$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa File: cc943514-3509-33b3-b2dc-359af22b1dea.roa (raw, json) Hash identifier: ZSIEIYcMLTR1PTeGHljiObRzYqENXRi+l8kUmLk8bqc= Subject key identifier: A9:15:73:70:76:F2:A0:0C:90:F1:D3:91:BD:A0:7B:CA:83:5F:2F:EE Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584DD8F068A23C867759F3904A00 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 202 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:68:a2:3c:86:77:59:f3:90:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=ad4f7d9b-0f66-4954-9320-0bc308a7ed18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ec:95:0a:80:e2:4c:36:4b:63:c5:80:ec:5d: d5:01:0b:62:35:08:00:87:56:12:a3:cf:18:70:1f: fe:cf:b8:5b:d3:cc:33:31:9f:06:a1:db:5d:46:4d: 5c:d3:e5:a1:91:c7:db:a7:e6:c0:31:b9:0a:c8:96: f0:8b:bc:d6:d1:50:f4:0f:3b:cb:8a:08:d2:27:f5: 9b:45:bf:ad:ef:8b:41:a6:b2:bf:26:45:ad:69:d4: 24:9c:69:cf:3b:6c:24:73:2e:bf:4e:d6:07:e8:52: 09:65:8c:9e:ee:1a:a8:f8:04:08:8b:37:e4:54:1c: 30:9d:03:29:c7:e5:a4:c6:c2:8f:d8:ac:4a:bb:ee: b1:0d:23:42:51:75:52:2e:06:0c:69:3a:35:77:b6: 98:76:f5:08:11:90:b3:45:c8:af:5d:10:41:18:ab: 45:7d:e6:55:11:7e:20:7d:13:16:82:5c:a6:25:b9: 69:f2:de:49:36:2b:94:6a:63:36:db:88:1f:c4:e2: 8e:45:54:8b:ae:e2:5c:8c:52:a1:3e:d1:12:00:aa: da:c8:54:57:7b:c5:44:f4:7c:6e:ef:25:75:e7:e7: 39:34:e9:45:8c:19:d8:7e:d8:e5:fe:2a:c4:3c:2f: c3:b8:e8:b2:63:2a:d2:c2:14:28:ba:8e:8e:3a:ce: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:15:73:70:76:F2:A0:0C:90:F1:D3:91:BD:A0:7B:CA:83:5F:2F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5c:da:e9:5f:47:e1:00:8f:ef:66:66:aa:da:d4:c2:96:2a: 48:89:2b:0d:38:da:31:d3:27:0f:5b:34:e0:af:07:3c:30:a1: b2:e7:7e:0e:b9:fb:aa:09:2a:03:12:28:d9:28:57:90:14:31: ff:f0:68:70:5b:8c:c4:1d:82:7d:c4:00:04:3f:ba:f1:a0:be: 10:dc:73:d2:71:25:c0:53:b4:23:12:06:22:c8:93:76:7c:4f: 72:81:ff:27:20:c2:51:36:51:64:e5:34:2f:70:2f:4e:9c:cb: c2:73:b5:cf:71:13:c0:12:7f:b5:84:7f:5b:61:1f:dd:6a:33: e4:e6:b4:51:2b:02:06:56:a7:d3:4a:a2:d6:7f:44:34:77:de: e8:36:43:40:d5:8b:bb:6b:50:ae:3a:40:10:26:a6:ab:62:91: 05:81:0b:ca:8e:f7:63:42:64:3e:b2:f2:b5:ad:16:4f:dc:83: 8b:fd:2f:0f:89:95:60:c4:b8:f2:ec:ef:fb:93:f9:9e:f8:64: 6f:fe:78:12:70:a3:5b:11:8f:23:ea:75:dd:5a:5c:6e:df:bc: 4a:15:c5:3b:44:e6:4b:29:22:1d:48:c0:a5:1e:20:c2:1d:ea: 6a:8d:e1:06:2c:7b:6a:85:aa:bb:2e:67:94:7c:14:61:23:2b: bf:45:1e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8GiiPIZ3WfOQSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk YWQ0ZjdkOWItMGY2Ni00OTU0LTkzMjAtMGJjMzA4YTdlZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieyVCoDiTDZLY8WA7F3VAQtiNQgAh1YSo88Y cB/+z7hb08wzMZ8GodtdRk1c0+Whkcfbp+bAMbkKyJbwi7zW0VD0DzvLigjSJ/Wb Rb+t74tBprK/JkWtadQknGnPO2wkcy6/TtYH6FIJZYye7hqo+AQIizfkVBwwnQMp x+WkxsKP2KxKu+6xDSNCUXVSLgYMaTo1d7aYdvUIEZCzRcivXRBBGKtFfeZVEX4g fRMWglymJblp8t5JNiuUamM224gfxOKORVSLruJcjFKhPtESAKrayFRXe8VE9Hxu 7yV15+c5NOlFjBnYftjl/irEPC/DuOiyYyrSwhQouo6OOs6uGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkVc3B28qAMkPHTkb2ge8qDXy/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvY2M5NDM1MTQtMzUwOS0z M2IzLWIyZGMtMzU5YWYyMmIxZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpc2ulfR+EAj+9mZqra1MKWKkiJKw042jHTJw9bNOCvBzwwobLnfg65 +6oJKgMSKNkoV5AUMf/waHBbjMQdgn3EAAQ/uvGgvhDcc9JxJcBTtCMSBiLIk3Z8 T3KB/ycgwlE2UWTlNC9wL06cy8Jztc9xE8ASf7WEf1thH91qM+TmtFErAgZWp9NK otZ/RDR33ug2Q0DVi7trUK46QBAmpqtikQWBC8qO92NCZD6y8rWtFk/cg4v9Lw+J lWDEuPLs7/uT+Z74ZG/+eBJwo1sRjyPqdd1aXG7fvEoVxTtE5kspIh1IwKUeIMId 6mqN4QYse2qFqrsuZ5R8FGEjK79FHkI= -----END CERTIFICATE-----Generated at Sun Jun 7 14:10:43 2026 by rpki-client