$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa File: 1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa (raw, json) Hash identifier: +zxirXBQIOm3dwZC2r4DwNTMCFVlfvpp/jAXSGGZ4mM= Subject key identifier: 48:13:96:36:8D:75:3F:E5:C1:CE:57:03:AB:14:0F:64:04:C4:79:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79ECD2DF4D4154AFC42C2C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.217.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:cd:2d:f4:d4:15:4a:fc:42:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6847c472-debf-4793-8c6e-159833114e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:ff:9a:f7:f4:3d:fe:09:00:d0:32:bb:c9: ee:ce:9a:c6:69:c4:36:e2:da:69:f6:aa:4d:7c:cb: 36:f3:c8:a1:ea:08:30:01:2c:c2:8b:4c:9c:16:5f: 50:39:87:90:1d:7d:61:5e:cf:26:70:73:55:71:be: 0b:5d:59:2e:f0:8e:d3:b4:af:49:49:1f:e4:19:78: 99:bb:ea:19:ab:62:d5:79:46:4a:36:97:ac:1a:12: 82:a7:b6:a7:30:12:4d:11:1f:4b:c8:39:4b:c7:62: 82:d7:91:b1:f3:0a:62:6c:b3:87:69:db:f5:7f:1a: 5c:29:46:e8:e7:ca:48:26:db:f6:51:ab:da:09:99: e8:88:be:eb:b7:d1:10:4b:5a:80:4c:0b:e6:31:a9: 0f:e0:ee:52:c0:af:3b:46:a6:6b:be:21:9a:f0:75: 60:3c:00:84:70:ce:aa:e0:b6:3f:d2:4e:32:d4:7c: b2:c0:c3:40:cf:e0:2a:e5:b6:bd:01:91:a4:a0:6e: f1:1e:18:3c:13:44:e3:ae:80:a3:d3:ad:03:db:5f: ed:f8:83:17:bb:45:77:8d:3c:f1:6f:57:3f:bf:7d: 45:79:c5:02:0c:39:80:12:57:96:0b:d5:cc:e4:a8: 62:fb:a4:ef:95:d4:56:e2:40:a6:2d:0d:54:28:6e: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:13:96:36:8D:75:3F:E5:C1:CE:57:03:AB:14:0F:64:04:C4:79:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:43:b6:51:98:d3:30:ea:85:81:78:88:6e:cc:5f:a1:07:db: 6a:c6:97:24:e7:34:07:50:8c:e7:76:04:bc:fa:91:bd:5c:7f: cc:b2:15:37:8e:c6:7d:4b:48:8c:b6:d3:20:5c:6a:2c:cf:8d: 09:0a:d4:55:79:4c:fb:3a:35:dc:90:b5:bb:d1:7c:ef:b7:b2: 11:a5:b2:18:9a:3d:56:93:ed:cd:f9:be:ab:d7:c7:89:92:52: 47:c9:81:dd:52:e9:a8:be:2a:f0:3a:62:22:3d:95:63:8f:9c: bd:0e:df:42:ea:cc:a3:7c:ae:47:f9:ed:7c:a8:32:3c:89:a2: 6d:3a:5f:c6:8f:92:b5:fb:d1:03:9c:1d:8a:c7:87:17:10:51: a1:ed:f0:58:b8:9b:17:ad:de:8d:a3:c8:67:a8:49:6c:30:9a: 19:3f:3d:0e:12:c8:5b:af:d1:0c:ea:c4:62:12:d0:52:a8:25: 69:bc:69:da:7b:4d:0e:55:44:8b:e7:97:98:c9:05:75:7d:df: 63:87:94:64:68:2e:69:73:c9:a7:54:df:8b:c8:58:0f:14:28: cb:93:da:b4:34:c1:d6:8d:47:f4:65:6b:9d:aa:8d:4b:3c:76: 85:04:9a:d3:93:ab:de:19:c2:2d:41:49:da:bd:5c:a6:98:d3: cc:a6:b5:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nns0t9NQVSvxCwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Njg0N2M0NzItZGViZi00NzkzLThjNmUtMTU5ODMzMTE0ZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYX/mvf0Pf4JANAyu8nuzprGacQ24tpp9qpN fMs288ih6ggwASzCi0ycFl9QOYeQHX1hXs8mcHNVcb4LXVku8I7TtK9JSR/kGXiZ u+oZq2LVeUZKNpesGhKCp7anMBJNER9LyDlLx2KC15Gx8wpibLOHadv1fxpcKUbo 58pIJtv2UavaCZnoiL7rt9EQS1qATAvmMakP4O5SwK87RqZrviGa8HVgPACEcM6q 4LY/0k4y1HyywMNAz+Aq5ba9AZGkoG7xHhg8E0TjroCj060D21/t+IMXu0V3jTzx b1c/v31FecUCDDmAEleWC9XM5Khi+6TvldRW4kCmLQ1UKG4M5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgTljaNdT/lwc5XA6sUD2QExHnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTA5NWU0OGUtYWZhOC0z M2YyLWIwZTYtZmNhNmRmM2FjODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNDtlGY0zDqhYF4iG7MX6EH22rGlyTnNAdQjOd2BLz6kb1cf8yyFTeO xn1LSIy20yBcaizPjQkK1FV5TPs6NdyQtbvRfO+3shGlshiaPVaT7c35vqvXx4mS UkfJgd1S6ai+KvA6YiI9lWOPnL0O30LqzKN8rkf57XyoMjyJom06X8aPkrX70QOc HYrHhxcQUaHt8Fi4mxet3o2jyGeoSWwwmhk/PQ4SyFuv0QzqxGIS0FKoJWm8adp7 TQ5VRIvnl5jJBXV932OHlGRoLmlzyadU34vIWA8UKMuT2rQ0wdaNR/Rla52qjUs8 doUEmtOTq94Zwi1BSdq9XKaY08ymtfA= -----END CERTIFICATE-----Generated at Wed Jul 29 06:40:11 2026 by rpki-client