$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa File: de0c75c3-d3bc-3f50-9911-fde5dd621864.roa (raw, json) Hash identifier: bqiBueAQf0En45wFAPvhgb2mWkw9bmbK+YkaiVk5FVE= Subject key identifier: 89:CA:C3:23:8B:76:46:4D:4C:74:2B:4D:0E:57:3C:2E:75:D9:7C:62 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584DE1509A4876B5677FB0218800 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 19165 IP address blocks: 208.66.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:9a:48:76:b5:67:7f:b0:21:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=97708c60-c765-4b8c-8ec4-4bfe6c1ae7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:fd:08:44:27:9d:b7:8a:47:a3:ee:3d:93: 12:2c:b0:30:2f:58:84:a3:15:20:a7:a3:d9:e2:7f: 40:05:43:e4:4e:91:00:4b:6a:94:1d:40:7f:cd:77: d0:6c:0b:b4:81:bf:0d:64:3d:17:7c:73:37:04:db: 05:9d:3e:2f:74:81:08:45:5b:d8:e9:f9:cf:49:c1: 69:a2:af:a0:8e:2f:96:26:a1:59:58:ac:d2:c7:10: 0f:20:89:9b:28:76:95:ad:e6:a9:21:de:66:da:a4: 93:5b:f2:6f:8c:25:56:87:8c:e9:b4:ca:68:f5:4a: bf:d7:e5:8f:17:fa:a0:fb:51:a5:a4:e5:67:cc:66: f8:6b:da:05:6f:18:08:05:13:b4:e0:4b:9e:d1:ba: 09:fc:1c:46:f7:e9:f3:28:1e:70:2b:c3:a1:0a:7f: 24:31:14:36:03:3f:a9:f5:fa:f8:4e:66:fa:45:8a: e3:52:a2:53:39:00:b8:90:09:78:ba:e1:b0:30:8a: f0:62:d9:c5:8c:db:91:1b:17:65:0a:5b:6d:6c:77: 91:d2:7b:7b:52:2a:0e:01:b9:79:53:00:17:d6:e6: 2b:0a:1b:ea:6d:00:5f:e1:e4:e5:8f:73:8d:e3:0f: ca:43:6f:7c:cf:0e:9e:90:b1:46:9a:31:eb:9e:d0: 45:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CA:C3:23:8B:76:46:4D:4C:74:2B:4D:0E:57:3C:2E:75:D9:7C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 208.66.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a1:de:ef:31:2c:bd:2c:3c:81:20:36:8f:51:31:87:4e:b4: 95:d0:e5:49:d6:ac:53:25:57:60:0f:c7:dd:b8:70:42:a4:70: 6f:8d:0b:2d:7d:00:8e:7d:67:e9:42:ed:26:6d:4d:fb:98:31: 85:59:07:dc:82:5e:58:6d:4a:46:12:90:d2:be:a0:f3:a9:fd: f4:bb:b5:12:13:b7:7c:b5:06:f4:52:fc:46:c4:d5:a0:13:7a: 7c:02:99:90:00:36:d3:0e:f6:f1:19:77:59:27:0a:39:a5:5f: 7b:84:b4:73:34:0c:b5:86:e7:b3:2a:9b:37:39:36:38:37:b6: 59:b4:85:f2:e4:4f:71:34:b7:df:2f:4c:69:60:d0:d5:00:4b: 5c:bc:94:42:7b:28:ae:54:4e:5d:35:38:98:f6:f8:8a:62:48: 31:0a:17:04:5f:41:72:95:37:0b:40:59:a2:ee:3f:45:ce:ed: 3a:53:22:ec:f5:3f:da:2e:ee:1d:ec:6d:f8:3a:c4:6c:68:7f: 78:21:61:46:4e:f8:34:12:ce:c5:81:1c:25:50:b9:30:5e:7b: c9:90:1c:a1:31:ac:07:7c:9a:7d:e4:d2:99:63:8b:0a:83:8e: 6e:02:14:d9:13:eb:cf:c9:8b:98:3f:c1:0f:43:86:b4:11:9f: c6:e3:f2:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUJpIdrVnf7AhiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk OTc3MDhjNjAtYzc2NS00YjhjLThlYzQtNGJmZTZjMWFlN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXX9CEQnnbeKR6PuPZMSLLAwL1iEoxUgp6PZ 4n9ABUPkTpEAS2qUHUB/zXfQbAu0gb8NZD0XfHM3BNsFnT4vdIEIRVvY6fnPScFp oq+gji+WJqFZWKzSxxAPIImbKHaVreapId5m2qSTW/JvjCVWh4zptMpo9Uq/1+WP F/qg+1GlpOVnzGb4a9oFbxgIBRO04Eue0boJ/BxG9+nzKB5wK8OhCn8kMRQ2Az+p 9fr4Tmb6RYrjUqJTOQC4kAl4uuGwMIrwYtnFjNuRGxdlClttbHeR0nt7UioOAbl5 UwAX1uYrChvqbQBf4eTlj3ON4w/KQ298zw6ekLFGmjHrntBFiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInKwyOLdkZNTHQrTQ5XPC512XxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZGUwYzc1YzMtZDNiYy0z ZjUwLTk5MTEtZmRlNWRkNjIxODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmh3u8xLL0sPIEgNo9RMYdOtJXQ5UnWrFMlV2APx924cEKkcG+NCy19 AI59Z+lC7SZtTfuYMYVZB9yCXlhtSkYSkNK+oPOp/fS7tRITt3y1BvRS/EbE1aAT enwCmZAANtMO9vEZd1knCjmlX3uEtHM0DLWG57Mqmzc5Njg3tlm0hfLkT3E0t98v TGlg0NUAS1y8lEJ7KK5UTl01OJj2+IpiSDEKFwRfQXKVNwtAWaLuP0XO7TpTIuz1 P9ou7h3sbfg6xGxof3ghYUZO+DQSzsWBHCVQuTBee8mQHKExrAd8mn3k0pljiwqD jm4CFNkT68/Ji5g/wQ9DhrQRn8bj8tE= -----END CERTIFICATE-----Generated at Sun May 24 06:46:07 2026 by rpki-client