$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa File: 21512194-aac9-3b75-b614-eb08260f717b.roa (raw, json) Hash identifier: KGnPx/v+tSBd2VKFOzEmEh6cRTXo44bw8G0FPD13te0= Subject key identifier: 3A:28:F2:1B:58:19:A7:75:C5:0A:F5:ED:A9:26:46:52:34:00:1C:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BBB8F07975A48C4532BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:bb:8f:07:97:5a:48:c4:53:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=a0c9c087-65a7-4cbb-a26f-4bf6d1da455a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:6d:15:03:92:f8:1a:6f:50:8f:25:c4:16: 63:2a:a5:8c:d0:2a:cb:1c:d4:5d:17:17:5f:a0:21: 54:20:3f:c5:78:a5:fc:ff:d5:a9:93:5f:7a:09:a4: 7d:6c:89:f5:1c:f6:c5:97:31:cb:26:17:1a:1b:de: ff:b5:f9:c9:5b:a2:1d:3b:08:9f:8b:30:d9:88:5f: aa:be:8a:bb:62:dd:04:a5:37:7d:34:dd:41:3e:db: eb:e6:c0:48:50:52:52:72:16:fa:ab:ef:db:8c:d2: 65:d9:68:50:4b:ac:19:43:a6:d6:0c:ec:1f:ac:13: e7:ba:7c:94:5d:a2:6e:1d:c4:50:e1:a9:fc:3a:cd: be:84:df:e3:d4:7e:d4:cf:9e:19:3b:fc:08:f4:24: 6f:23:53:ea:49:50:6e:5b:2b:d6:6c:d3:08:5f:a7: d9:53:1c:8f:2e:7d:2d:84:33:60:7c:02:5a:79:e5: 3c:42:42:68:6f:14:9f:7c:53:02:b4:b9:d8:cf:68: ae:96:05:c2:40:b0:28:33:4e:ac:d2:49:8a:ac:81: 4c:8f:1f:bf:20:0e:a2:d2:09:1c:bd:c8:69:d6:e0: 73:77:dc:3e:18:54:f5:87:b8:a5:08:98:12:cc:93: 74:ad:6e:0f:bf:0c:a8:45:2d:a6:15:c1:c5:db:0f: db:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:F2:1B:58:19:A7:75:C5:0A:F5:ED:A9:26:46:52:34:00:1C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f8:94:1b:26:ca:c0:71:c4:1a:a3:e0:54:23:40:ab:32:a4: d6:cf:6b:6e:37:f8:79:1f:8e:4f:d5:0f:8b:32:5d:50:5d:89: 66:a5:82:ba:27:0e:b2:4d:6c:de:d9:80:8e:b3:f6:2a:2a:37: 73:72:c9:a2:c1:42:fb:a8:9b:90:79:3f:2c:38:06:d9:ab:34: 02:5c:23:5f:ea:f6:5b:75:1a:32:bd:5a:88:e8:b2:f6:63:88: 5a:90:83:52:b1:fb:c5:b3:e5:19:9f:59:24:f4:94:6c:cb:f1: 61:d1:d4:6d:48:a5:4a:d9:32:3e:86:e0:f7:37:32:68:54:fe: be:c2:2d:7c:52:4e:54:9f:2d:51:36:5b:fa:4a:3e:d7:ca:10: 2f:8a:ae:d0:54:ce:34:a8:9f:8c:8b:d7:07:25:ed:e4:4e:4a: 30:c7:1e:7c:ef:e1:18:6f:bd:82:2c:6c:18:bc:2b:2d:7c:ec: 4c:9f:3c:3b:85:30:c4:ed:fc:53:81:9a:08:ec:aa:6f:5b:55: cf:9d:48:9e:2e:ea:3e:63:09:03:58:f4:28:bf:63:b9:a9:b8: 19:25:10:df:2c:d0:de:b8:03:24:aa:94:ea:26:a8:f4:1c:da: e7:0a:56:e1:7d:31:ac:85:f0:95:f8:83:0b:12:c9:f2:e3:70: a8:28:a8:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm7uPB5daSMRTK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YTBjOWMwODctNjVhNy00Y2JiLWEyNmYtNGJmNmQxZGE0NTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfFtFQOS+BpvUI8lxBZjKqWM0CrLHNRdFxdf oCFUID/FeKX8/9Wpk196CaR9bIn1HPbFlzHLJhcaG97/tfnJW6IdOwifizDZiF+q voq7Yt0EpTd9NN1BPtvr5sBIUFJSchb6q+/bjNJl2WhQS6wZQ6bWDOwfrBPnunyU XaJuHcRQ4an8Os2+hN/j1H7Uz54ZO/wI9CRvI1PqSVBuWyvWbNMIX6fZUxyPLn0t hDNgfAJaeeU8QkJobxSffFMCtLnYz2iulgXCQLAoM06s0kmKrIFMjx+/IA6i0gkc vchp1uBzd9w+GFT1h7ilCJgSzJN0rW4PvwyoRS2mFcHF2w/biQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoo8htYGad1xQr17akmRlI0ABx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjE1MTIxOTQtYWFjOS0z Yjc1LWI2MTQtZWIwODI2MGY3MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn4lBsmysBxxBqj4FQjQKsypNbPa243+Hkfjk/VD4syXVBdiWalgron DrJNbN7ZgI6z9ioqN3NyyaLBQvuom5B5Pyw4BtmrNAJcI1/q9lt1GjK9WojosvZj iFqQg1Kx+8Wz5RmfWST0lGzL8WHR1G1IpUrZMj6G4Pc3MmhU/r7CLXxSTlSfLVE2 W/pKPtfKEC+KrtBUzjSon4yL1wcl7eROSjDHHnzv4RhvvYIsbBi8Ky187EyfPDuF MMTt/FOBmgjsqm9bVc+dSJ4u6j5jCQNY9Ci/Y7mpuBklEN8s0N64AySqlOomqPQc 2ucKVuF9MayF8JX4gwsSyfLjcKgoqM0= -----END CERTIFICATE-----Generated at Sat Jun 13 14:03:50 2026 by rpki-client