$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa File: b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa (raw, json) Hash identifier: WXQw9n1cjvF0BMa0oKWH6C+vEdokjHBe46SEW/slIHs= Subject key identifier: 03:4F:18:33:49:CD:35:17:F2:2A:B2:CC:AA:DD:43:BC:20:73:7B:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C462B617EE9B274BA9980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 172.253.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:46:2b:61:7e:e9:b2:74:ba:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=e71e41ce-4a96-4eb6-8270-0596efd66e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3d:35:4b:94:62:ba:f9:ca:eb:43:2a:86:04: 33:b7:ef:8a:f8:9d:82:3a:3e:af:30:63:15:51:c8: f6:7a:8e:fa:8a:89:33:16:69:45:5b:2c:61:54:ab: 83:08:21:c7:cc:c0:81:3f:43:aa:ea:e1:bb:88:87: 23:57:11:64:66:c1:ca:9b:69:e0:f4:4c:ed:29:73: 36:34:07:08:f7:54:16:3e:35:1f:1c:f6:d9:7d:84: 9f:69:bd:00:af:67:30:f0:91:2c:8f:29:5c:f3:cd: 21:c1:f2:90:34:05:b3:67:43:42:b1:55:7d:bc:25: f0:d9:73:6c:ec:66:7c:ef:08:91:5e:58:ec:fe:e4: 54:4e:e6:5f:1e:c9:6a:f9:36:a5:c1:39:49:d8:3d: c8:04:70:55:2d:65:a8:d4:74:31:83:aa:63:33:32: 93:b2:f9:6b:b1:07:c9:b8:ef:7d:fb:49:0e:52:10: c0:77:bb:52:9c:ca:d7:37:30:e2:e5:10:c7:4d:cc: fc:df:5b:2d:9c:34:f4:9b:22:e9:8f:32:54:e1:5c: a5:95:c5:b4:80:dd:32:cb:39:1c:1e:ac:be:81:df: de:ec:91:99:ff:e6:b3:e8:1b:b0:14:f9:f2:7d:91: 94:72:9d:2c:06:db:84:cb:62:a9:fd:e6:50:f4:f2: 1a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4F:18:33:49:CD:35:17:F2:2A:B2:CC:AA:DD:43:BC:20:73:7B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9f:02:b5:44:fc:13:b4:c7:57:49:3f:33:8e:7f:92:cb:2a: 1c:c5:b9:9f:c0:db:09:1b:f0:67:2c:3b:2f:77:29:18:16:1e: 94:0f:08:4e:f0:dd:5f:67:74:02:1b:8c:4c:38:a6:f3:d4:f9: dc:6f:9e:5b:ee:3a:e3:c0:09:04:41:f5:7a:ac:ec:6c:9b:bc: a5:63:de:3c:75:57:76:43:f5:57:04:d6:09:f1:f4:c2:c1:47: d3:d2:92:16:48:9a:a7:f6:6c:a6:c2:3e:7a:33:66:88:a8:31: 79:c8:75:50:98:e9:0b:4e:91:d9:7e:97:45:11:9d:48:16:0c: 3b:c5:6e:cb:84:8b:b4:34:77:14:dd:4c:94:11:5a:c5:82:7f: e0:20:bb:f0:0e:26:c0:18:f2:a0:57:fd:1b:a5:72:da:57:f8: 57:2e:bb:67:3c:34:5f:e6:a1:8b:42:7f:c1:03:37:d5:b0:9b: 67:fb:2e:4d:d8:48:6d:84:9b:ef:97:e6:ba:eb:f7:3c:c4:4b: 14:19:69:5e:e4:4d:61:f8:32:db:b1:b2:e9:64:a9:32:9f:28: 07:a4:f6:05:bd:52:4d:6a:b8:29:12:68:32:a5:c7:7b:7e:f9: c6:9b:16:80:6a:8d:7f:46:84:66:ff:48:6c:62:7b:d9:f1:f8: 30:96:1e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEYrYX7psnS6mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZTcxZTQxY2UtNGE5Ni00ZWI2LTgyNzAtMDU5NmVmZDY2ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j01S5RiuvnK60MqhgQzt++K+J2COj6vMGMV Ucj2eo76iokzFmlFWyxhVKuDCCHHzMCBP0Oq6uG7iIcjVxFkZsHKm2ng9EztKXM2 NAcI91QWPjUfHPbZfYSfab0Ar2cw8JEsjylc880hwfKQNAWzZ0NCsVV9vCXw2XNs 7GZ87wiRXljs/uRUTuZfHslq+TalwTlJ2D3IBHBVLWWo1HQxg6pjMzKTsvlrsQfJ uO99+0kOUhDAd7tSnMrXNzDi5RDHTcz831stnDT0myLpjzJU4VyllcW0gN0yyzkc Hqy+gd/e7JGZ/+az6BuwFPnyfZGUcp0sBtuEy2Kp/eZQ9PIaHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANPGDNJzTUX8iqyzKrdQ7wgc3spMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJjMWYxYTItMjRlNi0z ODQwLWExZWEtNDUxZjA2MjVhMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESfArVE/BO0x1dJPzOOf5LLKhzFuZ/A2wkb8GcsOy93KRgWHpQPCE7w 3V9ndAIbjEw4pvPU+dxvnlvuOuPACQRB9Xqs7GybvKVj3jx1V3ZD9VcE1gnx9MLB R9PSkhZImqf2bKbCPnozZoioMXnIdVCY6QtOkdl+l0URnUgWDDvFbsuEi7Q0dxTd TJQRWsWCf+Agu/AOJsAY8qBX/RulctpX+Fcuu2c8NF/moYtCf8EDN9Wwm2f7Lk3Y SG2Em++X5rrr9zzESxQZaV7kTWH4MtuxsulkqTKfKAek9gW9Uk1quCkSaDKlx3t+ +cabFoBqjX9GhGb/SGxie9nx+DCWHi8= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:40 2026 by rpki-client