$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/ccbeada7-8061-3d7f-80ab-3f282a8298e5.roa File: ccbeada7-8061-3d7f-80ab-3f282a8298e5.roa (raw, json) Hash identifier: kHV1wBZIqX5cLOVrUK/jPoPg1RE2uJHQGSTcilQ0zIA= Subject key identifier: EA:49:47:BD:FE:53:FD:48:EE:9E:D6:6B:75:D7:D5:EB:97:09:B2:97 Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584E0CE1C1F7A9B3B4866B612F80 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/ccbeada7-8061-3d7f-80ab-3f282a8298e5.roa Signing time: Wed 03 Jun 2026 15:33:05 +0000 ROA not before: Wed 03 Jun 2026 15:33:05 +0000 ROA not after: Tue 01 Sep 2026 15:33:05 +0000 asID: 12684 IP address blocks: 209.198.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:e1:c1:f7:a9:b3:b4:86:6b:61:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Jun 3 15:33:05 2026 GMT Not After : Sep 1 15:33:05 2026 GMT Subject: CN=a22645d7-b77f-4456-8b0a-e05a685dbb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:a9:c8:73:07:9a:d9:47:03:c2:6a:a0:b0: a5:8c:11:79:ed:46:bb:60:04:23:c1:18:c1:95:c6: ad:6d:26:20:6b:a1:16:84:bd:54:fa:28:60:d3:15: 11:2b:34:02:85:c7:e9:8d:55:70:1f:9c:4d:45:1f: f5:d1:1c:12:3d:1c:b6:3e:d7:fe:df:0a:61:d4:36: 74:d5:ee:21:9a:19:5d:fb:a4:87:b9:ff:50:e2:4f: cf:6e:f3:14:84:7c:73:87:44:c2:00:28:97:dc:29: 90:e5:71:15:08:80:bb:b8:3f:81:6f:83:b9:b1:cd: 94:79:69:e8:80:3d:ae:b8:4a:8e:fc:20:4d:24:a2: 4d:72:e3:ce:92:0c:d3:6d:4b:42:1f:a3:18:d9:bc: a7:01:ea:cf:b8:10:1f:30:bf:16:72:f2:83:13:84: 5b:9c:64:37:5b:6f:ae:c9:f1:16:a8:63:f8:e3:8b: 0f:cb:04:7b:b4:d5:8d:01:1f:cc:62:61:fd:31:60: 87:a1:97:b6:54:62:86:6b:b5:d6:d8:87:2a:ec:52: 23:77:ef:7c:b3:ca:0e:84:49:ff:d7:55:48:55:80: 43:8e:83:bd:97:3e:15:cd:a4:c8:90:f8:aa:00:c2: b0:91:9a:0c:59:d6:5e:bf:60:b9:ce:a5:51:b3:c0: 7f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:49:47:BD:FE:53:FD:48:EE:9E:D6:6B:75:D7:D5:EB:97:09:B2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/ccbeada7-8061-3d7f-80ab-3f282a8298e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 209.198.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:02:dc:9e:90:0e:e5:31:69:09:c6:17:4d:15:df:13:6e:87: 54:29:e9:6c:6d:95:25:13:8c:cb:f8:28:f8:03:3b:f6:b9:c9: 8a:5c:e3:96:41:f9:ea:2f:44:e5:7c:5d:a5:fb:cc:48:55:15: 6c:7c:aa:49:e7:15:da:e2:00:60:29:92:d5:97:fa:11:61:45: b7:54:cf:8e:fd:ed:1e:dd:e6:13:06:73:f7:e4:47:09:d6:3c: b1:34:c5:d2:5a:26:74:cb:20:47:a7:31:e1:53:42:e0:14:c7: 46:f5:8d:45:f2:fc:18:8f:70:95:44:f6:0c:d5:c3:8d:a8:11: a6:bc:2c:e8:a8:14:6a:c3:f7:23:7c:e7:06:74:49:89:89:9a: 0d:1b:c5:7f:bf:c3:84:30:6b:dd:63:4b:07:e7:bf:b5:cb:04: 0a:b5:a4:d6:87:46:8b:06:99:c5:88:52:ec:4a:a5:de:34:22: 39:e5:c3:47:e9:78:b9:6f:06:f0:84:04:6f:e5:a3:d4:9d:f0: 96:df:88:db:f6:1c:ad:58:66:d5:d8:44:d1:c1:1e:11:3c:ba: e7:5e:9c:38:34:15:88:31:f6:83:81:89:40:1d:79:6b:04:44: 68:7d:75:e2:d6:3c:87:7b:c3:09:7d:bd:c0:35:8b:c0:85:c0: f1:9c:e7:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4M4cH3qbO0hmthL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDYwMzE1MzMwNVoXDTI2MDkwMTE1MzMwNVowLzEtMCsGA1UEAxMk YTIyNjQ1ZDctYjc3Zi00NDU2LThiMGEtZTA1YTY4NWRiYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrOpyHMHmtlHA8JqoLCljBF57Ua7YAQjwRjB lcatbSYga6EWhL1U+ihg0xURKzQChcfpjVVwH5xNRR/10RwSPRy2Ptf+3wph1DZ0 1e4hmhld+6SHuf9Q4k/PbvMUhHxzh0TCACiX3CmQ5XEVCIC7uD+Bb4O5sc2UeWno gD2uuEqO/CBNJKJNcuPOkgzTbUtCH6MY2bynAerPuBAfML8WcvKDE4RbnGQ3W2+u yfEWqGP444sPywR7tNWNAR/MYmH9MWCHoZe2VGKGa7XW2Icq7FIjd+98s8oOhEn/ 11VIVYBDjoO9lz4VzaTIkPiqAMKwkZoMWdZev2C5zqVRs8B/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpJR73+U/1I7p7Wa3XX1euXCbKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvY2NiZWFkYTctODA2MS0z ZDdmLTgwYWItM2YyODJhODI5OGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cbZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsC3J6QDuUxaQnGF00V3xNuh1Qp6WxtlSUTjMv4KPgDO/a5yYpc45ZB +eovROV8XaX7zEhVFWx8qknnFdriAGApktWX+hFhRbdUz4797R7d5hMGc/fkRwnW PLE0xdJaJnTLIEenMeFTQuAUx0b1jUXy/BiPcJVE9gzVw42oEaa8LOioFGrD9yN8 5wZ0SYmJmg0bxX+/w4Qwa91jSwfnv7XLBAq1pNaHRosGmcWIUuxKpd40Ijnlw0fp eLlvBvCEBG/lo9Sd8JbfiNv2HK1YZtXYRNHBHhE8uudenDg0FYgx9oOBiUAdeWsE RGh9deLWPId7wwl9vcA1i8CFwPGc548= -----END CERTIFICATE-----Generated at Sat Jun 6 12:06:11 2026 by rpki-client