$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa File: a430c233-1598-3766-bd27-1c26e3178a02.roa (raw, json) Hash identifier: oM5+d0+Z0TmgNxjRau4Vv+yqI+1K/wUCjP3YIj3q/HI= Subject key identifier: 86:80:CD:7D:74:16:E5:64:CE:6F:53:98:47:B2:86:F6:7E:18:BF:A1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BD1E9789B700A412DAC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 173.194.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:d1:e9:78:9b:70:0a:41:2d:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=4829f276-96e0-42cd-9cab-0d4b671b40f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:99:2c:aa:f8:63:99:54:c2:30:e8:bb:44:7d: 9e:c8:d7:3f:25:11:36:6f:be:b0:9d:8a:de:f2:f9: aa:3d:e9:a9:0e:52:a0:1e:31:f5:00:84:8b:90:95: 92:c5:88:d1:a1:d3:9f:bb:be:62:39:16:2c:23:4d: 2b:84:48:a4:a7:a2:e5:37:0f:d0:9a:4d:8b:94:c4: e7:21:eb:8d:63:75:cd:82:57:bb:a6:b3:e4:c7:96: a1:2b:cb:1e:6a:5b:e4:25:54:e5:42:59:47:95:18: 61:25:4f:43:3c:70:65:c6:b6:08:cd:8b:cd:8a:1c: ca:ea:cf:f6:01:7f:34:74:ab:18:a6:22:bc:d2:90: cd:b8:cf:e8:88:15:c1:96:81:fb:63:2d:ad:30:22: 65:18:1a:1c:02:aa:39:d7:c1:cb:e0:59:d1:d0:86: a3:9b:f5:ce:40:c9:6d:1b:11:cc:61:ce:bf:15:20: 4c:ff:6c:4f:59:ad:23:9f:d7:ae:55:cc:3e:3c:65: 99:90:57:78:65:7e:87:13:f3:53:f3:56:87:88:13: 26:f9:e2:fa:d4:bf:c9:2b:a1:39:04:5f:13:9a:89: 56:d3:15:8b:99:2b:99:e2:d0:6a:70:d5:e4:23:68: f5:e4:92:48:4d:59:91:95:e5:f7:2d:ae:75:cc:5b: 4c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:80:CD:7D:74:16:E5:64:CE:6F:53:98:47:B2:86:F6:7E:18:BF:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6e:45:94:b0:ea:23:db:94:23:11:fa:3b:43:a1:9d:3e:6f: 2e:92:76:28:12:b9:9b:c9:b6:83:06:8e:33:01:45:0f:47:ae: ca:66:d8:70:e2:f5:d7:92:5a:d2:2d:b7:ae:42:7d:b1:fb:7a: e7:51:45:b6:0f:56:ae:4d:b5:65:f3:fd:87:be:c8:94:f4:44: 4c:74:ca:bd:30:4f:fa:e2:4c:a7:ef:2a:73:4b:9a:8c:38:71: 78:da:da:d0:62:87:f1:1a:2b:6c:e6:7e:91:4c:00:2e:ac:cc: 00:c2:27:88:7a:07:4a:10:28:cf:68:70:19:80:14:de:f3:b3: 0a:8f:f1:90:2c:a5:41:3e:a4:f0:41:ca:02:d3:90:98:6d:69: 06:25:e1:c5:31:da:b8:69:82:a5:0d:52:fa:1d:e1:ff:c2:c8: db:e8:51:37:36:e5:ee:f8:c1:b7:6a:08:54:36:a8:7f:bf:cf: fd:5e:6c:6b:eb:4a:fa:2d:c3:cb:71:98:f1:b3:f9:c2:94:da: a0:47:6a:cc:e8:4e:50:b8:51:ad:4a:9d:81:d4:18:37:93:a9: 14:53:24:06:4a:6b:d8:74:91:62:e0:4e:0d:83:59:6d:29:e0: 49:07:7d:9e:fc:5b:8b:80:00:29:88:71:e6:ff:58:50:2a:41: 2b:94:54:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm9HpeJtwCkEtrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDgyOWYyNzYtOTZlMC00MmNkLTljYWItMGQ0YjY3MWI0MGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JksqvhjmVTCMOi7RH2eyNc/JRE2b76wnYre 8vmqPempDlKgHjH1AISLkJWSxYjRodOfu75iORYsI00rhEikp6LlNw/Qmk2LlMTn IeuNY3XNgle7prPkx5ahK8sealvkJVTlQllHlRhhJU9DPHBlxrYIzYvNihzK6s/2 AX80dKsYpiK80pDNuM/oiBXBloH7Yy2tMCJlGBocAqo518HL4FnR0Iajm/XOQMlt GxHMYc6/FSBM/2xPWa0jn9euVcw+PGWZkFd4ZX6HE/NT81aHiBMm+eL61L/JK6E5 BF8TmolW0xWLmSuZ4tBqcNXkI2j15JJITVmRleX3La51zFtMMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaAzX10FuVkzm9TmEeyhvZ+GL+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzMGMyMzMtMTU5OC0z NzY2LWJkMjctMWMyNmUzMTc4YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrcJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADluRZSw6iPblCMR+jtDoZ0+by6SdigSuZvJtoMGjjMBRQ9Hrspm2HDi 9deSWtItt65CfbH7eudRRbYPVq5NtWXz/Ye+yJT0REx0yr0wT/riTKfvKnNLmow4 cXja2tBih/EaK2zmfpFMAC6szADCJ4h6B0oQKM9ocBmAFN7zswqP8ZAspUE+pPBB ygLTkJhtaQYl4cUx2rhpgqUNUvod4f/CyNvoUTc25e74wbdqCFQ2qH+/z/1ebGvr Svotw8txmPGz+cKU2qBHaszoTlC4Ua1KnYHUGDeTqRRTJAZKa9h0kWLgTg2DWW0p 4EkHfZ78W4uAACmIceb/WFAqQSuUVLs= -----END CERTIFICATE-----Generated at Sat Jun 13 09:22:44 2026 by rpki-client