$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa File: ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa (raw, json) Hash identifier: WhooHPc6pO2FRASGdixJ/nIgRTNUBOfNaclkmAYPERQ= Subject key identifier: 1B:B1:3F:6F:72:F1:70:B7:09:D8:F9:C2:86:35:A1:D6:78:6C:90:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C3FB2B56617E836827980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 216.58.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:3f:b2:b5:66:17:e8:36:82:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=af37a769-e1b1-4935-928e-599abd674095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ae:6b:7b:89:8d:d0:fc:93:42:92:34:f2:0d: c0:3a:e0:6a:85:89:9e:78:39:e5:3a:25:e0:3b:2f: 3a:d5:92:8c:89:f1:ad:89:4e:54:6a:45:ef:35:05: 5f:b0:78:af:89:ca:6a:68:c9:a3:fe:63:26:66:51: 50:19:0d:12:44:52:3f:b7:32:c6:49:51:19:e8:76: 14:85:bd:b4:53:27:9d:35:f6:80:24:0e:99:4f:b2: f9:af:b6:56:6f:32:fb:1b:b1:82:9c:75:56:96:f5: 7e:3f:a6:d9:e9:4e:fc:36:d8:80:53:3f:e3:94:64: 90:e5:64:0b:f5:15:5c:ff:07:1b:07:b8:dd:c3:4d: d3:ed:55:36:73:ca:14:2d:a3:a2:6a:40:54:80:31: 5f:1f:ca:f9:48:44:e2:51:16:81:65:c2:0a:10:98: 8f:e1:72:33:83:f9:64:2b:06:95:2f:64:38:92:dc: 11:e2:ee:63:5e:01:76:e1:df:20:da:3a:6a:f2:1e: 32:87:ac:3c:c7:4f:57:d4:5e:cd:7d:a7:f1:2e:d6: 2e:98:80:d9:ed:69:79:85:46:67:5c:b7:cc:9d:08: 42:dd:6c:85:18:38:bc:33:d4:f0:12:da:32:14:f0: 5e:23:cd:7f:f9:d8:14:26:2b:00:76:5a:1c:11:f0: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B1:3F:6F:72:F1:70:B7:09:D8:F9:C2:86:35:A1:D6:78:6C:90:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9a:b4:fc:97:3b:c7:3b:29:db:2f:6a:2f:9f:7b:0e:4d:90: 43:c4:97:43:ab:f4:66:89:d0:45:40:41:7c:1a:5d:47:74:65: 25:d0:31:6a:2c:68:e3:df:e2:4c:02:4c:c7:21:56:91:1a:dc: c1:32:37:b3:0a:26:a7:bb:8f:25:e8:69:15:b8:2a:6b:40:a9: 39:06:ac:ad:b0:97:38:37:9a:f1:41:cf:a2:8e:2a:06:24:04: 42:61:d0:70:c6:41:d4:d1:43:3d:86:7a:84:98:85:c7:9b:c5: 8f:70:40:88:74:6c:d1:62:92:61:66:03:1b:7f:3a:d2:c3:bb: bc:5a:62:4d:34:0d:bf:84:7c:20:9a:7a:36:cb:4e:a5:65:c7: f8:50:48:75:84:cd:e8:2e:e5:27:44:17:a5:72:aa:b7:82:6a: bb:72:07:2e:1a:19:58:1b:06:d2:09:52:ce:57:10:85:94:48: 6e:6f:4c:aa:8e:d2:66:05:7a:30:0c:2a:dd:eb:33:9f:e2:f8: d2:fb:d5:05:b4:b0:dc:fb:22:de:e4:9a:05:15:2b:54:cd:3e: cb:b1:ea:12:4e:3f:05:f6:5d:75:24:f2:ef:8e:f5:3f:64:5c: 95:34:84:ac:27:bc:49:f7:f7:76:09:ea:fe:4b:bc:2d:02:66: c3:87:c6:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnD+ytWYX6DaCeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YWYzN2E3NjktZTFiMS00OTM1LTkyOGUtNTk5YWJkNjc0MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq5re4mN0PyTQpI08g3AOuBqhYmeeDnlOiXg Oy861ZKMifGtiU5UakXvNQVfsHivicpqaMmj/mMmZlFQGQ0SRFI/tzLGSVEZ6HYU hb20UyedNfaAJA6ZT7L5r7ZWbzL7G7GCnHVWlvV+P6bZ6U78NtiAUz/jlGSQ5WQL 9RVc/wcbB7jdw03T7VU2c8oULaOiakBUgDFfH8r5SETiURaBZcIKEJiP4XIzg/lk KwaVL2Q4ktwR4u5jXgF24d8g2jpq8h4yh6w8x09X1F7NfafxLtYumIDZ7Wl5hUZn XLfMnQhC3WyFGDi8M9TwEtoyFPBeI81/+dgUJisAdlocEfB7lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuxP29y8XC3Cdj5woY1odZ4bJBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2UyYzViOTItYTA5Ni0z Yzg0LTg0YjItOWE2MzM5Y2QzMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASatPyXO8c7Kdsvai+few5NkEPEl0Or9GaJ0EVAQXwaXUd0ZSXQMWos aOPf4kwCTMchVpEa3MEyN7MKJqe7jyXoaRW4KmtAqTkGrK2wlzg3mvFBz6KOKgYk BEJh0HDGQdTRQz2GeoSYhcebxY9wQIh0bNFikmFmAxt/OtLDu7xaYk00Db+EfCCa ejbLTqVlx/hQSHWEzegu5SdEF6VyqreCartyBy4aGVgbBtIJUs5XEIWUSG5vTKqO 0mYFejAMKt3rM5/i+NL71QW0sNz7It7kmgUVK1TNPsux6hJOPwX2XXUk8u+O9T9k XJU0hKwnvEn393YJ6v5LvC0CZsOHxug= -----END CERTIFICATE-----Generated at Sat Jun 13 11:26:31 2026 by rpki-client