$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8a51f56-762d-33d4-8f47-b6b25f534ddf.roa File: f8a51f56-762d-33d4-8f47-b6b25f534ddf.roa (raw, json) Hash identifier: E9z8X8U84c+SjSJU/6jrsQ8VSb35mAJQsnWRC7X6+fM= Subject key identifier: 5F:3B:7D:E0:13:E9:7A:CD:CE:B8:D2:BD:D3:D1:12:01:99:EB:F7:8E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C3F4DE1A7896B65AA0100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8a51f56-762d-33d4-8f47-b6b25f534ddf.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 173.194.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:3f:4d:e1:a7:89:6b:65:aa:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=dabea8dd-9960-4cd2-bd24-0f4373f0909a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:da:d4:06:ef:64:df:38:51:97:3f:87:06:5f: 6b:7c:bb:6c:c1:37:3f:58:2f:e9:eb:8d:8a:d7:3b: 37:fb:1e:fc:2b:e7:a1:1e:6e:8b:ca:18:22:2a:20: 67:95:20:1b:31:84:65:c0:8a:70:19:4a:a1:a7:51: e8:4e:3d:a2:b2:68:6d:65:7e:00:b0:13:39:3a:e5: 0a:37:c6:de:98:a6:a3:22:6c:b9:31:07:6e:62:a0: d7:5c:d7:2c:13:37:2e:e2:03:65:2a:9a:2c:48:93: 40:53:99:7b:8f:42:20:ce:d7:00:50:ce:87:a4:89: ec:0e:fb:af:97:eb:56:13:fa:16:18:f2:18:66:98: a8:20:ac:d6:35:bf:67:96:69:2e:e9:4f:01:fb:f4: 36:a2:ee:c0:97:b6:14:34:3c:12:25:4a:18:a6:d2: 27:15:7d:ab:99:43:1f:32:3b:3b:c8:15:4a:69:1f: 5e:11:dc:69:6c:7d:e7:70:2f:b2:6b:cc:43:68:df: f7:7f:d2:b0:2b:89:16:4a:11:3b:49:a0:39:d8:38: e9:27:0e:c6:0b:3b:fc:bd:5e:63:55:02:85:cc:29: ca:89:51:35:74:fc:3f:e1:86:61:48:ab:37:4e:44: f2:7a:42:2f:8f:7e:af:01:3a:93:d0:df:75:e1:3d: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3B:7D:E0:13:E9:7A:CD:CE:B8:D2:BD:D3:D1:12:01:99:EB:F7:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8a51f56-762d-33d4-8f47-b6b25f534ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:36:08:e7:ce:07:3d:2d:68:b1:27:61:80:3e:ed:13:28:66: 78:40:44:46:c2:91:73:df:ab:6b:1c:f6:c2:58:41:9d:f2:17: be:2b:7f:9a:74:4e:45:88:5f:70:18:b8:8b:91:a1:91:74:ea: 79:0a:71:63:08:47:06:0b:c3:96:41:94:92:9b:c5:ab:2f:df: ce:5a:fb:50:78:9d:7e:3a:a4:58:12:1f:3b:79:3c:b6:a6:af: df:99:30:9f:b5:ee:27:f1:97:30:52:ca:27:ca:7f:d3:48:8d: d8:34:8c:2e:e4:38:75:1e:35:5a:d3:c4:ea:64:bb:1b:b8:17: 5b:23:f2:ff:34:cb:02:c9:a1:ae:45:62:a6:10:6d:1d:f0:80: cd:0f:2d:70:89:16:a3:1d:05:17:2d:ad:8e:9f:d0:6a:0e:af: 16:a6:25:fe:5d:b0:c4:a6:7b:ad:b5:ef:22:22:56:7c:38:ef: 13:df:c5:ee:e6:ca:51:3f:9d:ed:51:8d:d9:2c:94:03:50:b3: 49:5d:8f:da:12:d7:f9:e3:95:a0:ed:53:fa:eb:c7:06:48:ae: ae:3b:ce:5d:3d:1b:50:4b:78:7c:8b:2d:19:42:79:67:6b:8a: 5d:be:8c:3e:a2:49:3d:4d:49:42:e3:2c:81:b3:2d:a3:9b:2a: 9d:6f:4c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnD9N4aeJa2WqAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZGFiZWE4ZGQtOTk2MC00Y2QyLWJkMjQtMGY0MzczZjA5MDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9rUBu9k3zhRlz+HBl9rfLtswTc/WC/p642K 1zs3+x78K+ehHm6LyhgiKiBnlSAbMYRlwIpwGUqhp1HoTj2ismhtZX4AsBM5OuUK N8bemKajImy5MQduYqDXXNcsEzcu4gNlKposSJNAU5l7j0IgztcAUM6HpInsDvuv l+tWE/oWGPIYZpioIKzWNb9nlmku6U8B+/Q2ou7Al7YUNDwSJUoYptInFX2rmUMf Mjs7yBVKaR9eEdxpbH3ncC+ya8xDaN/3f9KwK4kWShE7SaA52DjpJw7GCzv8vV5j VQKFzCnKiVE1dPw/4YZhSKs3TkTyekIvj36vATqT0N914T3xNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF87feAT6XrNzrjSvdPREgGZ6/eOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjhhNTFmNTYtNzYyZC0z M2Q0LThmNDctYjZiMjVmNTM0ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo2COfOBz0taLEnYYA+7RMoZnhAREbCkXPfq2sc9sJYQZ3yF74rf5p0 TkWIX3AYuIuRoZF06nkKcWMIRwYLw5ZBlJKbxasv385a+1B4nX46pFgSHzt5PLam r9+ZMJ+17ifxlzBSyifKf9NIjdg0jC7kOHUeNVrTxOpkuxu4F1sj8v80ywLJoa5F YqYQbR3wgM0PLXCJFqMdBRctrY6f0GoOrxamJf5dsMSme6217yIiVnw47xPfxe7m ylE/ne1RjdkslANQs0ldj9oS1/njlaDtU/rrxwZIrq47zl09G1BLeHyLLRlCeWdr il2+jD6iST1NSULjLIGzLaObKp1vTF0= -----END CERTIFICATE-----Generated at Sat Jun 13 11:26:34 2026 by rpki-client