75:ac:d9:94: 9e:ff:df:f0:89:d7:91:c7:17:a9:0e:59:b1:53:ff:51:47:01: 39:ef:44:6e:6f:a5:0f:f8:c6:d4:4f:17:2b:09:3e:ff:ef:3b: b9:79:f4:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnE8vGH67s4DY2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZjJhYTdlZmEtNDNiNi00ZmFlLThjMDQtNGVkNjVjMDJjMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny+YZX3wBv58VpV7FCTxCZPQZNblrLxhnVpD BY+Njj0CAdVebLA3ZQV4LoSdeobG/m7MJCVZvB4U68yrwdioqqxvmCxANWNaTmeR gxn6j2gHZSLcWxch1+jA33XPhHw8ZDcZrncaPU5De/X2F/rl8Qj0t35hqM0hPOGw NQmgvRpTtochCnGLeGfy2tXUXItLbYDOA9ClOfS0KxHmChUB6ESojIG536j8SnWr qjzTEjr/tM88Zw1w90XXeOtx8i28dpX3CwEz60KWsKkjGxJYK9mx+fI3xh9PszPG XOkqI+PQPMECclH0/Et1dGoZhVazjB0bZWAPreKQWPPI/vO/7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3U83cedbs61l+cl9OkW82JpFw+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFhZDljNGEtOWY2NC0z MDYwLThiMDAtZWRlNGUwZGRjOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl0PxUxtWd4GAfB51Aufs0G8o+1/+wDYxVmB7xGnX81GRs2lfSqzkHx NPRhU5N9sbkV7zYJmooU3pK2U8VKRRMf9K590/3RAI6h7/1hd7BeDCT6kz0i1UJ1 bbZOkq8irHQGuhGaWQsr27L9ayatpLvGZyVKoNFPazywoZzr9D+vkTwfrGPClCVT N8O0Y03I6lzc5iFO22nKIjwNMABZjIHRJJEIcbKxGHWzJ8uUhgf9qmMuyJ3WpXlV WRTZgSKK0Bbe8b1o8DIM6iQ5K//nD4KjZG9edazZlJ7/3/CJ15HHF6kOWbFT/1FH ATnvRG5vpQ/4xtRPFysJPv/vO7l59J4= -----END CERTIFICATE-----Generated at Sat Jun 13 13:12:05 2026 by rpki-client