$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa File: 96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa (raw, json) Hash identifier: lS9ohyQ5n2yEVe+Dj5wLBr8Q8BpzmrjB6v9RcrfFP+g= Subject key identifier: 28:55:F1:2A:20:4A:FE:88:DE:EF:B9:14:42:82:71:CA:19:8B:AD:16 Certificate issuer: /CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Certificate serial: 010D0C9F4328584E3764788C2E817A32ECFC6298 Authority key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 170.52.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:78:8c:2e:81:7a:32:ec:fc:62:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=6dca47ea-68d3-438e-97ee-2eedf775428a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:0b:0c:8a:b2:23:c7:a0:fe:2c:b9:a9:e1: df:45:fa:fc:58:79:c5:df:91:50:e4:db:e4:c7:04: 68:50:c4:36:c9:50:c0:6d:8f:47:28:e6:2e:c2:bf: bd:e5:c7:28:d3:f3:95:74:0b:f7:12:08:c5:6e:b9: b3:33:d8:0a:6c:7b:9a:35:32:85:2d:5c:3a:ff:dc: af:75:80:ac:f8:a8:2e:db:18:14:c5:87:d6:63:6e: 0b:54:87:26:42:14:c0:81:c6:42:5d:93:69:9b:bc: 65:5d:ca:14:58:04:44:90:0d:2e:91:72:79:31:60: 69:ca:0f:32:6d:98:f5:a3:5c:f1:9f:3f:08:e2:58: 26:3d:8e:bf:6e:b6:04:01:e4:1f:5c:c0:c2:fa:cf: 01:bf:b2:cb:5f:59:47:ed:9b:70:54:eb:71:f7:a9: 89:4e:05:57:61:04:a2:34:fc:73:71:eb:29:be:04: ea:c4:a7:18:e8:a5:1f:a4:4f:ff:9e:5b:09:62:89: e8:ea:a1:f3:f1:a1:dc:7b:7e:c4:e9:5c:12:a7:4c: 5b:66:ac:ad:da:18:f5:f7:c3:a2:4e:da:8f:64:45: da:20:bd:50:8b:43:46:6b:78:68:e3:b6:d1:82:4c: 82:bb:d4:6f:fe:b5:38:99:dd:8a:d5:f7:cd:9e:6d: 04:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:55:F1:2A:20:4A:FE:88:DE:EF:B9:14:42:82:71:CA:19:8B:AD:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl X509v3 Authority Key Identifier: keyid:17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer sbgp-ipAddrBlock: critical IPv4: 170.52.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:72:74:8e:07:00:a1:78:eb:85:7d:2a:e9:45:8c:3c:97:bb: b2:97:e0:8b:2e:b0:75:9f:d2:e8:34:ff:9f:07:e6:58:cf:46: 86:f7:19:c8:05:37:8e:07:e0:b0:02:c3:61:d5:70:e7:2e:0b: c1:ac:3c:0e:69:a9:32:e9:af:e7:ea:c5:77:59:b0:bd:d1:5e: fd:d5:d5:83:49:5c:ec:2d:c7:1a:5f:b5:07:f1:44:da:ba:18: cc:6d:cd:63:b6:81:e0:c1:b9:e5:5e:84:c6:38:0f:7d:e1:5a: 82:e2:3a:48:49:95:45:8b:f7:22:d5:e3:01:f0:fa:90:30:cc: c9:29:2a:47:f5:5a:37:77:a7:28:2e:cb:c9:bf:f2:48:cd:42: dc:9f:f7:25:9e:e1:95:57:8f:c2:a0:66:b6:1c:33:3c:54:ba: 2e:ae:3f:24:cb:10:ab:12:97:27:58:d8:68:1a:21:ef:fd:7f: 87:7b:51:7b:f0:ad:8d:aa:dd:cc:af:79:f0:bf:bb:83:41:70: ca:81:4d:b1:4d:9c:cd:5a:d4:a6:c0:09:f8:4c:73:7e:57:c5: d6:8f:90:fd:0c:64:ff:1f:55:bb:1b:6d:d4:38:1c:48:85:6c: 22:f7:4f:55:ec:c2:61:c4:b1:b4:69:ec:06:0c:d1:6f:08:16: 3b:3d:ce:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZHiMLoF6Muz8YpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU4NmJhYjAtZWY3ZS00ZTIzLTg0ZmUtYmNkNWNlZTg2 OWJiMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk NmRjYTQ3ZWEtNjhkMy00MzhlLTk3ZWUtMmVlZGY3NzU0MjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPcLDIqyI8eg/iy5qeHfRfr8WHnF35FQ5Nvk xwRoUMQ2yVDAbY9HKOYuwr+95cco0/OVdAv3EgjFbrmzM9gKbHuaNTKFLVw6/9yv dYCs+Kgu2xgUxYfWY24LVIcmQhTAgcZCXZNpm7xlXcoUWAREkA0ukXJ5MWBpyg8y bZj1o1zxnz8I4lgmPY6/brYEAeQfXMDC+s8Bv7LLX1lH7ZtwVOtx96mJTgVXYQSi NPxzcespvgTqxKcY6KUfpE//nlsJYono6qHz8aHce37E6VwSp0xbZqyt2hj198Oi TtqPZEXaIL1Qi0NGa3ho47bRgkyCu9Rv/rU4md2K1ffNnm0EawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChV8SogSv6I3u+5FEKCccoZi60WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2 YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1Y2VlODY5YmIvOTZiNWVjZGYtMDAzYy0z N2ZkLWI2MjEtOGZlNmI0OWJkMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWU4NmJhYjAtZWY3ZS00ZTIzLTg0 ZmUtYmNkNWNlZTg2OWJiL2VlODZiYWIwLWVmN2UtNGUyMy04NGZlLWJjZDVjZWU4 NjliYi5jcmwwHwYDVR0jBBgwFoAUF9ODIac85idtB9uicC0blcLuLw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1 Y2VlODY5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqjQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9ydI4HAKF464V9KulFjDyXu7KX4IsusHWf0ug0/58H5ljPRob3GcgF N44H4LACw2HVcOcuC8GsPA5pqTLpr+fqxXdZsL3RXv3V1YNJXOwtxxpftQfxRNq6 GMxtzWO2geDBueVehMY4D33hWoLiOkhJlUWL9yLV4wHw+pAwzMkpKkf1Wjd3pygu y8m/8kjNQtyf9yWe4ZVXj8KgZrYcMzxUui6uPyTLEKsSlydY2GgaIe/9f4d7UXvw rY2q3cyvefC/u4NBcMqBTbFNnM1a1KbACfhMc35XxdaPkP0MZP8fVbsbbdQ4HEiF bCL3T1XswmHEsbRp7AYM0W8IFjs9zts= -----END CERTIFICATE-----Generated at Wed Jun 24 03:32:52 2026 by rpki-client