$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa File: 3576a8b7-6506-398c-8b78-2430a514e1f2.roa (raw, json) Hash identifier: zzX7+SHHPxYs1z89qk5y+qHT9RxaP5MTtuegCY9rgyc= Subject key identifier: 79:E4:E7:7B:F3:04:FB:0E:A6:BD:48:65:07:10:46:A3:43:8A:5C:FC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E086650C78DB6262B086FF780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 64.233.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:50:c7:8d:b6:26:2b:08:6f:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=3bf186ae-805a-4f58-a25f-3e375a837562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:75:33:c9:4d:9a:c4:76:f5:97:4f:53:ed: e4:26:e6:1d:be:a1:f8:77:59:1e:82:b2:d6:da:f4: 30:2f:48:bf:de:6a:fc:7f:e2:81:38:8e:3f:08:54: f0:87:b8:ed:5d:c8:2f:61:47:84:ce:cd:6f:f3:43: 2f:d1:bb:d8:eb:1d:91:58:a7:b3:b0:b7:6b:6e:f5: 34:6a:e3:11:ea:10:be:41:75:26:63:6f:16:98:29: 17:19:11:58:19:cb:16:4e:78:5e:3e:a3:b4:69:4e: 7a:9b:b4:bf:8e:3a:98:02:59:40:10:6c:a8:b6:b0: fd:77:42:c5:a7:99:16:6c:03:dc:47:7a:17:46:68: f6:75:78:48:42:25:e0:e5:c0:1f:03:00:1a:ff:4c: b4:70:55:d9:eb:cf:48:d1:fd:ba:04:37:d3:12:6c: 5a:f1:25:b1:8a:00:f3:4d:df:22:d8:94:94:4a:90: a2:2e:88:4e:85:74:63:82:b7:01:d3:39:e1:58:92: 1a:36:3e:82:4f:e8:b1:4c:fd:91:79:5e:5c:cd:ea: 93:93:26:4a:fd:e0:c3:c9:e6:08:e9:99:f7:8f:9d: 04:5b:21:c9:0b:57:ea:57:1c:5b:41:a5:b7:8d:86: e7:40:e0:73:e7:8f:74:f6:1f:5e:92:5d:8b:01:ef: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E4:E7:7B:F3:04:FB:0E:A6:BD:48:65:07:10:46:A3:43:8A:5C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:95:3e:82:26:61:64:b0:f1:7f:e0:05:d5:a0:10:43:5b:08: ae:3b:ba:1a:4b:4a:d7:09:ef:69:ca:4c:a3:93:71:b2:64:2b: 3f:9b:ac:f5:12:f5:d4:c5:0d:f6:b7:a1:bc:0f:22:3c:a2:75: 48:1a:76:00:5b:57:74:4c:96:c8:06:52:1d:a6:64:1f:b5:19: e6:b2:31:c7:2a:ab:c0:f7:b6:cf:44:8d:ad:5e:d1:3f:f1:11: 5c:67:fa:e7:8c:4f:1a:ad:a0:88:4a:65:c1:ec:7e:ad:47:ea: a6:8c:5d:c1:d6:d8:78:71:81:89:4f:91:c4:bc:83:dc:c1:d0: a3:09:67:56:ef:50:75:83:40:07:06:32:d0:bb:1d:b6:f2:d3: 7e:15:4c:c8:39:87:03:d2:1e:dc:f2:73:07:e8:8c:84:ff:1f: 18:b5:8a:2d:5a:32:55:44:fc:bd:af:5a:6b:bd:d3:15:7d:ee: 75:53:be:e9:67:cf:bd:3f:f6:aa:b6:51:00:76:01:8f:3e:21: 27:c2:b3:a1:d0:87:48:82:04:1e:55:f0:13:ce:0c:38:e7:99: 27:08:82:40:27:19:a1:41:47:86:a3:9c:65:0f:8b:7b:31:0d: bb:10:96:73:4c:56:e4:b1:c0:f4:a0:a8:33:9c:ea:93:63:a1: 52:57:9b:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZlDHjbYmKwhv94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk M2JmMTg2YWUtODA1YS00ZjU4LWEyNWYtM2UzNzVhODM3NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGx1M8lNmsR29ZdPU+3kJuYdvqH4d1kegrLW 2vQwL0i/3mr8f+KBOI4/CFTwh7jtXcgvYUeEzs1v80Mv0bvY6x2RWKezsLdrbvU0 auMR6hC+QXUmY28WmCkXGRFYGcsWTnhePqO0aU56m7S/jjqYAllAEGyotrD9d0LF p5kWbAPcR3oXRmj2dXhIQiXg5cAfAwAa/0y0cFXZ689I0f26BDfTEmxa8SWxigDz Td8i2JSUSpCiLohOhXRjgrcB0znhWJIaNj6CT+ixTP2ReV5czeqTkyZK/eDDyeYI 6Zn3j50EWyHJC1fqVxxbQaW3jYbnQOBz54909h9ekl2LAe8xHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnk53vzBPsOpr1IZQcQRqNDilz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzU3NmE4YjctNjUwNi0z OThjLThiNzgtMjQzMGE1MTRlMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqVPoImYWSw8X/gBdWgEENbCK47uhpLStcJ72nKTKOTcbJkKz+brPUS 9dTFDfa3obwPIjyidUgadgBbV3RMlsgGUh2mZB+1GeayMccqq8D3ts9Eja1e0T/x EVxn+ueMTxqtoIhKZcHsfq1H6qaMXcHW2HhxgYlPkcS8g9zB0KMJZ1bvUHWDQAcG MtC7Hbby034VTMg5hwPSHtzycwfojIT/Hxi1ii1aMlVE/L2vWmu90xV97nVTvuln z70/9qq2UQB2AY8+ISfCs6HQh0iCBB5V8BPODDjnmScIgkAnGaFBR4ajnGUPi3sx DbsQlnNMVuSxwPSgqDOc6pNjoVJXmzY= -----END CERTIFICATE-----Generated at Sat Jun 13 14:49:54 2026 by rpki-client