$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa File: af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa (raw, json) Hash identifier: W8h3xm0OK3d4vtYVGok+St3IMxfxgB0effCz3NCFaLw= Subject key identifier: 72:A9:B7:55:9C:ED:11:9C:26:55:44:24:6F:65:52:27:F7:CA:F5:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DEDE0B5D8B0E8A79354043C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 15169 IP address blocks: 192.179.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:b5:d8:b0:e8:a7:93:54:04:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=5d25b272-3fab-4ba7-8ba4-d079ba9cf2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5f:ab:cf:5f:eb:2c:2a:2a:f8:67:ae:01:82: 06:81:b1:21:54:2c:02:19:05:d8:3b:2f:b0:fa:1f: 4f:76:d5:7e:73:74:45:34:78:25:da:ab:a2:54:5a: 17:79:d1:7d:f1:da:9a:88:f5:87:f3:16:83:7c:b6: 0f:5e:55:e3:cf:1a:f4:d3:4a:7f:87:fb:ec:03:7c: a7:79:0f:14:66:fa:11:4a:15:de:c3:3f:89:91:95: c0:b3:ad:6a:04:cf:d7:1b:1a:42:68:7d:e5:57:e4: 2f:20:14:bb:28:5a:d6:b8:41:c8:ff:d3:ff:07:8a: be:b1:fc:7f:84:4b:b0:5c:cd:91:f7:73:21:fe:98: 6f:46:2e:18:94:7f:27:93:a9:9c:f5:4f:9d:12:ce: 2a:77:43:89:2e:04:a9:64:2b:fb:78:4c:fd:bc:a3: 60:33:03:61:c7:70:e0:54:7e:e6:1a:bc:eb:75:1a: ed:ba:04:73:9c:38:98:ab:74:83:e0:d4:99:99:d8: da:18:db:af:41:f9:df:e0:aa:12:b3:5c:69:d0:23: 09:f1:e3:66:a3:d0:7a:af:4d:9e:95:97:78:1c:f7: 95:24:85:29:c8:c4:2d:5d:17:31:14:3a:43:ad:19: 4f:f0:cf:02:ce:00:85:8c:32:54:25:91:18:7e:80: 52:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A9:B7:55:9C:ED:11:9C:26:55:44:24:6F:65:52:27:F7:CA:F5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.179.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:db:77:b5:09:7b:e9:4a:58:86:21:49:22:37:c4:bb:df:75: 51:bf:05:69:44:5b:2f:ed:04:e8:35:cd:3b:6f:0e:43:33:2e: 13:14:0e:96:49:a9:73:b7:10:b6:b5:f8:69:cc:b5:89:20:54: e0:d4:bb:59:8c:47:32:ae:2b:c8:cd:64:1f:17:20:47:a3:a7: 5e:67:a3:d6:56:9c:c6:19:57:e3:e2:2b:39:74:5a:cb:4c:ff: ec:d7:1a:86:d4:bb:47:cb:09:70:e2:e3:69:c1:63:69:69:db: 72:02:34:dd:44:d4:cb:90:1b:37:76:8d:85:7a:56:d8:8c:7c: 3f:6d:56:d0:ef:44:6a:70:a0:0a:23:9f:53:60:97:b8:40:be: 8c:68:90:c6:51:77:a6:b9:b6:27:11:9e:d4:e9:b0:02:83:a7: 86:d4:f4:be:40:e2:db:0c:89:26:67:71:79:a6:f0:3a:aa:d4: 8a:f3:a5:d0:29:40:6c:10:58:b4:89:39:fc:16:5e:9a:77:f4: 54:4d:ad:ba:09:fb:fc:e0:2f:23:54:b5:e7:19:40:9f:73:36: 3e:d9:b9:90:13:18:dc:9a:b0:7e:13:3f:cb:5a:75:1c:bc:2a: a9:7e:45:b1:56:2d:6c:2d:f8:c4:d8:ee:09:41:78:ac:66:f7: a7:ee:ab:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4LXYsOink1QEPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk NWQyNWIyNzItM2ZhYi00YmE3LThiYTQtZDA3OWJhOWNmMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF+rz1/rLCoq+GeuAYIGgbEhVCwCGQXYOy+w +h9PdtV+c3RFNHgl2quiVFoXedF98dqaiPWH8xaDfLYPXlXjzxr000p/h/vsA3yn eQ8UZvoRShXewz+JkZXAs61qBM/XGxpCaH3lV+QvIBS7KFrWuEHI/9P/B4q+sfx/ hEuwXM2R93Mh/phvRi4YlH8nk6mc9U+dEs4qd0OJLgSpZCv7eEz9vKNgMwNhx3Dg VH7mGrzrdRrtugRznDiYq3SD4NSZmdjaGNuvQfnf4KoSs1xp0CMJ8eNmo9B6r02e lZd4HPeVJIUpyMQtXRcxFDpDrRlP8M8CzgCFjDJUJZEYfoBSmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKpt1Wc7RGcJlVEJG9lUif3yvUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWY2ZWM4NWEtOTFhMi0z YTM0LTk2ZTUtOWU3Y2I3OGE0OWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLMVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErbd7UJe+lKWIYhSSI3xLvfdVG/BWlEWy/tBOg1zTtvDkMzLhMUDpZJ qXO3ELa1+GnMtYkgVODUu1mMRzKuK8jNZB8XIEejp15no9ZWnMYZV+PiKzl0WstM /+zXGobUu0fLCXDi42nBY2lp23ICNN1E1MuQGzd2jYV6VtiMfD9tVtDvRGpwoAoj n1Ngl7hAvoxokMZRd6a5ticRntTpsAKDp4bU9L5A4tsMiSZncXmm8Dqq1IrzpdAp QGwQWLSJOfwWXpp39FRNrboJ+/zgLyNUtecZQJ9zNj7ZuZATGNyasH4TP8tadRy8 Kql+RbFWLWwt+MTY7glBeKxm96fuqw4= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:08 2026 by rpki-client