$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa File: de6a6b49-15fb-3327-a988-9139a73a70b1.roa (raw, json) Hash identifier: cV4sv3cWmsqvN4mUC8GiyGT2SPM7dFm90N2irgdYlo4= Subject key identifier: 97:B8:2D:DB:66:03:62:76:06:46:72:85:8A:BA:2A:A3:C8:16:39:20 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BB9D311227C0156D8F740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 173.194.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:b9:d3:11:22:7c:01:56:d8:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=2edc69c2-40f3-4d6f-ba12-5f3cf5e30f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:aa:33:a8:11:7d:90:48:a7:4d:7c:b7:47: 55:cc:dc:16:0d:65:fa:c1:c8:49:be:de:9a:d3:bb: 7e:7d:ba:41:b8:90:0d:e9:79:b3:ce:18:2c:b5:ef: 26:d8:1b:7b:12:66:f8:24:1c:ec:cc:f7:a8:12:b5: f8:50:98:91:50:a1:e7:f1:c6:e7:ef:43:88:d5:40: 0a:d2:f5:a6:42:7d:13:62:b5:36:5a:0c:98:47:13: 8e:7d:e2:55:e1:2f:72:48:40:60:00:e1:32:8d:12: f8:62:6c:33:85:3d:69:e4:33:e1:54:6a:2b:31:10: 5d:c2:78:43:53:d1:a7:9a:63:35:d2:d1:64:30:cd: a4:a5:3d:57:ae:f3:18:4f:05:ba:5e:a4:6c:5e:4e: 94:ee:50:58:35:51:61:1b:21:26:f7:2b:96:b9:79: 14:3c:5f:28:c4:5c:39:b5:f4:f6:35:af:73:9f:65: 85:71:b2:ab:86:a0:df:e3:67:07:46:e7:f9:6d:53: 6e:58:8a:d8:ce:7e:15:5f:53:86:83:8f:7d:cc:ab: 33:77:a8:df:85:60:96:20:18:74:97:a0:65:23:af: 15:d5:77:49:ba:3b:71:ed:5e:48:c0:2d:27:86:ef: 42:a2:f1:b1:5e:c0:b0:cb:06:e0:f3:2e:40:06:03: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B8:2D:DB:66:03:62:76:06:46:72:85:8A:BA:2A:A3:C8:16:39:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a3:46:f4:fe:7c:99:88:ea:61:e4:30:c5:48:4f:9a:15:e4: 9e:3d:48:6e:81:29:f0:72:ad:56:8a:5b:18:31:f3:ca:cb:de: fd:89:b0:53:50:0d:c1:bd:69:5f:21:68:a1:cc:38:79:a1:b4: 83:be:3a:02:38:8a:d7:cb:9b:b8:4d:84:b0:e4:c6:ae:79:46: 38:77:77:6b:8c:28:48:a5:e4:57:6d:a7:c6:ec:ea:cf:22:e4: 10:28:e3:0a:27:02:a3:bf:c0:4f:a1:f4:4f:c8:56:75:33:9f: 54:bb:f2:f0:67:be:be:9e:b5:93:81:2d:f7:50:d6:33:02:06: e5:4f:3a:b7:f1:a3:38:89:7f:e0:43:80:71:c1:fb:e4:51:69: 00:d5:a2:43:3b:79:aa:d7:a8:ee:3e:61:3a:4a:99:e7:e5:4b: ef:af:49:ac:9c:7b:96:48:24:04:af:01:1a:08:21:8c:33:18: ac:aa:8c:cc:7b:08:dd:f0:df:56:9d:9a:5b:8b:28:a0:37:79: 37:17:b2:df:c1:96:80:97:7c:0b:14:f7:c3:05:fa:fd:d6:98: 01:37:f1:fa:09:de:22:5e:35:ed:99:3a:91:92:32:5d:60:10: 9a:83:af:10:8d:e8:0a:f5:c2:1a:9b:85:7f:e0:4a:ef:40:66: fe:c9:f7:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm7nTESJ8AVbY90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MmVkYzY5YzItNDBmMy00ZDZmLWJhMTItNWYzY2Y1ZTMwZjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlOqM6gRfZBIp018t0dVzNwWDWX6wchJvt6a 07t+fbpBuJAN6Xmzzhgste8m2Bt7Emb4JBzszPeoErX4UJiRUKHn8cbn70OI1UAK 0vWmQn0TYrU2WgyYRxOOfeJV4S9ySEBgAOEyjRL4YmwzhT1p5DPhVGorMRBdwnhD U9GnmmM10tFkMM2kpT1XrvMYTwW6XqRsXk6U7lBYNVFhGyEm9yuWuXkUPF8oxFw5 tfT2Na9zn2WFcbKrhqDf42cHRuf5bVNuWIrYzn4VX1OGg499zKszd6jfhWCWIBh0 l6BlI68V1XdJujtx7V5IwC0nhu9CovGxXsCwywbg8y5ABgPfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJe4LdtmA2J2BkZyhYq6KqPIFjkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGU2YTZiNDktMTVmYi0z MzI3LWE5ODgtOTEzOWE3M2E3MGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+jRvT+fJmI6mHkMMVIT5oV5J49SG6BKfByrVaKWxgx88rL3v2JsFNQ DcG9aV8haKHMOHmhtIO+OgI4itfLm7hNhLDkxq55Rjh3d2uMKEil5Fdtp8bs6s8i 5BAo4wonAqO/wE+h9E/IVnUzn1S78vBnvr6etZOBLfdQ1jMCBuVPOrfxoziJf+BD gHHB++RRaQDVokM7earXqO4+YTpKmeflS++vSayce5ZIJASvARoIIYwzGKyqjMx7 CN3w31admluLKKA3eTcXst/BloCXfAsU98MF+v3WmAE38foJ3iJeNe2ZOpGSMl1g EJqDrxCN6Ar1whqbhX/gSu9AZv7J96w= -----END CERTIFICATE-----Generated at Sat Jun 13 09:21:52 2026 by rpki-client