$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa File: 9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa (raw, json) Hash identifier: 5p4/+dh5UjtguhQTVmkg0BuEazStanOlXglnuaq9RYo= Subject key identifier: 49:58:C7:4E:AC:F4:2D:DD:D8:9B:5C:64:28:7E:75:01:65:74:F8:D2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BD1A7E3DF85F01CC3B600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 173.194.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:d1:a7:e3:df:85:f0:1c:c3:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=1850784f-9d6f-4ab8-9c34-03244702e400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ed:94:df:87:dc:cd:b7:0c:59:8b:27:0d:58: 78:b5:13:98:ce:27:5b:6b:92:cf:f6:7d:61:28:7f: 62:b9:d5:c1:17:5b:19:b6:59:05:29:e5:d6:0d:1c: d8:07:6e:a3:99:fc:b8:01:d5:db:8a:67:0f:b9:d2: 6d:16:bc:fe:56:c9:43:aa:c2:5e:11:25:ca:21:18: d6:57:12:da:c4:5a:7e:86:2b:e0:ac:59:f0:b4:0b: ce:65:31:85:d0:55:cb:ef:8f:7e:98:c6:21:1f:b1: 7c:2a:1c:cf:b9:70:9b:15:2a:b5:6f:0a:77:5d:f3: 66:dc:94:7c:36:22:fb:85:a5:07:93:c7:48:98:61: 16:d7:45:e3:5a:35:81:a9:e2:72:c3:74:c8:17:92: da:88:55:7a:d2:6f:d4:ec:39:b2:85:26:61:fd:55: 8c:0c:1c:75:d3:db:9a:55:b4:b7:bd:da:d2:8a:e4: 62:60:bf:1e:b9:be:34:59:91:5c:aa:a8:cd:b1:19: f1:c4:5f:eb:1c:26:6f:2a:7d:6a:7f:c5:7f:a3:68: fa:1f:ce:6f:37:2d:e9:b1:7f:b9:99:fd:92:42:b0: b1:8b:52:9a:cb:04:79:1d:81:10:2a:9a:83:d2:55: 9c:b2:e4:46:5e:aa:4c:e9:af:0d:d2:1f:ef:92:25: f8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:58:C7:4E:AC:F4:2D:DD:D8:9B:5C:64:28:7E:75:01:65:74:F8:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:27:44:46:c2:4a:f8:1c:f7:16:9b:ae:89:59:37:d9:8d:04: 61:31:b8:9d:c4:24:83:4b:10:32:b0:d6:06:3a:b2:1a:fc:a8: 4e:84:08:2f:b0:7c:fa:69:73:12:6c:dd:d8:15:1e:30:52:c6: 3c:9d:17:0a:36:a3:34:3c:34:2e:8d:a8:e5:95:88:22:96:4c: 1b:b2:86:1c:45:ee:52:b9:71:7f:be:2e:0f:07:03:9e:6e:ce: b1:1c:71:a0:7a:60:53:a4:10:68:e9:80:96:92:75:ee:90:e0: 0a:8a:30:3f:a2:95:88:55:09:9c:b4:8d:27:9e:02:0c:2b:ad: 24:8b:11:fc:9d:20:b7:f9:ce:b1:5f:cc:13:01:27:06:6c:74: fb:95:2e:ee:8b:96:e0:8c:72:c4:a4:7f:9b:a8:50:b3:f0:84: bc:1f:79:fa:94:af:5d:b7:09:1e:08:48:a4:a1:10:39:7c:6c: 8f:74:a1:9c:bb:80:7d:78:66:4e:98:71:ee:6a:00:e6:90:6f: fd:98:73:e3:53:79:7e:7f:b8:e4:71:e3:ba:f7:12:07:9d:59: 06:1b:aa:fa:b9:00:33:98:63:09:a0:68:32:2d:e1:51:ff:e8: 86:4e:ba:70:7c:e1:88:af:bf:40:cb:b1:89:55:bc:db:97:82: bb:3e:99:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm9Gn49+F8BzDtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MTg1MDc4NGYtOWQ2Zi00YWI4LTljMzQtMDMyNDQ3MDJlNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe2U34fczbcMWYsnDVh4tROYzidba5LP9n1h KH9iudXBF1sZtlkFKeXWDRzYB26jmfy4AdXbimcPudJtFrz+VslDqsJeESXKIRjW VxLaxFp+hivgrFnwtAvOZTGF0FXL749+mMYhH7F8KhzPuXCbFSq1bwp3XfNm3JR8 NiL7haUHk8dImGEW10XjWjWBqeJyw3TIF5LaiFV60m/U7DmyhSZh/VWMDBx109ua VbS3vdrSiuRiYL8eub40WZFcqqjNsRnxxF/rHCZvKn1qf8V/o2j6H85vNy3psX+5 mf2SQrCxi1KaywR5HYEQKpqD0lWcsuRGXqpM6a8N0h/vkiX4cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElYx06s9C3d2JtcZCh+dQFldPjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWEyZDAwY2QtMDUzOC0z OTY0LThhMjgtZWY4YjZiN2VlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8nREbCSvgc9xabrolZN9mNBGExuJ3EJINLEDKw1gY6shr8qE6ECC+w fPppcxJs3dgVHjBSxjydFwo2ozQ8NC6NqOWViCKWTBuyhhxF7lK5cX++Lg8HA55u zrEccaB6YFOkEGjpgJaSde6Q4AqKMD+ilYhVCZy0jSeeAgwrrSSLEfydILf5zrFf zBMBJwZsdPuVLu6LluCMcsSkf5uoULPwhLwfefqUr123CR4ISKShEDl8bI90oZy7 gH14Zk6Yce5qAOaQb/2Yc+NTeX5/uORx47r3EgedWQYbqvq5ADOYYwmgaDIt4VH/ 6IZOunB84Yivv0DLsYlVvNuXgrs+mVI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:14 2026 by rpki-client