$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa File: 17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa (raw, json) Hash identifier: BPMTmg3oOJVFK4fdxAmBI2GdilwDbZ098jXZEMQSqnY= Subject key identifier: 24:7C:60:DD:F4:EF:4A:F7:84:0F:88:D9:1A:52:07:84:34:41:D0:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E147EE35A4FF59C5AE400E680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 15169 IP address blocks: 172.217.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:e3:5a:4f:f5:9c:5a:e4:00:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=eb0a04dc-6f5c-4c73-bc94-3b2004491509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7d:59:99:f9:98:f8:10:29:ee:2c:c7:f7:9f: d6:f7:6a:d9:0c:57:3c:06:d1:a4:9b:cb:18:5e:bd: 13:9c:d2:92:a3:1e:13:fb:8f:c6:2e:88:ec:97:92: 1c:d7:50:cd:c5:92:e1:c1:9d:f5:cb:d8:18:00:4a: 53:1b:8e:3c:34:15:a8:bd:3c:15:e7:c8:25:fd:a3: 1a:50:94:29:c1:8f:98:38:c7:d0:cd:b3:89:d5:5a: 79:6e:4c:0e:1f:c0:24:39:0c:9d:d2:a5:dc:0b:32: e2:10:f4:62:65:4d:fc:04:0b:0a:b8:02:15:12:23: ac:db:31:54:a3:c6:09:15:0f:b3:48:a7:f9:17:1c: 21:19:af:59:18:6b:83:f6:7c:26:d8:72:c4:80:e4: f2:fa:97:7a:0f:b9:8f:70:30:50:12:42:04:c5:b8: b5:ab:1d:73:9f:9e:63:d9:6b:67:9c:30:65:ca:48: 02:df:b9:5f:0c:03:d6:26:15:06:e5:4f:81:66:7e: 38:48:2c:50:f7:3e:f1:b2:7e:55:15:88:b8:80:52: 20:42:92:33:a7:89:cd:69:a4:5b:46:8c:0e:78:5d: 06:63:04:38:65:42:ce:8e:3f:c8:f7:f3:18:74:71: 1a:e6:d6:4a:4b:9d:6b:bb:b0:c0:1e:a4:5c:8c:a5: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7C:60:DD:F4:EF:4A:F7:84:0F:88:D9:1A:52:07:84:34:41:D0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:3f:f3:84:a8:e7:ce:97:91:a9:da:fb:62:99:b7:31:88:ad: e1:27:35:88:ac:3a:12:e4:e0:d4:b2:e2:98:1b:a0:f5:8b:5f: c0:17:30:60:03:a1:dd:b0:ef:ed:41:96:b3:4d:80:d3:4a:64: 9f:c0:49:5c:c3:63:ae:05:92:ce:70:24:ab:03:c0:7e:d3:26: 92:72:cd:a9:39:b7:4f:e2:41:82:bc:04:2e:f6:31:9c:db:45: bb:fe:a9:a7:d6:16:29:03:6a:4b:e1:1b:2c:6d:a1:7c:5a:62: 39:cc:5f:1a:ea:64:43:5f:90:27:da:d2:48:98:07:30:97:28: fa:a6:7a:dd:c0:c8:92:45:9a:55:f8:00:3d:a5:70:cd:3d:81: f1:3d:f8:c8:a3:88:82:3a:a6:07:29:c2:4c:84:43:07:98:77: cf:c5:b3:65:7d:88:23:b5:88:9c:fc:45:71:71:a1:f2:53:22: b2:61:0d:d0:65:d6:3b:90:be:7b:1f:bf:3c:30:e3:5f:0d:eb: b4:4f:de:5d:92:e5:7d:5f:7d:26:e3:5f:aa:8c:1c:d8:d2:75: 61:6c:61:26:41:14:06:44:6c:25:d3:d1:f4:af:84:a4:d7:d1: a1:f3:91:fb:21:88:c2:da:3e:ab:0c:3c:0c:14:53:66:09:f2: e5:c2:2d:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UfuNaT/WcWuQA5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk ZWIwYTA0ZGMtNmY1Yy00YzczLWJjOTQtM2IyMDA0NDkxNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn1ZmfmY+BAp7izH95/W92rZDFc8BtGkm8sY Xr0TnNKSox4T+4/GLojsl5Ic11DNxZLhwZ31y9gYAEpTG448NBWovTwV58gl/aMa UJQpwY+YOMfQzbOJ1Vp5bkwOH8AkOQyd0qXcCzLiEPRiZU38BAsKuAIVEiOs2zFU o8YJFQ+zSKf5FxwhGa9ZGGuD9nwm2HLEgOTy+pd6D7mPcDBQEkIExbi1qx1zn55j 2WtnnDBlykgC37lfDAPWJhUG5U+BZn44SCxQ9z7xsn5VFYi4gFIgQpIzp4nNaaRb RowOeF0GYwQ4ZULOjj/I9/MYdHEa5tZKS51ru7DAHqRcjKX4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR8YN3070r3hA+I2RpSB4Q0QdATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTdjZDA3MTEtM2JkNC0z ZTA3LThlNmEtYTVmMDRlYjUwZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI/84So586Xkana+2KZtzGIreEnNYisOhLk4NSy4pgboPWLX8AXMGAD od2w7+1BlrNNgNNKZJ/ASVzDY64Fks5wJKsDwH7TJpJyzak5t0/iQYK8BC72MZzb Rbv+qafWFikDakvhGyxtoXxaYjnMXxrqZENfkCfa0kiYBzCXKPqmet3AyJJFmlX4 AD2lcM09gfE9+MijiII6pgcpwkyEQweYd8/Fs2V9iCO1iJz8RXFxofJTIrJhDdBl 1juQvnsfvzww418N67RP3l2S5X1ffSbjX6qMHNjSdWFsYSZBFAZEbCXT0fSvhKTX 0aHzkfshiMLaPqsMPAwUU2YJ8uXCLe4= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:13 2026 by rpki-client