$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa File: 1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa (raw, json) Hash identifier: k7dXh+DiEPSWLRNCNFFsk5co071nEGM0GWuCGak5g/c= Subject key identifier: A2:90:4D:00:64:1F:E1:35:DD:AB:63:A8:82:E8:56:D8:E1:C0:21:AA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC50751DC9036613B1A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c5:07:51:dc:90:36:61:3b:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=20e74b8a-69ea-43f1-9d2b-7f0a41890b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:de:cc:3a:52:41:f0:ee:70:a5:7a:59:26:87: 34:bf:bd:58:a5:e8:0a:ac:74:5e:4e:53:60:aa:06: c7:f4:ec:d1:4f:ab:1e:a4:40:5e:e7:0a:ed:b6:89: a5:57:02:2b:32:1c:7f:56:52:41:2c:04:85:88:6c: 84:bc:19:43:09:93:98:f8:ac:74:58:80:be:b3:c0: 1c:b4:9c:55:19:c1:87:a5:a7:56:9f:f1:77:af:76: 5a:7b:f6:19:5f:e8:86:e6:cd:f2:9a:5b:58:5d:85: ab:2b:83:32:a2:2c:a4:ed:8f:ed:eb:55:1f:6f:c9: b0:11:e3:ab:f2:f9:23:6f:4f:0b:ce:c6:74:2f:6d: 29:21:0b:ae:5a:01:4d:42:62:58:7a:c7:4f:3a:b0: bd:d3:45:c9:94:8c:54:b3:20:ee:93:6a:03:bf:2d: 25:8a:97:80:63:24:45:33:19:c1:b6:44:44:15:9f: ed:2e:49:b3:00:c2:3f:d0:80:0d:5f:a8:f5:03:c3: fc:74:66:0b:6a:b1:ae:5a:e1:3e:fc:30:72:4b:16: b7:f3:73:b0:51:21:88:e8:48:9a:ee:72:bb:c1:a4: 94:e7:72:10:3e:b4:50:84:a4:a1:6d:f7:7c:a5:2c: af:01:b7:3d:da:75:69:5c:77:43:e4:53:3e:bb:ba: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:90:4D:00:64:1F:E1:35:DD:AB:63:A8:82:E8:56:D8:E1:C0:21:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:f5:96:f2:31:f5:ce:29:dd:d7:59:0f:a3:b7:70:84:3f:4b: 7a:19:e0:22:ab:50:d8:f2:16:a9:fc:b8:17:9c:90:66:1f:1a: 27:eb:a2:c3:60:ea:0c:b2:24:e8:5a:a2:80:bd:86:80:ca:c1: 3c:ac:98:97:2f:6d:d8:82:48:dc:d5:f2:1c:a3:4c:de:63:fe: 2a:2d:50:8f:f8:7c:16:5b:2e:01:11:f6:ae:7a:02:1a:d6:72: 0a:a3:1f:6c:2e:36:29:50:c0:ee:b5:16:3d:6a:34:f2:da:20: 73:fb:f0:e9:d1:6d:e5:86:dd:21:b5:75:fb:1e:09:c1:b2:68: 1d:f8:9c:69:d8:22:39:6f:b3:4a:17:13:c5:d2:d6:6a:0e:00: 8e:42:10:90:63:55:5a:98:29:91:60:19:8c:c0:a7:2c:1a:80: 18:51:41:40:f1:80:25:32:c2:57:88:42:86:33:91:4e:4a:1d: d0:cc:a8:c3:07:be:7b:65:84:09:a6:13:66:5e:cf:1b:3f:c6: 25:7a:fc:f2:5f:60:e8:14:7e:f7:4b:67:a7:6b:8a:2c:14:94: 67:5f:df:6b:ca:63:3b:47:32:6f:b4:4d:4b:7b:a3:15:a4:8d: 61:67:92:fa:31:3a:d2:19:24:18:da:e2:bf:aa:da:6b:e4:fc: 87:1a:c7:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8UHUdyQNmE7GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MjBlNzRiOGEtNjllYS00M2YxLTlkMmItN2YwYTQxODkwYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N7MOlJB8O5wpXpZJoc0v71YpegKrHReTlNg qgbH9OzRT6sepEBe5wrttomlVwIrMhx/VlJBLASFiGyEvBlDCZOY+Kx0WIC+s8Ac tJxVGcGHpadWn/F3r3Zae/YZX+iG5s3ymltYXYWrK4Myoiyk7Y/t61Ufb8mwEeOr 8vkjb08LzsZ0L20pIQuuWgFNQmJYesdPOrC900XJlIxUsyDuk2oDvy0lipeAYyRF MxnBtkREFZ/tLkmzAMI/0IANX6j1A8P8dGYLarGuWuE+/DBySxa383OwUSGI6Eia 7nK7waSU53IQPrRQhKShbfd8pSyvAbc92nVpXHdD5FM+u7qIgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKQTQBkH+E13atjqILoVtjhwCGqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZhY2FhOWMtNjQxNC0z OGVmLWJiMmYtM2RiYWFlODQ2ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALD1lvIx9c4p3ddZD6O3cIQ/S3oZ4CKrUNjyFqn8uBeckGYfGifrosNg 6gyyJOhaooC9hoDKwTysmJcvbdiCSNzV8hyjTN5j/iotUI/4fBZbLgER9q56AhrW cgqjH2wuNilQwO61Fj1qNPLaIHP78OnRbeWG3SG1dfseCcGyaB34nGnYIjlvs0oX E8XS1moOAI5CEJBjVVqYKZFgGYzApywagBhRQUDxgCUywleIQoYzkU5KHdDMqMMH vntlhAmmE2Zezxs/xiV6/PJfYOgUfvdLZ6driiwUlGdf32vKYztHMm+0TUt7oxWk jWFnkvoxOtIZJBja4r+q2mvk/Icax3I= -----END CERTIFICATE-----Generated at Sat Jun 13 12:58:38 2026 by rpki-client