$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa File: 9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa (raw, json) Hash identifier: w9VnOsbEdNYoLmZtjV5i3jw3MT85F+psFk7qJQYdAyg= Subject key identifier: 98:51:9D:BC:92:AE:A2:E6:6B:47:40:C5:E1:4D:CA:B5:54:4E:C8:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC39377B765402EAA4D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.253.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c3:93:77:b7:65:40:2e:aa:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=ad553460-5fd4-4cf5-a22f-eee7ec0e52c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:84:db:05:a7:ac:a4:99:7a:fe:3f:86:b0: 96:a8:18:a6:7c:c7:1b:29:7d:6e:3d:6b:d0:82:96: 32:65:08:c9:c4:c9:58:7e:5f:33:24:54:8d:7b:5a: 5b:5a:11:82:70:39:c8:cc:0a:46:4d:c3:fb:7d:82: 62:30:eb:a9:c5:06:43:68:60:c9:66:45:38:fd:f4: 02:56:9a:fd:81:8d:26:4d:9b:85:e5:13:5f:f5:d2: 6c:66:a9:dc:20:05:48:52:57:70:af:6d:66:87:cf: a4:6b:9f:a2:55:d6:ee:91:2b:d4:25:43:e5:c5:70: f0:b3:e5:a2:50:62:a2:35:74:70:54:fa:a3:32:d4: 28:ab:7f:dc:fe:44:87:a5:8e:4f:fc:6a:de:02:a8: 8f:03:5a:dd:2f:39:bc:b3:51:3b:0a:bc:97:b6:75: 2e:34:38:28:66:11:15:23:c6:4f:58:77:86:be:1e: 81:d3:0d:3f:31:a9:0c:5f:11:33:2d:44:a2:c1:1c: 11:83:83:97:01:93:f2:09:47:e0:2a:94:6b:c6:11: 37:a8:71:df:2c:6a:ee:d1:3a:d1:0a:8a:66:86:ae: 9a:8d:96:af:4a:b6:f8:6b:0d:2b:01:13:c5:5b:66: 43:7f:c8:07:ae:0a:8d:dc:ad:7c:b3:1d:4d:5a:a6: 62:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:51:9D:BC:92:AE:A2:E6:6B:47:40:C5:E1:4D:CA:B5:54:4E:C8:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ae:9f:54:bf:6a:19:48:60:e4:9f:95:7e:c6:38:67:90:10: 53:48:96:17:b6:4b:7d:3b:da:e1:56:eb:52:d5:2d:92:12:30: 89:27:8c:60:f7:21:fc:d7:66:ca:70:04:4b:28:2b:80:4f:c6: 2a:bb:02:45:e8:30:38:5e:e9:88:1e:73:42:21:b7:99:d0:03: 6b:c1:b4:6a:94:8d:19:52:48:18:55:26:23:2f:cd:21:1d:a7: 68:1a:fb:ed:50:98:77:f3:3f:da:b6:a2:ba:d1:b1:f0:13:41: db:4a:86:92:a7:27:63:f6:de:26:2a:db:a1:cf:a2:44:4f:1e: a7:9a:f3:8c:77:45:6e:d1:7d:91:54:8d:64:09:64:3f:d4:cd: 9c:6b:45:48:a7:a7:e3:92:30:5e:f9:87:5a:fe:fe:c1:9b:92: 21:20:10:e9:51:6d:2e:87:b5:ac:8a:ef:29:98:f5:9c:bd:4c: b7:c7:95:8b:c8:2d:a4:88:7c:b5:bf:d3:be:92:0c:39:e9:8f: 15:92:1e:12:d9:90:f2:3c:2e:a8:54:a8:d9:fa:ed:da:2a:32: 66:57:32:ed:e7:d6:0d:d3:67:ed:d6:ed:a6:42:0d:0a:45:45: 47:3b:98:5a:bc:9b:54:bf:a0:ea:ae:a0:6c:69:cf:27:da:1d: 8f:37:35:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8OTd7dlQC6qTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YWQ1NTM0NjAtNWZkNC00Y2Y1LWEyMmYtZWVlN2VjMGU1MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE6E2wWnrKSZev4/hrCWqBimfMcbKX1uPWvQ gpYyZQjJxMlYfl8zJFSNe1pbWhGCcDnIzApGTcP7fYJiMOupxQZDaGDJZkU4/fQC Vpr9gY0mTZuF5RNf9dJsZqncIAVIUldwr21mh8+ka5+iVdbukSvUJUPlxXDws+Wi UGKiNXRwVPqjMtQoq3/c/kSHpY5P/GreAqiPA1rdLzm8s1E7CryXtnUuNDgoZhEV I8ZPWHeGvh6B0w0/MakMXxEzLUSiwRwRg4OXAZPyCUfgKpRrxhE3qHHfLGru0TrR Copmhq6ajZavSrb4aw0rARPFW2ZDf8gHrgqN3K18sx1NWqZiuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhRnbySrqLma0dAxeFNyrVUTsjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWU1NjhkMTEtYmMxZS0z NGQ4LWE3ZGItMGRmYWI5MDAxZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP13MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuun1S/ahlIYOSflX7GOGeQEFNIlhe2S3072uFW61LVLZISMIknjGD3 IfzXZspwBEsoK4BPxiq7AkXoMDhe6Ygec0Iht5nQA2vBtGqUjRlSSBhVJiMvzSEd p2ga++1QmHfzP9q2orrRsfATQdtKhpKnJ2P23iYq26HPokRPHqea84x3RW7RfZFU jWQJZD/UzZxrRUinp+OSMF75h1r+/sGbkiEgEOlRbS6HtayK7ymY9Zy9TLfHlYvI LaSIfLW/076SDDnpjxWSHhLZkPI8LqhUqNn67doqMmZXMu3n1g3TZ+3W7aZCDQpF RUc7mFq8m1S/oOquoGxpzyfaHY83Nd0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:40 2026 by rpki-client