$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c472520-1409-3e88-9155-6e246e995f7a.roa File: 6c472520-1409-3e88-9155-6e246e995f7a.roa (raw, json) Hash identifier: y8Ohztg3B+nKVJoQ6ttG6Q6TTEDAxGmSxet+G6QY4a0= Subject key identifier: 9B:03:73:F8:96:CE:CE:A3:96:A6:12:C1:63:52:D5:6C:84:F2:90:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E08660029372751925CD32100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c472520-1409-3e88-9155-6e246e995f7a.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 66.102.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:00:29:37:27:51:92:5c:d3:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=7688d560-bc3b-4bf7-992b-5ba65a4a059d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a5:1f:c9:89:53:99:3d:c6:8b:3b:4b:c2:2e: 46:91:e1:29:89:75:2f:14:be:96:de:2a:ec:e2:3e: 80:65:56:be:46:65:48:75:2d:a5:da:3b:2c:b6:fc: c3:8d:95:87:04:98:c9:d9:49:2f:6b:8a:cb:54:fa: 51:d9:7d:13:08:21:91:41:01:a2:4b:e1:51:f5:8d: 0f:b8:35:71:e7:10:85:59:da:67:f8:75:76:dd:55: c1:ec:3d:68:bb:9a:e0:94:df:75:62:19:4d:24:8f: 7c:7b:26:05:f4:93:79:a1:b1:b9:2c:e4:01:97:45: 9b:e3:9e:34:92:41:e0:48:67:3c:03:db:d1:a4:7f: ab:86:46:a7:4e:37:e8:2a:fe:de:dd:93:72:87:9d: d8:ba:20:2c:d4:3c:33:34:01:3d:2c:be:7e:61:0c: 76:d9:64:3c:5b:aa:da:ed:15:b6:b7:a7:44:eb:4d: 0b:b7:ac:27:18:1d:39:7a:c2:56:be:5d:07:fb:ae: 26:6d:f6:84:63:a9:ad:f5:34:bc:b6:2e:d3:eb:6b: 78:59:cd:53:74:ac:1e:b9:dc:d6:0b:b0:85:57:b8: 54:ad:39:aa:86:49:4a:d9:fd:84:69:0d:f6:ab:1c: 75:98:3f:6f:0a:62:90:92:fd:78:87:06:2c:de:b8: b1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:03:73:F8:96:CE:CE:A3:96:A6:12:C1:63:52:D5:6C:84:F2:90:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c472520-1409-3e88-9155-6e246e995f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.102.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:44:ee:1b:fd:00:48:9c:95:4f:3a:dc:48:4e:0b:80:81:c8: 65:01:88:c4:60:30:8e:af:52:fc:8b:11:61:8e:1c:e8:17:bc: d4:03:42:45:2a:73:8a:0d:f6:97:b5:e1:1e:8d:5e:c6:49:4a: 59:31:c8:bc:63:1c:55:cc:c7:27:89:bd:d1:15:21:56:1d:47: e6:cf:7a:bf:af:65:00:7c:02:46:e8:87:74:cb:92:0b:58:67: a9:b9:05:97:ac:c4:58:68:da:6c:5c:ea:72:85:2f:78:93:91: ce:17:95:91:dd:13:65:1c:57:12:f5:8f:42:92:63:ff:8f:26: 25:2c:78:86:8d:19:70:c3:da:8b:18:57:8d:45:38:b5:3a:fd: 42:57:37:9f:4f:c4:29:bd:b2:0e:82:5a:87:46:cc:1f:be:64: a9:01:60:90:cb:99:77:05:9a:7c:81:fc:54:29:88:9b:11:14: b1:0f:17:1c:04:19:90:30:ce:a5:5e:7e:37:ba:88:eb:69:23: b1:e2:b5:fe:c5:01:e0:b9:31:8e:45:8b:52:72:9c:fe:a0:c3: 94:55:a6:df:35:7d:96:fd:6f:63:f1:39:f1:a6:e6:2d:20:d4: e9:3d:1a:cf:e0:ec:e7:04:5d:ae:4d:b1:e0:90:c0:ff:a2:48: 63:54:27:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZgApNydRklzTIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk NzY4OGQ1NjAtYmMzYi00YmY3LTk5MmItNWJhNjVhNGEwNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaUfyYlTmT3GiztLwi5GkeEpiXUvFL6W3irs 4j6AZVa+RmVIdS2l2jsstvzDjZWHBJjJ2Ukva4rLVPpR2X0TCCGRQQGiS+FR9Y0P uDVx5xCFWdpn+HV23VXB7D1ou5rglN91YhlNJI98eyYF9JN5obG5LOQBl0Wb4540 kkHgSGc8A9vRpH+rhkanTjfoKv7e3ZNyh53YuiAs1DwzNAE9LL5+YQx22WQ8W6ra 7RW2t6dE600Lt6wnGB05esJWvl0H+64mbfaEY6mt9TS8ti7T62t4Wc1TdKweudzW C7CFV7hUrTmqhklK2f2EaQ32qxx1mD9vCmKQkv14hwYs3rixnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsDc/iWzs6jlqYSwWNS1WyE8pBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmM0NzI1MjAtMTQwOS0z ZTg4LTkxNTUtNmUyNDZlOTk1ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhE7hv9AEiclU863EhOC4CByGUBiMRgMI6vUvyLEWGOHOgXvNQDQkUq c4oN9pe14R6NXsZJSlkxyLxjHFXMxyeJvdEVIVYdR+bPer+vZQB8Akboh3TLkgtY Z6m5BZesxFho2mxc6nKFL3iTkc4XlZHdE2UcVxL1j0KSY/+PJiUseIaNGXDD2osY V41FOLU6/UJXN59PxCm9sg6CWodGzB++ZKkBYJDLmXcFmnyB/FQpiJsRFLEPFxwE GZAwzqVefje6iOtpI7Hitf7FAeC5MY5Fi1JynP6gw5RVpt81fZb9b2PxOfGm5i0g 1Ok9Gs/g7OcEXa5NseCQwP+iSGNUJ44= -----END CERTIFICATE-----Generated at Sat Jun 13 13:27:19 2026 by rpki-client