$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa File: 20b50217-08d6-3245-abc2-d3c9c7b445a1.roa (raw, json) Hash identifier: sF6X8BCZE4tykCISd66YFp9IKhR+UuK9BD7fUAmAmSc= Subject key identifier: 4B:DA:E2:7E:75:B5:E5:90:2E:63:09:A2:12:06:DA:22:2B:BE:2F:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BBAC192DAE736DDBFE910 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:ba:c1:92:da:e7:36:dd:bf:e9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=45799f74-9dd8-4726-b003-c7003263c6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bd:2c:d9:5a:45:66:61:1a:ec:85:7a:13:4e: 7c:ae:5c:34:e5:bd:92:81:e8:24:a3:8a:ab:72:bb: 5a:61:ae:ca:98:12:4b:5c:ef:ff:26:b9:3f:8d:9d: 10:d5:0d:b4:c9:d8:53:d6:4d:e0:20:85:b1:c6:dd: 03:e4:20:90:6b:45:bf:4f:3a:dd:1c:52:83:89:26: c9:51:83:20:a3:b5:9f:d7:53:ea:ca:ed:34:1b:1e: 34:cf:82:eb:f0:41:84:04:05:fd:95:77:a6:d5:dc: ef:f6:2b:8f:7d:1e:d3:97:d0:1a:ff:75:27:f7:18: 9e:ea:50:4a:be:c4:70:33:71:d9:76:45:9d:76:8c: 7c:3a:aa:ec:49:a4:a5:ab:a5:3a:1d:14:3f:96:1f: 33:22:5c:77:08:09:70:8e:a2:31:93:77:98:17:d3: 91:67:6b:2c:1f:18:d3:68:34:e1:f0:d5:db:ab:26: ae:ad:f2:d3:0b:e6:18:28:11:94:16:40:ac:64:10: 94:a2:b7:ad:11:45:e3:2b:11:74:62:54:b3:85:62: 4f:53:6f:23:1a:ea:cc:ff:ed:6a:94:19:c1:82:3a: 9c:fc:6f:d1:e3:f4:5e:54:b1:8d:e1:a0:f1:08:7e: f8:ec:18:bd:bf:ff:6a:be:71:5b:5d:23:6b:70:b6: 9d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DA:E2:7E:75:B5:E5:90:2E:63:09:A2:12:06:DA:22:2B:BE:2F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:5c:23:2a:e1:a1:03:37:56:b0:4d:b7:d5:2f:8b:ad:f1:50: 0e:f7:6d:15:c6:b0:f2:12:61:cd:2a:ce:df:c0:46:5b:b7:5b: 1b:33:48:97:21:ee:ba:44:94:c2:e7:b2:ae:4c:f3:97:d0:a1: 48:78:48:b4:3c:51:7b:5a:0e:bd:1a:00:f4:9d:a3:02:0b:ef: e4:06:39:73:3f:60:e1:ef:56:fa:21:de:51:51:0d:34:1b:3a: a8:94:71:79:86:80:f9:04:33:73:2d:7b:cd:2b:2b:6c:ed:84: d9:d5:21:bc:d1:9a:6f:93:64:97:02:2b:6a:1a:22:17:77:17: dc:4a:83:4c:a6:5e:a8:24:08:0d:a1:19:2a:9e:ce:b0:84:a2: 27:20:82:6a:aa:dc:21:bf:db:8c:00:1c:64:53:a8:77:14:44: 31:a4:2a:81:92:ae:98:a3:84:fb:aa:dd:bf:58:06:10:ce:2c: e6:6d:38:26:e4:6d:48:e5:6c:ee:3c:be:c4:cb:db:6a:4c:4e: 5f:eb:87:18:b7:55:70:62:09:a7:cf:36:02:da:3d:64:dc:f3: 2c:98:61:9c:ca:7a:f7:ed:81:4b:35:39:da:d0:e4:24:f7:db: 22:fd:60:f2:84:cd:35:84:f9:a3:54:5c:f9:a8:d6:95:e3:e9: 17:cd:26:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm7rBktrnNt2/6RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDU3OTlmNzQtOWRkOC00NzI2LWIwMDMtYzcwMDMyNjNjNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr0s2VpFZmEa7IV6E058rlw05b2Sgegko4qr crtaYa7KmBJLXO//Jrk/jZ0Q1Q20ydhT1k3gIIWxxt0D5CCQa0W/TzrdHFKDiSbJ UYMgo7Wf11Pqyu00Gx40z4Lr8EGEBAX9lXem1dzv9iuPfR7Tl9Aa/3Un9xie6lBK vsRwM3HZdkWddox8OqrsSaSlq6U6HRQ/lh8zIlx3CAlwjqIxk3eYF9ORZ2ssHxjT aDTh8NXbqyaurfLTC+YYKBGUFkCsZBCUoretEUXjKxF0YlSzhWJPU28jGurM/+1q lBnBgjqc/G/R4/ReVLGN4aDxCH747Bi9v/9qvnFbXSNrcLadUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEva4n51teWQLmMJohIG2iIrvi8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjBiNTAyMTctMDhkNi0z MjQ1LWFiYzItZDNjOWM3YjQ0NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJcIyrhoQM3VrBNt9Uvi63xUA73bRXGsPISYc0qzt/ARlu3WxszSJch 7rpElMLnsq5M85fQoUh4SLQ8UXtaDr0aAPSdowIL7+QGOXM/YOHvVvoh3lFRDTQb OqiUcXmGgPkEM3Mte80rK2zthNnVIbzRmm+TZJcCK2oaIhd3F9xKg0ymXqgkCA2h GSqezrCEoicggmqq3CG/24wAHGRTqHcURDGkKoGSrpijhPuq3b9YBhDOLOZtOCbk bUjlbO48vsTL22pMTl/rhxi3VXBiCafPNgLaPWTc8yyYYZzKevftgUs1OdrQ5CT3 2yL9YPKEzTWE+aNUXPmo1pXj6RfNJik= -----END CERTIFICATE-----Generated at Sat Jun 13 14:33:16 2026 by rpki-client