$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/90f41b4e-5b3c-394f-98b3-1d16a3ec11b2.roa File: 90f41b4e-5b3c-394f-98b3-1d16a3ec11b2.roa (raw, json) Hash identifier: BFzHkyJEUS8ou0Lk1vpLYhQp0eu9qm4J8nJcPewyOtQ= Subject key identifier: 25:3D:EC:60:00:B4:BD:80:04:78:5A:50:EA:54:73:20:D2:1A:4F:41 Certificate issuer: /CN=ac2e2011-65d2-4c1e-87c4-772ec37e8e19 Certificate serial: 010D0C9F4328584E147EDA59D8AADDB0AF4FBF00 Authority key identifier: EE:98:1D:F8:D1:CF:E3:56:D8:21:51:DF:47:16:F7:C5:43:05:0B:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/90f41b4e-5b3c-394f-98b3-1d16a3ec11b2.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 399348 IP address blocks: 169.197.128.0/24 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:da:59:d8:aa:dd:b0:af:4f:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2e2011-65d2-4c1e-87c4-772ec37e8e19 Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=ba97ad29-ff3e-4ddf-9149-82b007e9844a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:48:36:da:4a:65:a5:ab:23:73:16:b8:d2: f7:c6:9a:f8:80:f6:9b:60:96:2a:85:ca:b9:77:3c: b3:2b:52:ad:3e:cd:1a:0c:6c:c2:30:a3:62:b9:df: c8:11:38:e0:c1:4c:39:a6:c9:fb:9c:50:d5:17:b4: 29:3d:34:65:af:36:69:70:17:da:93:cb:6d:ce:6a: cc:8a:64:3e:89:ed:a5:28:3b:5d:d6:3c:ef:18:19: e7:39:ef:61:57:b1:83:ee:e0:21:79:7f:8d:58:8a: e2:e5:29:87:71:56:95:dc:cb:92:2c:a4:6e:54:1a: 2d:31:84:f7:18:8d:2a:3c:82:16:d7:d5:7f:21:e5: 75:ed:d1:48:7b:b5:27:2a:0a:b7:ba:40:6e:ca:0d: 31:46:c4:2c:96:b3:cd:90:2e:e2:ac:a2:a4:17:01: 0b:a2:2c:84:dc:16:ea:ee:a9:fb:cc:05:49:35:d6: ca:5f:57:87:6e:e1:3f:bb:9c:84:ab:99:fb:5f:31: e7:db:e2:88:b9:e2:38:e8:a8:20:6a:ac:ca:55:e5: 50:73:1d:d8:f6:aa:73:29:c4:73:77:67:90:51:65: 84:4f:f9:b4:b7:5f:1d:e9:43:d1:e6:69:d0:c2:d6: 7f:5e:cd:86:c6:8b:89:11:4b:68:44:66:2f:ab:71: 8f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3D:EC:60:00:B4:BD:80:04:78:5A:50:EA:54:73:20:D2:1A:4F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/90f41b4e-5b3c-394f-98b3-1d16a3ec11b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.crl X509v3 Authority Key Identifier: keyid:EE:98:1D:F8:D1:CF:E3:56:D8:21:51:DF:47:16:F7:C5:43:05:0B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.cer sbgp-ipAddrBlock: critical IPv4: 169.197.