$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa File: db86d00a-9156-38fa-a2ec-a5019abb2c87.roa (raw, json) Hash identifier: VBUPzfjgw8BiSD+Dq6dOzfdvi0gSxwJYw4LKYatAAp8= Subject key identifier: A8:9E:92:9B:F7:16:63:DA:2B:B4:91:D3:5D:89:01:46:CC:2E:E3:AA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C3D7E5A406D096A18C800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 208.76.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:3d:7e:5a:40:6d:09:6a:18:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=42c9aae9-98f2-4a71-ba02-c1514a7ad522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0f:57:91:a4:37:38:f3:10:eb:8b:57:8f:c0: 6e:f6:bd:3e:31:11:65:2f:8b:66:14:64:e2:fa:87: a6:e8:a3:3a:94:e8:ca:29:ba:9f:1d:b9:23:5e:a7: 18:ce:f0:f4:8d:00:9f:36:ef:2b:55:4d:36:85:84: 67:00:1a:cc:00:44:33:5e:77:48:08:fe:08:48:90: 9c:af:70:d1:a5:3d:ea:8c:e7:a0:14:e7:94:72:ed: 7a:37:af:88:a2:82:80:ed:ab:5c:27:0f:13:d3:f7: 2f:0f:5f:9b:7e:5d:97:a5:02:1a:ca:ad:3e:fb:42: 06:be:a6:38:b4:19:26:2f:77:ef:56:5b:9b:c6:8b: ac:26:17:07:4e:d5:3a:e1:36:6b:47:fe:5b:f6:99: b0:9b:2a:3f:a9:68:93:f2:15:d5:8b:94:c4:6d:9b: 58:fe:4f:9c:61:2c:06:2e:bc:63:7f:fc:c7:e8:60: ae:26:fb:d8:5e:95:8c:ab:7c:b7:e4:1a:73:77:f2: 92:6d:09:00:b3:d0:cc:2f:95:84:7b:bc:7e:2b:26: 21:60:a5:7f:37:11:c7:26:4d:f7:e4:51:3b:43:a5: af:89:d3:d6:0b:8b:48:1c:d5:a9:41:aa:cb:a2:0a: 97:f7:b8:27:9f:cd:c3:79:9c:ea:bd:81:e0:b3:58: 18:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9E:92:9B:F7:16:63:DA:2B:B4:91:D3:5D:89:01:46:CC:2E:E3:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:6f:7b:c2:6b:3c:3b:c8:cc:56:24:1e:2d:c8:b9:51:31:bc: d5:23:97:59:d2:dc:5e:3c:f8:01:1f:ba:12:cc:7e:7e:df:3d: 80:09:24:cb:66:e7:ff:b4:24:90:c4:86:9d:f9:09:a8:17:66: 37:59:0c:f7:77:32:33:af:a4:f5:82:ed:3c:73:81:c5:de:be: 81:d8:f3:b5:50:72:98:c4:89:ba:ff:15:6e:f7:46:d6:b3:18: 52:8f:b6:97:38:db:d2:51:9b:89:b9:55:0a:51:41:36:01:7f: ed:26:95:88:3c:0e:60:b2:55:a7:11:45:0d:b3:c9:60:13:df: 65:a0:14:8d:0d:34:f7:90:b8:cc:b4:ca:42:bb:d6:32:82:b4: 42:fc:82:e7:a5:92:4f:8f:83:42:0e:33:95:75:8e:26:2a:e7: 99:46:19:32:cc:4c:04:2d:1b:91:9a:db:9e:0b:36:46:e8:6d: 9c:6f:5d:8d:28:e7:59:4e:4d:e9:61:ab:7f:a9:2e:72:78:3b: be:bf:ec:54:4f:ff:10:25:4e:18:f4:f2:cc:9c:82:97:8a:84: 4b:7a:8e:e0:47:90:c7:9f:b4:7a:8d:a0:f7:5f:db:4a:2a:15: 03:4c:09:73:c4:20:57:1c:b5:8e:29:40:db:20:a4:7b:e6:39: b9:10:93:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnD1+WkBtCWoYyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDJjOWFhZTktOThmMi00YTcxLWJhMDItYzE1MTRhN2FkNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5g9XkaQ3OPMQ64tXj8Bu9r0+MRFlL4tmFGTi +oem6KM6lOjKKbqfHbkjXqcYzvD0jQCfNu8rVU02hYRnABrMAEQzXndICP4ISJCc r3DRpT3qjOegFOeUcu16N6+IooKA7atcJw8T0/cvD1+bfl2XpQIayq0++0IGvqY4 tBkmL3fvVlubxousJhcHTtU64TZrR/5b9pmwmyo/qWiT8hXVi5TEbZtY/k+cYSwG Lrxjf/zH6GCuJvvYXpWMq3y35Bpzd/KSbQkAs9DML5WEe7x+KyYhYKV/NxHHJk33 5FE7Q6WvidPWC4tIHNWpQarLogqX97gnn83DeZzqvYHgs1gYYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiekpv3FmPaK7SR012JAUbMLuOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGI4NmQwMGEtOTE1Ni0z OGZhLWEyZWMtYTUwMTlhYmIyYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxve8JrPDvIzFYkHi3IuVExvNUjl1nS3F48+AEfuhLMfn7fPYAJJMtm 5/+0JJDEhp35CagXZjdZDPd3MjOvpPWC7TxzgcXevoHY87VQcpjEibr/FW73Rtaz GFKPtpc429JRm4m5VQpRQTYBf+0mlYg8DmCyVacRRQ2zyWAT32WgFI0NNPeQuMy0 ykK71jKCtEL8guelkk+Pg0IOM5V1jiYq55lGGTLMTAQtG5Ga254LNkbobZxvXY0o 51lOTelhq3+pLnJ4O76/7FRP/xAlThj08sycgpeKhEt6juBHkMeftHqNoPdf20oq FQNMCXPEIFcctY4pQNsgpHvmObkQk6Q= -----END CERTIFICATE-----Generated at Wed Jun 17 09:14:39 2026 by rpki-client