$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/598cbd5b-7ce7-3a7f-bd1e-5e16bf398d88.roa File: 598cbd5b-7ce7-3a7f-bd1e-5e16bf398d88.roa (raw, json) Hash identifier: 493YKuq5WFTJUpd7XypZtqrec04Go7zc5U+h5lIi+Pg= Subject key identifier: 92:02:4F:F7:46:37:6C:D2:45:C0:AA:68:29:1B:6C:8A:99:A4:12:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C4CFFA4D983F3B5493700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/598cbd5b-7ce7-3a7f-bd1e-5e16bf398d88.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 43515 IP address blocks: 216.239.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:4c:ff:a4:d9:83:f3:b5:49:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=274e1c27-2a35-4c74-be02-9d1aefee44fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2e:3f:72:a9:af:f2:ce:6d:ab:bd:09:87:37: bd:93:62:25:36:ef:b5:08:9f:ef:ca:ba:31:d0:8b: 5d:37:3d:2a:47:6b:65:e6:50:35:5c:a7:39:48:2b: fc:ca:21:4f:39:9d:f1:9e:60:a2:6f:7a:72:a2:ba: 62:8c:41:8d:47:9f:73:5e:36:6a:e4:49:42:d4:46: 59:19:e6:05:50:7f:82:e0:75:f2:78:0b:67:e6:8c: aa:44:ea:cc:ce:2c:0a:ce:c8:10:40:bf:42:31:76: 69:38:27:9b:f2:46:a8:99:12:c7:d0:2b:5b:05:3f: 64:55:e1:9a:27:ce:de:25:77:03:42:5b:21:1c:62: 91:01:5a:84:bd:c9:f3:3e:df:84:eb:ae:d8:74:06: b7:cc:9b:73:07:49:ce:16:af:f9:97:af:60:39:5f: 8b:d0:99:5b:a6:75:8e:a7:c3:f2:ba:5e:e6:25:36: ce:18:9b:e7:d5:67:3a:a5:fb:93:da:e7:df:b0:1d: 35:08:af:10:48:17:20:d8:94:3d:4d:3f:4f:fa:18: 8a:5d:23:d7:77:7e:d2:d9:08:ed:df:a6:c5:f2:39: 35:ae:19:95:39:4b:e1:fd:cb:a7:5e:60:16:30:0d: fb:f2:81:df:14:b1:e0:35:0b:82:68:fe:33:c2:98: 7d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:02:4F:F7:46:37:6C:D2:45:C0:AA:68:29:1B:6C:8A:99:A4:12:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/598cbd5b-7ce7-3a7f-bd1e-5e16bf398d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:32:d5:32:ad:9c:61:78:10:c6:2d:e2:d4:e4:4f:b8:be:bb: 86:b0:06:aa:32:18:dd:c6:98:cb:b4:52:51:61:74:cb:c5:e5: 84:50:74:b2:f8:78:96:c3:79:02:72:3d:0b:7e:2f:d6:c6:f2: b1:d1:f0:ae:ea:d5:c4:1c:bd:cb:59:4d:d1:db:a0:ec:f8:cb: b1:f5:aa:bc:43:10:1f:e7:37:8a:30:4f:ee:05:de:83:03:e9: e3:dc:9f:97:6f:43:d2:1e:ba:d1:01:99:1e:b4:78:ac:c6:99: 7a:d9:2d:06:5c:53:c0:14:d9:33:cc:cb:fc:28:87:0b:0a:2e: 78:d6:22:cb:8f:02:5a:f4:8b:65:17:f7:7b:77:57:28:81:b7: 0d:04:cd:26:42:89:85:54:39:f6:3b:d9:21:de:6a:b3:df:fa: 8d:96:d3:49:03:de:fc:f4:87:71:e5:d3:fe:ab:07:7b:b3:6b: 8e:7a:24:74:1e:e2:3f:9f:44:6e:36:b9:e6:a0:86:4a:74:59: a6:ff:5b:a1:a9:80:f7:e6:56:bf:e6:22:cc:4f:0d:ed:89:e9: b9:88:12:0d:97:3b:cb:77:cc:c3:99:25:57:73:ef:cc:1d:40: f7:e9:31:65:57:4f:de:44:b3:d2:c4:e3:38:b8:de:33:3f:58: 4c:1c:77:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEz/pNmD87VJNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk Mjc0ZTFjMjctMmEzNS00Yzc0LWJlMDItOWQxYWVmZWU0NGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi4/cqmv8s5tq70Jhze9k2IlNu+1CJ/vyrox 0ItdNz0qR2tl5lA1XKc5SCv8yiFPOZ3xnmCib3pyorpijEGNR59zXjZq5ElC1EZZ GeYFUH+C4HXyeAtn5oyqROrMziwKzsgQQL9CMXZpOCeb8kaomRLH0CtbBT9kVeGa J87eJXcDQlshHGKRAVqEvcnzPt+E667YdAa3zJtzB0nOFq/5l69gOV+L0JlbpnWO p8Pyul7mJTbOGJvn1Wc6pfuT2uffsB01CK8QSBcg2JQ9TT9P+hiKXSPXd37S2Qjt 36bF8jk1rhmVOUvh/cunXmAWMA378oHfFLHgNQuCaP4zwph9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJICT/dGN2zSRcCqaCkbbIqZpBIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTk4Y2JkNWItN2NlNy0z YTdmLWJkMWUtNWUxNmJmMzk4ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYy1TKtnGF4EMYt4tTkT7i+u4awBqoyGN3GmMu0UlFhdMvF5YRQdLL4 eJbDeQJyPQt+L9bG8rHR8K7q1cQcvctZTdHboOz4y7H1qrxDEB/nN4owT+4F3oMD 6ePcn5dvQ9IeutEBmR60eKzGmXrZLQZcU8AU2TPMy/wohwsKLnjWIsuPAlr0i2UX 93t3VyiBtw0EzSZCiYVUOfY72SHearPf+o2W00kD3vz0h3Hl0/6rB3uza456JHQe 4j+fRG42ueaghkp0Wab/W6GpgPfmVr/mIsxPDe2J6bmIEg2XO8t3zMOZJVdz78wd QPfpMWVXT95Es9LE4zi43jM/WEwcd3Y= -----END CERTIFICATE-----Generated at Sat Jun 13 21:25:34 2026 by rpki-client