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:24:49:e0:cf:45:a1:4d:3b:7b:77:0c:5d:e7:60:46:5d:8d: 17:47:8e:94:b5:e1:e4:dc:8d:a0:49:a3:4a:bf:96:51:d8:c9: 9a:78:8d:05:16:12:a4:81:b8:6f:f1:f4:fd:4e:77:f4:da:54: 35:af:9b:2b:43:0f:f8:6f:6e:07:31:3a:52:0f:ab:f3:68:36: 6b:09:e0:67:d2:a2:88:50:1a:95:46:39:74:a1:ad:35:0e:21: b3:c6:1e:50:8e:06:9b:85:6d:61:a1:23:10:ad:3e:84:8b:a0: 32:f9:9e:14:12:27:a3:48:70:80:46:c3:a9:61:96:7b:02:dc: fe:4b:bb:98:a2:7c:b3:a3:2a:f0:c4:16:22:fe:ac:7b:81:90: fd:6c:d7:c1:16:cb:fb:a7:4d:3c:75:b7:4b:08:4e:eb:ac:2a: 74:3d:c0:54:d2:6b:f2:24:0a:ae:34:b5:83:c2:99:d9:d0:c6: 28:33:c9:72:eb:17:cd:ad:ef:8e:61:c7:40:1d:ba:08:2d:de: 8c:fe:7e:93:86:ac:51:10:72:74:a1:24:c7:25:5c:77:2e:6c: 04:c7:17:9d:6e:be:80:23:42:38:48:3f:2d:1c:fa:bf:68:78: 50:ed:4d:0c:69:2d:c4:35:fb:7c:25:00:51:6b:7c:b9:f3:cc: 8c:cc:b7:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftpZ2KrdsK9PvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZTIwMTEtNjVkMi00YzFlLTg3YzQtNzcyZWMzN2U4 ZTE5MB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk YmE5N2FkMjktZmYzZS00ZGRmLTkxNDktODJiMDA3ZTk4NDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUxINtpKZaWrI3MWuNL3xpr4gPabYJYqhcq5 dzyzK1KtPs0aDGzCMKNiud/IETjgwUw5psn7nFDVF7QpPTRlrzZpcBfak8ttzmrM imQ+ie2lKDtd1jzvGBnnOe9hV7GD7uAheX+NWIri5SmHcVaV3MuSLKRuVBotMYT3 GI0qPIIW19V/IeV17dFIe7UnKgq3ukBuyg0xRsQslrPNkC7irKKkFwELoiyE3Bbq 7qn7zAVJNdbKX1eHbuE/u5yEq5n7XzHn2+KIueI46KggaqzKVeVQcx3Y9qpzKcRz d2eQUWWET/m0t18d6UPR5mnQwtZ/Xs2GxouJEUtoRGYvq3GPIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCU97GAAtL2ABHhaUOpUcyDSGk9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hYzJl MjAxMS02NWQyLTRjMWUtODdjNC03NzJlYzM3ZThlMTkvOTBmNDFiNGUtNWIzYy0z OTRmLTk4YjMtMWQxNmEzZWMxMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWMyZTIwMTEtNjVkMi00YzFlLTg3 YzQtNzcyZWMzN2U4ZTE5L2FjMmUyMDExLTY1ZDItNGMxZS04N2M0LTc3MmVjMzdl OGUxOS5jcmwwHwYDVR0jBBgwFoAU7pgd+NHP41bYIVHfRxb3xUMFCyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hYzJlMjAxMS02NWQyLTRjMWUtODdjNC03NzJl YzM3ZThlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqcWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABskSeDPRaFNO3t3DF3nYEZdjRdHjpS14eTcjaBJo0q/llHYyZp4jQUW EqSBuG/x9P1Od/TaVDWvmytDD/hvbgcxOlIPq/NoNmsJ4GfSoohQGpVGOXShrTUO IbPGHlCOBpuFbWGhIxCtPoSLoDL5nhQSJ6NIcIBGw6lhlnsC3P5Lu5iifLOjKvDE FiL+rHuBkP1s18EWy/unTTx1t0sITuusKnQ9wFTSa/IkCq40tYPCmdnQxigzyXLr F82t745hx0Aduggt3oz+fpOGrFEQcnShJMclXHcubATHF51uvoAjQjhIPy0c+r9o eFDtTQxpLcQ1+3wlAFFrfLnzzIzMt18= -----END CERTIFICATE-----Generated at Wed Jun 10 05:12:21 2026 by rpki-client