$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa File: 41c74682-e260-397d-8267-3a4dc0e8f079.roa (raw, json) Hash identifier: 2eWA+snJqZGQkd9eCR5UNO6PW0DOugvL9dNzdSAfUIU= Subject key identifier: 30:E8:46:BF:89:F5:F7:97:5C:D8:20:3B:B1:7C:C6:B2:49:AA:C2:20 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC996727852D96F8E13C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.253.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c9:96:72:78:52:d9:6f:8e:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=afd2058b-8d71-4a84-8195-272cdb4bdcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:61:d9:76:eb:eb:1b:b3:87:2d:66:53:30:8f: 49:15:24:d3:ed:4b:a2:8d:d5:61:20:3b:3f:58:f8: e6:c0:69:09:6c:73:f4:34:5d:ff:d0:fa:a5:9e:4a: b1:c1:7e:5d:39:1f:85:b1:67:29:36:de:e0:90:ab: b3:18:41:0f:e0:8f:59:c6:96:9e:f5:7a:ce:74:b2: 41:3a:80:18:37:f8:08:46:39:f3:38:c3:2e:cf:3b: ec:09:8d:de:0f:c1:df:ba:fd:09:67:bd:32:85:9a: f1:2f:93:f1:34:fe:be:a6:ab:43:68:00:1f:d1:12: 13:f7:2d:af:f5:d3:12:50:a3:90:ac:eb:e9:99:b8: b2:67:d5:ad:c1:24:b8:35:23:27:d8:04:47:31:2e: 2a:98:bd:81:ca:d3:f6:ff:8f:ef:2c:b7:3f:57:26: 76:17:4c:67:5a:16:21:16:e4:c8:ae:87:08:06:14: be:84:f8:02:61:27:5c:2d:d0:c9:a2:bb:89:48:09: 4f:c6:15:40:9b:38:71:80:6b:4c:a5:45:64:d5:f6: 7b:83:2a:c9:39:91:b7:2e:34:64:0e:e2:2e:f9:0c: 98:58:65:18:97:8c:3f:65:16:6b:5b:51:5f:bd:d9: 12:dd:d1:29:24:ff:6f:ed:a6:c0:eb:5b:6c:50:9b: f1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E8:46:BF:89:F5:F7:97:5C:D8:20:3B:B1:7C:C6:B2:49:AA:C2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:eb:bb:8b:90:ba:40:cf:83:85:6f:d9:6b:f9:61:22:94:d2: 71:f1:c6:29:ba:88:ea:46:c2:a7:ef:ca:2d:d9:e4:92:e9:20: 3f:65:da:b0:b1:60:3f:10:b7:8b:19:56:f8:b0:f6:b0:1a:b5: 7e:56:71:09:b1:49:b4:ca:e8:80:06:49:02:d8:7c:88:d2:3b: cf:5f:9e:25:5d:ff:93:42:1c:36:50:11:06:85:3e:da:f3:b2: 97:be:66:ff:49:d6:3b:29:fd:23:8d:b1:d8:ff:1f:25:a0:31: 3c:40:5e:cb:49:dd:8d:60:55:c2:fd:4e:50:76:13:09:67:78: 02:61:7d:3d:a3:23:9b:44:07:b7:ff:e0:60:79:1d:d8:92:9b: 40:a3:7a:71:ee:f6:9f:49:91:7a:0f:e6:f1:23:b3:0e:c8:28: a4:ea:62:63:45:3c:e8:7c:9e:e4:be:fc:2f:98:8a:cb:85:73: 13:cd:94:49:d7:55:17:c1:82:6b:9d:dc:53:2b:2d:37:fb:89: 39:87:97:53:f6:1f:20:17:33:27:ef:10:28:e6:5a:8f:38:29: 2d:4b:81:70:5c:6a:65:91:1e:91:cb:0b:b8:d9:b5:cd:58:0b: 9a:82:8b:5c:ea:00:97:40:0d:09:28:f7:05:38:8e:62:f1:90: 03:75:44:0f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4Fm8mWcnhS2W+OE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YWZkMjA1OGItOGQ3MS00YTg0LTgxOTUtMjcyY2RiNGJkY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmHZduvrG7OHLWZTMI9JFSTT7UuijdVhIDs/ WPjmwGkJbHP0NF3/0PqlnkqxwX5dOR+FsWcpNt7gkKuzGEEP4I9Zxpae9XrOdLJB OoAYN/gIRjnzOMMuzzvsCY3eD8Hfuv0JZ70yhZrxL5PxNP6+pqtDaAAf0RIT9y2v 9dMSUKOQrOvpmbiyZ9WtwSS4NSMn2ARHMS4qmL2BytP2/4/vLLc/VyZ2F0xnWhYh FuTIrocIBhS+hPgCYSdcLdDJoruJSAlPxhVAmzhxgGtMpUVk1fZ7gyrJOZG3LjRk DuIu+QyYWGUYl4w/ZRZrW1FfvdkS3dEpJP9v7abA61tsUJvxqwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDDoRr+J9feXXNggO7F8xrJJqsIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDFjNzQ2ODItZTI2MC0z OTdkLTgyNjctM2E0ZGMwZThmMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArP0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEeu7i5C6QM+DhW/Za/lhIpTScfHGKbqI6kbCp+/KLdnkkukgP2XasLFg PxC3ixlW+LD2sBq1flZxCbFJtMrogAZJAth8iNI7z1+eJV3/k0IcNlARBoU+2vOy l75m/0nWOyn9I42x2P8fJaAxPEBey0ndjWBVwv1OUHYTCWd4AmF9PaMjm0QHt//g YHkd2JKbQKN6ce72n0mReg/m8SOzDsgopOpiY0U86Hye5L78L5iKy4VzE82USddV F8GCa53cUystN/uJOYeXU/YfIBczJ+8QKOZajzgpLUuBcFxqZZEekcsLuNm1zVgL moKLXOoAl0ANCSj3BTiOYvGQA3VEDw== -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:28 2026 by rpki-client