$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa File: 414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa (raw, json) Hash identifier: Ig2uPV14JbDJ9FobjOPvnx8PPkoSfoeDNNzVHuFud8M= Subject key identifier: 93:1E:81:13:8B:2D:5F:F0:22:57:E9:16:AD:DC:D3:34:71:BF:4E:74 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC291687A90B21E1DF180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 173.194.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c2:91:68:7a:90:b2:1e:1d:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=dd9ce1a0-9585-4548-9a19-ddef9f32c3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7b:19:dc:96:e1:d9:39:f2:16:3e:3a:99:60: c9:a2:11:a1:65:f9:f0:54:02:6e:44:1b:a3:e8:70: f1:8d:cd:82:c3:d5:10:0d:2a:ab:38:1b:aa:d9:17: 3c:e3:78:73:15:7e:27:dc:9f:4d:7c:b1:bf:c6:10: ab:73:2a:9c:de:ac:da:5d:fe:3a:75:63:c6:12:70: cd:a8:40:11:5f:16:69:de:cd:05:45:e4:f7:7b:6a: 20:9e:d2:45:c1:7d:7e:e9:d4:88:17:0e:83:31:61: 57:3a:11:92:b4:5b:9e:db:79:06:94:ec:8a:83:28: ba:5c:50:27:3f:a6:25:c6:58:d3:cd:2d:06:98:8e: 2f:41:26:53:71:4a:9f:40:fa:01:52:1b:bd:3f:5b: 19:f4:46:86:90:88:9b:2a:e6:0a:66:e8:c9:3b:5c: 7b:52:d7:1b:4c:ae:7e:d0:60:60:50:91:85:a7:b9: 7b:09:0c:ce:20:05:47:bd:1d:b7:ad:10:12:9e:e0: a8:7d:c5:11:5c:28:18:ae:1a:9e:e7:f9:39:7c:ea: 0b:2e:53:de:66:52:cd:9e:d5:cc:e0:f4:53:1e:9c: ca:dc:e8:75:1e:ee:86:bd:d1:a2:d0:37:03:1d:4c: ce:bb:5f:48:c0:9d:be:cd:03:50:fd:fc:3d:ee:0c: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1E:81:13:8B:2D:5F:F0:22:57:E9:16:AD:DC:D3:34:71:BF:4E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:0b:07:fd:7a:3e:1d:f9:71:2f:1c:0b:57:ac:50:1b:8c:89: 6c:75:13:5a:c4:25:01:d9:f1:01:63:05:69:ea:0d:6b:93:e4: 99:c6:f8:52:d6:1f:d0:df:ca:38:f7:f4:3b:eb:e0:44:e8:62: 96:c6:27:db:08:f1:ed:d5:9f:e7:f7:c1:3b:6a:17:63:25:f6: 36:88:7c:4d:00:b6:67:cc:37:d2:75:3b:f4:69:2f:ba:be:0b: f8:d9:98:3f:cc:aa:19:af:bd:e5:22:9c:e2:98:fe:4d:ae:de: 08:6e:c2:0a:d5:b2:9b:53:f3:87:7d:39:2c:30:ef:b1:a6:09: 66:d6:65:00:49:3c:f0:51:93:b2:03:99:da:98:51:d9:82:0a: 2b:15:ba:1f:e3:84:51:3c:aa:4f:ce:02:5e:81:01:8c:26:96: 7a:3a:ee:bd:f1:ae:73:30:ed:6c:73:b3:12:5b:1e:e2:b2:bd: 8d:69:68:48:23:24:f1:8a:20:78:1f:a1:51:a8:5f:04:6c:2c: a7:d0:41:ff:bd:b1:44:5e:86:a2:de:1e:7b:7f:a6:94:ce:3d: e9:07:4b:db:79:e7:9d:55:71:26:c3:dd:14:31:7e:f1:07:40: b5:e5:10:68:bc:27:a5:18:6e:ab:0f:20:b2:f7:5d:d7:28:65: f0:8f:b5:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8KRaHqQsh4d8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZGQ5Y2UxYTAtOTU4NS00NTQ4LTlhMTktZGRlZjlmMzJjM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3sZ3Jbh2TnyFj46mWDJohGhZfnwVAJuRBuj 6HDxjc2Cw9UQDSqrOBuq2Rc843hzFX4n3J9NfLG/xhCrcyqc3qzaXf46dWPGEnDN qEARXxZp3s0FReT3e2ogntJFwX1+6dSIFw6DMWFXOhGStFue23kGlOyKgyi6XFAn P6YlxljTzS0GmI4vQSZTcUqfQPoBUhu9P1sZ9EaGkIibKuYKZujJO1x7UtcbTK5+ 0GBgUJGFp7l7CQzOIAVHvR23rRASnuCofcURXCgYrhqe5/k5fOoLLlPeZlLNntXM 4PRTHpzK3Oh1Hu6GvdGi0DcDHUzOu19IwJ2+zQNQ/fw97gz5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMegROLLV/wIlfpFq3c0zRxv050MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDE0YjllYWYtMGNmYy0z NmM3LWFiZjItN2UxNDRkY2IxOWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcI/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkLB/16Ph35cS8cC1esUBuMiWx1E1rEJQHZ8QFjBWnqDWuT5JnG+FLW H9Dfyjj39Dvr4EToYpbGJ9sI8e3Vn+f3wTtqF2Ml9jaIfE0AtmfMN9J1O/RpL7q+ C/jZmD/MqhmvveUinOKY/k2u3ghuwgrVsptT84d9OSww77GmCWbWZQBJPPBRk7ID mdqYUdmCCisVuh/jhFE8qk/OAl6BAYwmlno67r3xrnMw7WxzsxJbHuKyvY1paEgj JPGKIHgfoVGoXwRsLKfQQf+9sURehqLeHnt/ppTOPekHS9t5551VcSbD3RQxfvEH QLXlEGi8J6UYbqsPILL3XdcoZfCPtVI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:51 2026 by rpki-client