$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa File: 6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa (raw, json) Hash identifier: Z3D0T9rc3Ht68TjU9MJYd0lGAf4j5Fxo0Te/ZVyYuFc= Subject key identifier: 19:46:57:4B:BF:E4:25:45:A6:42:AD:47:F4:D0:AC:13:88:18:88:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C422CF4A91D954E0373C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 11344 IP address blocks: 209.85.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:42:2c:f4:a9:1d:95:4e:03:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=b14a5c69-34a0-4c55-bd7c-bf8c65b81251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:93:db:99:2f:99:4e:40:cb:02:8d:52:3e: b6:f8:fd:43:a7:1b:31:4e:a7:e2:23:e9:b9:39:1b: b5:d6:f2:95:38:a8:59:6e:73:66:9e:2b:ab:7b:4e: 13:dd:2d:94:08:47:d1:50:18:de:69:af:a5:f6:90: 99:b0:b3:d3:93:66:1e:3e:14:f1:31:c0:7a:a3:1b: fb:96:d7:78:7e:cb:13:f2:e0:36:71:e0:8e:6c:b8: 88:41:23:93:f0:bc:d4:8c:0a:cb:43:20:b4:5f:38: 01:cc:86:9f:6f:1d:d4:22:31:8e:4a:17:4c:34:d7: c1:7f:50:d6:6c:ce:ad:c4:6a:99:83:67:72:fa:3e: 93:ec:e0:fc:bc:99:48:f2:80:c7:08:8c:15:c8:62: b4:6d:a7:f7:4c:db:ac:ce:8a:8c:b9:25:fa:2e:ee: e9:64:91:7d:e4:a6:30:dd:fc:8d:4c:c4:e7:a4:0b: 17:e8:42:d1:b6:2b:f9:30:4c:0f:50:ff:0c:54:7b: b9:c3:7f:4e:ec:b0:c7:62:a7:45:02:95:8b:3b:f4: a9:f4:3b:f7:07:2f:95:88:ef:2c:a3:3e:26:04:3f: e9:1b:86:05:7d:15:40:ac:71:ce:26:e3:42:9a:13: ba:68:b5:83:33:ef:76:dc:4e:31:77:3f:03:d5:ea: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:46:57:4B:BF:E4:25:45:A6:42:AD:47:F4:D0:AC:13:88:18:88:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:21:58:dc:ce:73:4f:34:d8:9a:5e:eb:1d:d3:26:cd:2d:a3: 96:d5:fc:64:55:9b:22:96:f0:b8:a9:16:8f:8d:a0:98:ca:58: a0:90:33:4a:b1:50:35:7e:22:89:fb:59:e7:42:59:8f:f0:51: 14:ff:6a:9e:f0:dc:5c:d9:b8:18:48:68:1b:24:06:96:c8:80: 68:0a:92:f5:ec:b2:ea:0e:77:3e:5c:32:18:4a:e2:82:4a:d0: 0f:62:1d:2f:58:c4:97:3e:ae:fc:80:81:cd:82:b8:30:96:d0: 83:fe:99:95:68:cf:74:1c:0b:29:ec:b4:32:93:81:a0:d3:5b: ce:df:d2:c6:bc:e0:8c:ca:dc:4f:a8:3c:cf:36:2c:71:65:cc: 58:80:f9:e9:f7:5b:37:c3:a0:d6:89:f1:8b:4f:39:72:e0:6b: 4c:d4:6b:b5:58:56:72:20:b8:d2:94:3b:90:da:40:da:13:95: 82:20:13:b3:db:dc:cd:f9:46:4d:f8:86:eb:18:50:55:c0:6d: c4:64:72:6f:35:b4:db:82:0d:44:2e:ab:20:5c:13:a2:fb:22: 54:8b:b6:d4:46:8c:2f:3c:5d:11:74:dd:82:43:c3:10:16:af: a3:29:e6:ee:45:2c:75:73:b7:2f:c7:5f:7a:40:05:68:ca:1f: 8c:28:d0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEIs9KkdlU4Dc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YjE0YTVjNjktMzRhMC00YzU1LWJkN2MtYmY4YzY1YjgxMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vmT25kvmU5AywKNUj62+P1DpxsxTqfiI+m5 ORu11vKVOKhZbnNmniure04T3S2UCEfRUBjeaa+l9pCZsLPTk2YePhTxMcB6oxv7 ltd4fssT8uA2ceCObLiIQSOT8LzUjArLQyC0XzgBzIafbx3UIjGOShdMNNfBf1DW bM6txGqZg2dy+j6T7OD8vJlI8oDHCIwVyGK0baf3TNuszoqMuSX6Lu7pZJF95KYw 3fyNTMTnpAsX6ELRtiv5MEwPUP8MVHu5w39O7LDHYqdFApWLO/Sp9Dv3By+ViO8s oz4mBD/pG4YFfRVArHHOJuNCmhO6aLWDM+923E4xdz8D1erzYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlGV0u/5CVFpkKtR/TQrBOIGIipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmViMDU4MWQtMTNkYy0z YzlhLTk2OGUtNGU3NWM5MzZiMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQhWNzOc0802Jpe6x3TJs0to5bV/GRVmyKW8LipFo+NoJjKWKCQM0qx UDV+Ion7WedCWY/wURT/ap7w3FzZuBhIaBskBpbIgGgKkvXssuoOdz5cMhhK4oJK 0A9iHS9YxJc+rvyAgc2CuDCW0IP+mZVoz3QcCynstDKTgaDTW87f0sa84IzK3E+o PM82LHFlzFiA+en3WzfDoNaJ8YtPOXLga0zUa7VYVnIguNKUO5DaQNoTlYIgE7Pb 3M35Rk34husYUFXAbcRkcm81tNuCDUQuqyBcE6L7IlSLttRGjC88XRF03YJDwxAW r6Mp5u5FLHVzty/HX3pABWjKH4wo0NE= -----END CERTIFICATE-----Generated at Sun Jun 14 10:46:48 2026 by rpki-client