$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa File: 1a1b3802-ea48-3d76-a847-7894a6c024c8.roa (raw, json) Hash identifier: fkpm84eltL4HViLVDOUEhvLO38GTQDqC5IZ6YWlRFwM= Subject key identifier: 2A:D3:CF:E6:7A:52:C9:AC:9F:16:4D:2A:AD:AA:1A:3F:A0:7B:FC:FF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A053D9A196DB90C0C8E840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.217.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:53:d9:a1:96:db:90:c0:c8:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=749e87b9-bfa8-4852-9262-5f4895750500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:de:3a:20:67:ba:c8:cd:ef:51:4a:c8:24: 7f:fc:a6:5e:46:69:71:6f:b0:ff:bd:d5:cf:c6:29: 23:2a:f7:20:94:c5:73:80:57:a1:1e:f8:d1:71:cb: 64:b7:6b:eb:1c:bb:2f:7e:3e:32:10:ce:fd:d4:58: 15:02:4a:0d:5b:4c:f1:5e:17:32:31:e5:88:1b:8a: 74:58:61:89:a7:f3:d2:6a:a3:4b:c2:d7:7a:04:8e: 8b:fa:82:95:1f:8d:16:39:2f:1b:79:db:b5:ee:94: 0f:e2:c9:b2:ee:c2:cc:b1:a9:f6:9b:5a:6a:85:aa: e9:62:b9:34:70:c0:b1:43:60:cf:43:31:a1:51:27: 69:80:3e:b6:0c:3f:ba:7d:13:50:7e:5d:0f:79:2e: cc:a0:9b:73:fa:14:4c:b4:67:24:fe:38:05:4e:f1: c2:61:66:60:f5:e3:b3:b4:02:64:a9:2a:47:b1:3f: 9a:39:a6:94:dd:29:e8:87:7c:cf:5c:65:95:4d:f0: 7d:55:75:e8:89:5f:e1:4f:17:98:11:5f:a0:f2:15: 56:71:86:4a:e2:70:18:c7:5e:eb:f9:5f:3e:0c:da: c7:52:e2:6d:fd:80:e8:db:cc:3d:df:7f:c0:c8:9c: 84:84:49:d2:08:a3:5a:0b:d4:d4:2d:cd:04:a4:9e: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D3:CF:E6:7A:52:C9:AC:9F:16:4D:2A:AD:AA:1A:3F:A0:7B:FC:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:31:7f:20:be:d3:c5:10:58:a0:17:1c:08:73:b4:26:3d:dc: 39:5a:11:ba:ac:3c:a7:92:fc:43:3a:2f:5b:5b:a6:32:83:87: 51:6a:28:66:27:e9:58:05:86:0a:00:0c:ee:cf:ae:ad:c5:30: d5:92:e4:aa:7a:53:e2:4a:19:b1:be:f0:00:a0:c2:fb:ea:d3: b6:15:0f:b2:cc:b9:f6:58:67:ca:09:10:0d:45:1f:36:23:47: 81:eb:5b:99:08:0c:0b:2f:3f:72:7e:48:8c:e0:93:68:42:00: 6e:81:a2:f0:96:70:f9:4d:85:c2:4b:64:ab:dd:d7:da:a5:37: 75:7a:90:94:12:72:f9:43:e7:26:96:7f:04:84:6d:5d:35:94: 75:cd:bd:55:42:53:41:fe:a4:09:6c:45:ce:da:51:30:78:71: 7b:e1:fd:c7:83:6d:51:b4:40:06:df:c0:11:14:2e:04:5c:8f: c1:4b:45:5d:75:7b:2d:5a:6e:d5:fd:3e:09:06:77:3b:f3:74: d1:31:b3:bc:64:ff:40:14:eb:77:0d:88:6c:32:5d:50:f3:20: e6:ca:e1:6f:25:5f:68:76:b7:26:93:ec:da:f9:df:05:10:a4: af:5a:d8:e5:87:60:df:66:a4:23:95:71:53:1d:10:c7:d2:b8: 0a:8b:77:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noFPZoZbbkMDI6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzQ5ZTg3YjktYmZhOC00ODUyLTkyNjItNWY0ODk1NzUwNTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjneOiBnusjN71FKyCR//KZeRmlxb7D/vdXP xikjKvcglMVzgFehHvjRcctkt2vrHLsvfj4yEM791FgVAkoNW0zxXhcyMeWIG4p0 WGGJp/PSaqNLwtd6BI6L+oKVH40WOS8bedu17pQP4smy7sLMsan2m1pqharpYrk0 cMCxQ2DPQzGhUSdpgD62DD+6fRNQfl0PeS7MoJtz+hRMtGck/jgFTvHCYWZg9eOz tAJkqSpHsT+aOaaU3Snoh3zPXGWVTfB9VXXoiV/hTxeYEV+g8hVWcYZK4nAYx17r +V8+DNrHUuJt/YDo28w933/AyJyEhEnSCKNaC9TULc0EpJ7X5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrTz+Z6UsmsnxZNKq2qGj+ge/z/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWExYjM4MDItZWE0OC0z ZDc2LWE4NDctNzg5NGE2YzAyNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMxfyC+08UQWKAXHAhztCY93DlaEbqsPKeS/EM6L1tbpjKDh1FqKGYn 6VgFhgoADO7Prq3FMNWS5Kp6U+JKGbG+8ACgwvvq07YVD7LMufZYZ8oJEA1FHzYj R4HrW5kIDAsvP3J+SIzgk2hCAG6BovCWcPlNhcJLZKvd19qlN3V6kJQScvlD5yaW fwSEbV01lHXNvVVCU0H+pAlsRc7aUTB4cXvh/ceDbVG0QAbfwBEULgRcj8FLRV11 ey1abtX9PgkGdzvzdNExs7xk/0AU63cNiGwyXVDzIObK4W8lX2h2tyaT7Nr53wUQ pK9a2OWHYN9mpCOVcVMdEMfSuAqLd30= -----END CERTIFICATE-----Generated at Wed Jul 29 05:25:45 2026 by rpki-client