$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30becd11-c4bc-3a34-83b9-2f8d898106fa.roa File: 30becd11-c4bc-3a34-83b9-2f8d898106fa.roa (raw, json) Hash identifier: KfhyuQ9cfdtmK3gMmVKdx+r0jICmrduK8WfCJpI6Tik= Subject key identifier: CC:BB:8B:7E:AF:F1:E8:54:5B:B5:D3:FC:E3:A9:82:9F:78:16:A9:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C4B3FD730F24E0388C970 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30becd11-c4bc-3a34-83b9-2f8d898106fa.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 199.36.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:4b:3f:d7:30:f2:4e:03:88:c9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=ec52d652-0520-4174-b6ac-e5d697a355a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:97:5a:fe:07:5d:f7:a9:85:a6:48:6c:a5: 23:02:58:1f:c0:fd:f8:f9:30:b4:96:df:0e:1d:85: e1:e5:21:89:23:74:40:5a:ab:40:d4:2f:35:7e:b0: 5c:b3:40:27:bf:21:a4:30:96:fb:91:74:34:28:5b: 6b:c1:ba:6d:1e:e1:ad:5b:55:31:e9:bf:bc:3d:18: 1b:a3:d9:8a:a4:5a:b3:fa:30:45:ac:7c:44:02:63: 19:5d:a5:88:e9:f6:22:cf:75:2f:61:71:8a:3b:4a: 20:3b:ad:7c:f9:13:d1:2c:46:12:0f:42:1c:0b:3b: cf:ce:4d:b1:92:96:88:1e:17:b8:88:5c:62:83:48: 8f:92:b4:92:29:fb:31:d5:34:3d:75:39:0c:7f:02: 2a:e5:a1:ef:ca:df:30:92:9c:35:6b:fe:8a:e2:73: d4:d8:e3:50:c6:a5:cc:72:b4:9a:7c:e9:8f:2b:21: 78:32:10:e1:ed:9e:75:25:64:a8:4f:dc:6a:55:33: 99:a0:1b:64:d5:97:e6:59:eb:4b:bf:50:55:af:56: 68:c8:63:72:e6:d9:eb:20:8e:0d:66:73:2d:c2:54: a9:68:48:f3:ca:a3:10:c9:fd:44:db:90:98:33:ad: f0:be:e8:3f:f1:83:ef:6d:9d:f1:45:32:a3:ec:42: c0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BB:8B:7E:AF:F1:E8:54:5B:B5:D3:FC:E3:A9:82:9F:78:16:A9:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30becd11-c4bc-3a34-83b9-2f8d898106fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:86:db:ae:95:cf:97:d2:c5:6c:fe:06:f5:0a:cd:0c:53:03: bb:5e:e4:9b:6f:1c:f8:86:50:ca:5c:72:fc:b9:72:25:1b:63: c0:fc:24:9b:1d:27:aa:87:ec:08:a9:95:f8:80:14:16:2c:6b: 72:56:d0:a1:71:03:0e:6d:9f:f2:fe:b2:16:99:8a:d8:ab:c3: c8:78:41:51:08:da:81:4e:49:f7:21:a7:27:e6:3c:7d:52:0e: 86:0a:6f:a9:bd:e8:44:8f:87:78:d0:05:4f:33:ff:f9:aa:25: a1:21:67:5e:e2:ab:f5:07:98:ef:18:de:6d:f5:3d:66:d8:24: ca:85:d7:4c:34:62:3d:e0:59:99:b4:d1:d0:bf:1e:24:68:ce: 1c:19:97:2c:ba:90:15:f9:b4:5b:71:a2:bd:63:cf:ad:09:20: ea:f5:be:ef:55:89:88:a7:07:0a:54:54:7d:6c:84:65:71:63: e9:27:ae:e5:c5:2c:90:05:89:02:a8:07:ae:fd:56:d8:98:dc: 18:0f:de:24:b1:5c:d3:c1:e2:1d:83:0d:2d:f4:a0:fe:27:e2: 71:0b:a3:c6:d9:1e:bf:03:ea:55:31:74:42:53:b8:15:86:1a: ce:c1:85:ad:b0:9e:87:c8:3e:a5:2f:b9:9b:f4:d8:e0:44:e8: 5e:3e:d9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEs/1zDyTgOIyXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZWM1MmQ2NTItMDUyMC00MTc0LWI2YWMtZTVkNjk3YTM1NWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2qXWv4HXfephaZIbKUjAlgfwP34+TC0lt8O HYXh5SGJI3RAWqtA1C81frBcs0AnvyGkMJb7kXQ0KFtrwbptHuGtW1Ux6b+8PRgb o9mKpFqz+jBFrHxEAmMZXaWI6fYiz3UvYXGKO0ogO618+RPRLEYSD0IcCzvPzk2x kpaIHhe4iFxig0iPkrSSKfsx1TQ9dTkMfwIq5aHvyt8wkpw1a/6K4nPU2ONQxqXM crSafOmPKyF4MhDh7Z51JWSoT9xqVTOZoBtk1ZfmWetLv1BVr1ZoyGNy5tnrII4N ZnMtwlSpaEjzyqMQyf1E25CYM63wvug/8YPvbZ3xRTKj7ELArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy7i36v8ehUW7XT/OOpgp94FqnnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzBiZWNkMTEtYzRiYy0z YTM0LTgzYjktMmY4ZDg5ODEwNmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxySaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImG266Vz5fSxWz+BvUKzQxTA7te5JtvHPiGUMpccvy5ciUbY8D8JJsd J6qH7AiplfiAFBYsa3JW0KFxAw5tn/L+shaZitirw8h4QVEI2oFOSfchpyfmPH1S DoYKb6m96ESPh3jQBU8z//mqJaEhZ17iq/UHmO8Y3m31PWbYJMqF10w0Yj3gWZm0 0dC/HiRozhwZlyy6kBX5tFtxor1jz60JIOr1vu9ViYinBwpUVH1shGVxY+knruXF LJAFiQKoB679VtiY3BgP3iSxXNPB4h2DDS30oP4n4nELo8bZHr8D6lUxdEJTuBWG Gs7Bha2wnofIPqUvuZv02OBE6F4+2YY= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:42 2026 by rpki-client