$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa File: 1cd548a2-3f0a-3bae-b690-0b2164300b26.roa (raw, json) Hash identifier: DfkSd1IEmwn+QX3RfGVUaZ3PQ5IFPjY4jlnxbdcMMPs= Subject key identifier: FF:30:98:6A:D8:6C:86:BB:DD:07:B8:5F:D3:14:3F:72:00:CC:A5:6A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C3B9452789B5FF243B480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 209.85.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:3b:94:52:78:9b:5f:f2:43:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=91320626-893b-47b5-be4d-e015c8fb49d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:7e:b7:26:d2:c6:61:5c:cc:1d:18:14:7a: 70:24:fa:1d:fa:f0:ad:88:d3:82:3a:48:c0:52:d0: 10:cc:3e:dd:ae:c2:89:43:85:c5:f5:d5:83:98:f2: 6c:4a:07:3a:67:fb:82:39:5f:0b:3d:d8:e6:63:6e: 78:04:79:5a:50:f8:83:94:b2:1c:d5:fe:c6:ce:72: 38:87:33:c1:e1:a9:be:1e:76:5c:ff:f1:48:9f:96: 7f:9e:d5:cd:e6:e5:5b:a8:ee:4b:36:8d:8a:6d:ba: 5b:b7:77:57:f5:06:61:31:93:d0:38:2e:87:e0:0c: d6:58:08:8a:b0:3c:07:8e:f1:1f:9f:c6:84:a6:7e: 64:de:78:33:c1:9f:a9:36:81:6e:31:f8:41:7e:de: ba:ff:2e:65:46:6b:c9:bc:fe:6a:c5:aa:2e:f7:46: a5:83:2a:1e:9b:c7:39:54:ac:ae:f4:56:76:e1:07: fd:68:ff:b5:b0:11:f4:d0:62:e3:8a:89:1f:19:35: a6:a1:43:3e:9c:c8:bc:5a:a5:3b:be:f4:ff:e2:2d: a4:c5:d0:04:30:b6:c4:45:0e:33:19:c9:b0:43:26: d2:d8:72:e7:6a:72:02:b0:0b:5c:5e:dd:a3:4c:bb: e7:34:1c:c3:1c:a7:af:50:79:d6:9f:4f:ef:71:b3: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:30:98:6A:D8:6C:86:BB:DD:07:B8:5F:D3:14:3F:72:00:CC:A5:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ce:ee:dd:3e:2d:74:f6:b7:c9:cc:25:f0:03:0e:2d:27:c1: c3:56:9b:dd:f5:e7:6b:22:fd:0a:33:a2:81:c6:2f:c8:70:99: 7f:73:f3:59:c1:56:19:5e:40:6d:5f:3b:06:a6:2c:23:92:ed: 3e:c3:aa:18:42:97:42:7e:59:38:ba:36:5f:46:ac:19:26:59: 98:cb:e5:28:6b:4a:c5:73:c9:9b:c6:b4:92:0d:8b:6a:7d:9c: 16:74:6f:8e:13:f9:9c:f2:b1:76:5b:79:be:56:23:3c:d9:83: 9d:4f:6d:fb:01:26:f5:8c:f8:0a:95:7b:9a:0f:12:2e:d4:14: 7d:57:b6:2c:98:93:26:4e:0a:4b:0e:8f:5c:a2:11:64:78:1e: 97:4c:e4:3b:33:9c:dd:6e:d0:5c:68:3a:6a:76:a3:71:73:ea: fb:64:60:27:44:a2:cc:e3:cc:b9:4c:74:d7:14:72:a4:2c:7c: fa:20:6a:60:c4:01:09:ef:67:3a:ec:30:6c:05:f7:53:1e:3c: 9c:53:84:01:02:80:bd:79:1d:47:ff:3c:c5:cd:7a:74:bb:d8: eb:33:57:81:7f:2f:5b:e7:42:77:7d:f4:87:eb:81:8b:d7:97: c5:78:71:fb:d1:82:dd:ca:c0:6a:e4:1f:51:39:42:d1:bf:98: f3:6b:73:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnDuUUnibX/JDtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk OTEzMjA2MjYtODkzYi00N2I1LWJlNGQtZTAxNWM4ZmI0OWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5p+tybSxmFczB0YFHpwJPod+vCtiNOCOkjA UtAQzD7drsKJQ4XF9dWDmPJsSgc6Z/uCOV8LPdjmY254BHlaUPiDlLIc1f7GznI4 hzPB4am+HnZc//FIn5Z/ntXN5uVbqO5LNo2Kbbpbt3dX9QZhMZPQOC6H4AzWWAiK sDwHjvEfn8aEpn5k3ngzwZ+pNoFuMfhBft66/y5lRmvJvP5qxaou90algyoem8c5 VKyu9FZ24Qf9aP+1sBH00GLjiokfGTWmoUM+nMi8WqU7vvT/4i2kxdAEMLbERQ4z GcmwQybS2HLnanICsAtcXt2jTLvnNBzDHKevUHnWn0/vcbPi9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8wmGrYbIa73Qe4X9MUP3IAzKVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWNkNTQ4YTItM2YwYS0z YmFlLWI2OTAtMGIyMTY0MzAwYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0VWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvO7t0+LXT2t8nMJfADDi0nwcNWm93152si/QozooHGL8hwmX9z81nB VhleQG1fOwamLCOS7T7DqhhCl0J+WTi6Nl9GrBkmWZjL5ShrSsVzyZvGtJINi2p9 nBZ0b44T+ZzysXZbeb5WIzzZg51PbfsBJvWM+AqVe5oPEi7UFH1XtiyYkyZOCksO j1yiEWR4HpdM5DsznN1u0FxoOmp2o3Fz6vtkYCdEoszjzLlMdNcUcqQsfPogamDE AQnvZzrsMGwF91MePJxThAECgL15HUf/PMXNenS72OszV4F/L1vnQnd99IfrgYvX l8V4cfvRgt3KwGrkH1E5QtG/mPNrc1k= -----END CERTIFICATE-----Generated at Sat Jun 13 13:23:19 2026 by rpki-client