$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa File: 293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa (raw, json) Hash identifier: Sgnj9NA2JxAA84ucHPvPmniLy2Z//jvslEOZTVzmZuU= Subject key identifier: 12:61:53:16:A5:47:51:FA:CC:A3:2C:BF:E3:4B:9C:A8:6C:6E:89:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E086602F5E03B7902D413C200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 64.233.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:02:f5:e0:3b:79:02:d4:13:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=5f2c4605-0b24-4165-b130-1ce418effeed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:07:68:eb:39:9b:21:37:88:de:a2:4c:f0: 3b:4c:0d:fa:5d:d9:88:85:98:ef:57:77:c3:5a:ba: cb:6f:be:f8:f6:be:15:0c:be:f8:e1:b1:1a:e4:2d: 56:f1:69:a0:20:9c:ae:b3:b6:cd:9e:3d:d8:b1:9a: 21:e9:62:c7:1a:36:59:52:70:9f:e7:0f:c0:e5:35: 19:02:f5:9f:02:cc:f5:c0:b0:4d:29:2b:b6:d8:03: 8e:66:00:79:80:b3:7d:f2:17:e6:32:21:61:2d:e0: 57:ad:e1:cd:5f:24:9d:3a:e3:c5:76:24:9a:a0:de: 9b:a8:e1:5f:28:8d:31:b1:19:f9:3f:25:19:17:d9: 8a:ba:af:c9:72:0c:cd:ac:6a:f2:27:52:b2:bf:79: bf:bd:1d:01:ab:17:ae:5c:51:1a:1e:63:cc:8b:b9: 1c:ef:5c:1f:38:50:76:ce:a1:25:20:96:b0:88:ac: fe:e8:ed:ec:37:a9:73:60:4d:92:c2:03:e0:9f:7d: 89:49:86:66:bb:5f:d8:e6:86:25:f5:22:f5:05:b6: 33:12:e1:f9:22:78:d5:75:de:62:a2:74:a1:a8:87: b6:4c:17:1a:5c:c9:56:93:a8:55:a3:bf:67:32:a9: 11:b3:00:6a:7d:6f:5b:84:bb:7e:de:24:ab:2e:d3: c7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:61:53:16:A5:47:51:FA:CC:A3:2C:BF:E3:4B:9C:A8:6C:6E:89:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fc:0e:11:45:4f:04:8c:a2:67:68:33:af:40:48:9a:35:7f: 47:bd:76:00:65:5b:87:82:c3:3b:31:e5:86:bf:33:1c:86:03: 2a:e7:94:13:4c:8b:c5:68:10:47:e7:eb:ec:ee:49:4a:50:cd: 39:53:43:fc:33:29:03:c5:ea:27:31:9d:ba:3b:02:3f:cd:66: c6:01:44:77:17:d0:27:57:ba:77:77:d0:ea:ea:46:fc:2b:c3: ff:32:79:ae:65:0d:84:19:9b:97:04:46:f1:d9:b0:eb:fd:04: 84:68:be:8b:26:f9:76:31:c3:96:f1:f3:e2:88:75:b5:51:f2: 79:c6:a7:1d:aa:3e:00:2d:16:1d:76:f1:d0:90:42:4c:0c:07: fb:a7:63:25:2b:76:c7:52:3c:ba:9b:94:47:85:c4:e4:8a:67: 1c:8f:dc:08:b1:17:b6:c4:46:83:b9:d1:ea:f7:c5:30:0b:ec: 8b:39:36:e6:c6:6e:7e:97:e7:d6:a8:8e:19:56:ee:cd:ec:34: 9a:76:a0:b4:51:21:d7:41:1c:a2:7f:cc:4c:a6:9e:c9:c3:0e: a2:2a:00:f1:cb:47:49:bd:17:9e:5e:56:e0:67:36:b8:0f:6a: b8:99:d5:ca:9b:c2:a9:ca:7b:63:e3:93:89:a2:66:66:5e:4d: c9:bd:71:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZgL14Dt5AtQTwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk NWYyYzQ2MDUtMGIyNC00MTY1LWIxMzAtMWNlNDE4ZWZmZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkwHaOs5myE3iN6iTPA7TA36XdmIhZjvV3fD WrrLb7749r4VDL744bEa5C1W8WmgIJyus7bNnj3YsZoh6WLHGjZZUnCf5w/A5TUZ AvWfAsz1wLBNKSu22AOOZgB5gLN98hfmMiFhLeBXreHNXySdOuPFdiSaoN6bqOFf KI0xsRn5PyUZF9mKuq/JcgzNrGryJ1Kyv3m/vR0BqxeuXFEaHmPMi7kc71wfOFB2 zqElIJawiKz+6O3sN6lzYE2SwgPgn32JSYZmu1/Y5oYl9SL1BbYzEuH5InjVdd5i onShqIe2TBcaXMlWk6hVo79nMqkRswBqfW9bhLt+3iSrLtPHDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJhUxalR1H6zKMsv+NLnKhsbomsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjkzYjllODYtZjRmNi0z MzNiLTgyNTItMGUyOGJiYjNhOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF38DhFFTwSMomdoM69ASJo1f0e9dgBlW4eCwzsx5Ya/MxyGAyrnlBNM i8VoEEfn6+zuSUpQzTlTQ/wzKQPF6icxnbo7Aj/NZsYBRHcX0CdXund30OrqRvwr w/8yea5lDYQZm5cERvHZsOv9BIRovosm+XYxw5bx8+KIdbVR8nnGpx2qPgAtFh12 8dCQQkwMB/unYyUrdsdSPLqblEeFxOSKZxyP3AixF7bERoO50er3xTAL7Is5NubG bn6X59aojhlW7s3sNJp2oLRRIddBHKJ/zEymnsnDDqIqAPHLR0m9F55eVuBnNrgP ariZ1cqbwqnKe2Pjk4miZmZeTcm9ccM= -----END CERTIFICATE-----Generated at Sat Jun 13 09:21:42 2026 by rpki-client