$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa File: 1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa (raw, json) Hash identifier: J4ZcVB0zcebZR/DgynJZ+4S12kLt/ZSCxZ8NvKbZvxc= Subject key identifier: 8C:07:2B:99:09:3D:2C:8C:AC:CE:8B:97:B8:7E:20:38:18:F7:AA:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BCED53D40EA2E7B0A7E20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:ce:d5:3d:40:ea:2e:7b:0a:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=94459bfe-ac3c-498b-afa8-733974c1f516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7c:23:04:85:42:ac:d2:65:4e:3f:ed:c5:43: ba:f0:4f:1d:60:22:ee:0b:09:d2:6c:03:bb:51:85: 51:7e:3b:be:ee:27:c2:5a:2e:9b:37:e5:16:ed:0b: 70:49:28:48:7c:4d:b2:55:56:21:63:67:e2:90:1e: aa:ef:d8:77:8b:e3:5f:04:4c:bb:28:4d:dc:ed:f9: ed:ab:bb:22:fb:d0:7d:b8:e7:a9:8f:99:90:50:a1: dc:f3:3f:db:ac:6f:c6:fe:6e:27:2d:bf:7a:d6:4e: f5:05:14:ac:59:db:86:2a:5e:13:4a:44:3d:c7:c8: c3:ab:66:3a:04:0b:b8:e1:9f:ea:d7:a6:9a:cc:5d: 45:88:8c:18:18:1f:b8:ad:ae:bd:0f:33:b7:b9:5c: ea:cc:b4:2d:11:4b:e0:cf:f9:bd:15:dc:a2:04:50: ab:42:78:c3:36:1f:55:d1:31:18:3d:bc:58:dd:60: 62:bd:c1:b4:9b:3b:a4:51:1c:9d:95:48:84:3f:63: a1:d8:f6:aa:5a:9a:ed:c4:52:3e:56:3c:97:79:62: 90:33:7e:bf:14:3e:60:6c:cb:4c:ab:da:10:e4:e1: fc:91:e5:f8:99:18:f7:60:f4:11:65:93:f1:cc:cc: 8c:c9:59:fa:56:6e:a8:e8:23:95:e4:9f:a7:8a:a5: 8b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:07:2B:99:09:3D:2C:8C:AC:CE:8B:97:B8:7E:20:38:18:F7:AA:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:99:f6:68:d6:1b:62:a9:a0:27:1d:22:e6:f0:b3:3c:29:93: 53:70:eb:27:11:c2:57:42:15:28:3c:7b:b4:e3:76:42:0f:7b: d1:8b:43:98:6b:14:d9:e7:e4:4f:9d:e1:06:8e:78:84:8c:f0: ec:0a:26:1b:30:58:bd:06:3f:05:99:f4:b7:41:16:26:13:44: 23:7e:20:1a:22:02:16:7d:19:12:4f:88:81:ab:a8:76:38:53: 7a:4f:b3:34:bf:51:47:63:e7:1a:e8:aa:0e:13:83:c2:d7:7a: a3:03:b9:af:c0:dd:5b:50:7c:a3:86:f8:19:38:4e:32:21:37: 43:bf:62:aa:db:b2:f6:f9:09:61:3c:78:80:d5:a9:a1:7a:1a: ce:5b:b7:b3:bf:a5:b4:b8:18:5b:9e:78:72:d1:d3:ba:fc:26: 26:0f:cb:b1:83:84:fe:55:02:a7:68:b7:c8:de:d3:8b:86:18: 62:5d:45:a9:32:c5:50:8c:85:0e:09:cd:53:ba:af:7a:af:32: 9c:e1:81:cc:2a:14:e9:8e:23:c7:04:1e:52:dd:7f:ea:59:43: 01:a1:86:cf:80:35:09:94:fc:0e:dc:de:8d:c9:8a:65:af:d1: dd:29:b2:b2:a7:c3:fc:af:1a:dc:f6:32:de:2d:4f:29:6b:6f: 29:bd:02:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm87VPUDqLnsKfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk OTQ0NTliZmUtYWMzYy00OThiLWFmYTgtNzMzOTc0YzFmNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43wjBIVCrNJlTj/txUO68E8dYCLuCwnSbAO7 UYVRfju+7ifCWi6bN+UW7QtwSShIfE2yVVYhY2fikB6q79h3i+NfBEy7KE3c7fnt q7si+9B9uOepj5mQUKHc8z/brG/G/m4nLb961k71BRSsWduGKl4TSkQ9x8jDq2Y6 BAu44Z/q16aazF1FiIwYGB+4ra69DzO3uVzqzLQtEUvgz/m9FdyiBFCrQnjDNh9V 0TEYPbxY3WBivcG0mzukURydlUiEP2Oh2PaqWprtxFI+VjyXeWKQM36/FD5gbMtM q9oQ5OH8keX4mRj3YPQRZZPxzMyMyVn6Vm6o6COV5J+niqWLrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwHK5kJPSyMrM6Ll7h+IDgY96pDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTA5NWU0OGUtYWZhOC0z M2YyLWIwZTYtZmNhNmRmM2FjODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeZ9mjWG2KpoCcdIubwszwpk1Nw6ycRwldCFSg8e7TjdkIPe9GLQ5hr FNnn5E+d4QaOeISM8OwKJhswWL0GPwWZ9LdBFiYTRCN+IBoiAhZ9GRJPiIGrqHY4 U3pPszS/UUdj5xroqg4Tg8LXeqMDua/A3VtQfKOG+Bk4TjIhN0O/Yqrbsvb5CWE8 eIDVqaF6Gs5bt7O/pbS4GFueeHLR07r8JiYPy7GDhP5VAqdot8je04uGGGJdRaky xVCMhQ4JzVO6r3qvMpzhgcwqFOmOI8cEHlLdf+pZQwGhhs+ANQmU/A7c3o3JimWv 0d0psrKnw/yvGtz2Mt4tTylrbym9AnQ= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:39 2026 by rpki-client