$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa File: a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa (raw, json) Hash identifier: NBi1f3pd+Wcl1m+K3NaQMveOnGqm8l+ESGn5/bRWox4= Subject key identifier: 38:2A:A1:97:D3:E5:22:7C:B9:C8:86:10:52:DD:96:4D:8D:9B:98:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BCDDBDD47F9D574535370 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 173.194.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:cd:db:dd:47:f9:d5:74:53:53:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=752aef44-0039-4d60-8f38-c345aa75cb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:43:7e:8d:e9:f9:5d:91:3e:e9:97:8b:2f:a7: 20:0f:d2:58:cf:71:20:d2:bb:57:25:6e:91:de:5c: 39:fc:c5:27:10:ca:f3:0d:90:96:cd:19:14:da:45: 65:46:89:1c:56:b8:60:df:af:03:b1:2b:08:dc:44: f9:15:f0:a1:c0:05:cb:a0:96:51:38:0e:e9:76:07: 0b:9a:21:bd:00:f4:75:7c:62:fb:23:c0:68:6f:8b: e8:c7:3a:92:42:37:1b:1a:b7:b7:9c:3a:48:c9:61: bd:30:4a:68:89:42:bb:83:27:59:94:76:2a:83:9d: 33:c6:c3:f6:7e:d0:74:9c:e1:fb:76:9d:3b:8c:9b: a4:f6:7a:9d:7c:51:b5:b4:d0:86:df:9b:2e:3f:88: b4:a1:8c:be:6e:0d:26:0d:26:ef:a0:c1:6b:51:22: b0:f2:00:c6:62:6e:b9:26:1f:34:2e:9e:43:4b:97: 68:91:cc:0c:d1:80:06:fa:2e:30:d7:62:6f:d9:32: 86:14:16:3e:0a:2e:a6:a7:5f:15:e0:fa:54:49:69: 4b:a7:c6:66:46:c9:eb:8f:84:c7:23:7c:26:56:db: 31:fc:56:12:58:d6:43:fe:5a:ba:b7:de:7f:50:a5: 98:ea:91:6e:b6:6f:7b:af:33:37:0b:1e:90:8c:be: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2A:A1:97:D3:E5:22:7C:B9:C8:86:10:52:DD:96:4D:8D:9B:98:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:e6:c8:3f:b3:b3:77:e6:50:ad:0c:d9:d0:32:c1:a3:35:42: 55:46:d4:01:e3:3c:ae:bd:c6:03:84:e4:57:4f:cb:d6:31:21: 4d:4d:b6:3d:1c:d0:8c:5b:5b:c9:e5:20:2c:22:43:14:01:cd: 38:e9:76:b3:3f:d7:df:9f:6e:81:1f:f9:32:16:32:96:f2:53: 36:bd:94:79:ed:cd:92:6b:26:e5:d8:18:3a:1f:16:73:a3:94: c4:c5:ac:65:42:a7:dd:29:f4:16:6a:ab:25:92:cd:28:c7:ef: eb:87:99:1f:07:bc:29:49:fe:a9:f4:af:8a:71:09:55:c4:f8: db:ec:36:11:a2:1f:00:4d:1a:ea:a0:e4:cc:72:1d:65:73:1d: fd:0b:28:e4:50:7e:25:3a:54:64:04:b3:8a:2d:86:1a:51:2e: 80:58:4a:4a:fd:82:76:9e:df:a3:f8:7f:e8:2d:bf:9f:d7:3f: 2c:be:c7:78:b2:44:bd:a4:f7:a8:58:ba:81:98:3b:33:93:a4: e9:45:4c:9f:a9:d8:f4:35:df:30:59:31:3c:6f:5a:94:96:47: fb:1a:cd:a0:d6:a2:86:68:da:72:9a:f8:08:f7:0d:b2:a7:0b: 81:4a:cc:c6:fb:dc:ff:b3:b7:76:9d:73:a6:e2:4a:bd:da:d8: 47:54:e6:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm83b3Uf51XRTU3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NzUyYWVmNDQtMDAzOS00ZDYwLThmMzgtYzM0NWFhNzVjYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0N+jen5XZE+6ZeLL6cgD9JYz3Eg0rtXJW6R 3lw5/MUnEMrzDZCWzRkU2kVlRokcVrhg368DsSsI3ET5FfChwAXLoJZROA7pdgcL miG9APR1fGL7I8Bob4voxzqSQjcbGre3nDpIyWG9MEpoiUK7gydZlHYqg50zxsP2 ftB0nOH7dp07jJuk9nqdfFG1tNCG35suP4i0oYy+bg0mDSbvoMFrUSKw8gDGYm65 Jh80Lp5DS5dokcwM0YAG+i4w12Jv2TKGFBY+Ci6mp18V4PpUSWlLp8ZmRsnrj4TH I3wmVtsx/FYSWNZD/lq6t95/UKWY6pFutm97rzM3Cx6QjL6tnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgqoZfT5SJ8uciGEFLdlk2Nm5ipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTlmZTM0NDUtOTk3NS0z YTZhLThhOTMtMGE2OGY4M2Y5MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjmyD+zs3fmUK0M2dAywaM1QlVG1AHjPK69xgOE5FdPy9YxIU1Ntj0c 0IxbW8nlICwiQxQBzTjpdrM/19+fboEf+TIWMpbyUza9lHntzZJrJuXYGDofFnOj lMTFrGVCp90p9BZqqyWSzSjH7+uHmR8HvClJ/qn0r4pxCVXE+NvsNhGiHwBNGuqg 5MxyHWVzHf0LKORQfiU6VGQEs4othhpRLoBYSkr9gnae36P4f+gtv5/XPyy+x3iy RL2k96hYuoGYOzOTpOlFTJ+p2PQ13zBZMTxvWpSWR/sazaDWooZo2nKa+Aj3DbKn C4FKzMb73P+zt3adc6biSr3a2EdU5l0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:35 2026 by rpki-client