$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa File: 311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa (raw, json) Hash identifier: 2L3BgTs/PL6vXsCvj2coxazoIlAWgE3pnpTf4QFGxdU= Subject key identifier: 47:45:32:77:6D:FF:D5:BE:1D:DE:D3:C9:20:01:C9:EF:65:8B:AF:73 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C3E23B0C3311B5FDCFA60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:3e:23:b0:c3:31:1b:5f:dc:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=0dc4da44-6996-4b69-8994-5242f5dd71c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:4f:23:b8:67:46:80:e6:aa:0e:1b:8d:d0: 5e:08:5f:20:19:4c:57:23:41:28:22:a9:a0:ee:ec: 1a:10:60:88:36:29:21:4c:99:26:10:3b:a9:17:4a: c2:7f:0d:e8:54:5a:a0:5c:2f:e9:d8:51:71:74:6d: 82:97:a4:dd:38:60:e4:a2:cc:3a:f5:2f:27:e6:78: 14:5f:2f:11:6e:90:bf:b9:29:31:03:80:df:21:c0: d1:35:1e:f0:8d:3a:99:c8:3a:e9:ef:39:14:b6:e2: 0a:58:da:52:3f:a9:12:7c:ce:2b:eb:d7:b1:77:3f: 0b:58:81:8a:08:c3:0d:b6:dd:13:2f:6c:06:3a:aa: c6:d6:d2:f9:9f:a9:2c:31:ec:2d:24:8d:22:d6:19: 84:6b:ba:5b:06:f2:8c:52:29:01:d3:76:17:b8:23: 04:31:da:4c:5f:9c:9d:86:98:d4:b5:fb:bd:33:c4: e1:8a:18:38:83:77:b5:92:1b:43:7c:21:07:b4:d1: d8:df:7f:72:e0:af:cf:c8:76:73:1e:fd:bb:c9:7c: 60:24:36:74:b7:57:02:00:b4:ae:98:a5:76:5d:ea: 65:13:90:1d:ef:18:d0:83:2d:f0:66:ee:4c:bd:56: 9e:e4:c2:d7:b1:7e:66:cb:e4:78:57:6e:7c:b8:c3: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:45:32:77:6D:FF:D5:BE:1D:DE:D3:C9:20:01:C9:EF:65:8B:AF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:57:fa:c6:1d:91:28:f3:ff:3a:65:7f:c3:63:3f:81:d3:17: e0:cb:77:f7:66:86:04:33:9c:ee:a6:34:a8:79:4b:ac:a9:aa: 8f:70:fa:52:e4:a9:98:7d:26:2f:04:d7:f4:36:36:77:e4:16: be:1a:47:9c:a3:28:b8:5d:42:cd:1c:a4:ee:57:13:7c:02:a4: 6e:1e:ab:0e:d7:d3:f3:40:16:0d:27:87:c9:14:74:61:96:33: cf:2a:e5:c6:e5:0e:4e:e1:c3:39:86:9c:91:bc:61:f9:81:ee: 57:c6:53:2d:d8:c9:93:19:95:c3:0e:4a:22:bf:9e:0f:39:08: b8:81:ab:e8:40:d7:d8:c4:9f:b0:d6:f8:65:3d:08:2e:d4:92: 90:06:cb:a1:f1:a6:7d:d1:23:51:e0:6a:be:57:1d:58:c1:e4: 97:66:d8:17:ed:90:22:27:22:36:aa:64:58:e6:d3:ef:91:70: 4b:24:2d:4e:21:bb:4f:ba:8c:80:62:43:96:c7:1a:9d:e8:79: 0a:c6:a3:45:fc:86:5d:3f:fa:f0:bf:c0:58:df:ac:40:ff:44: 68:9a:2e:17:25:f9:ab:d6:e7:bd:7d:de:d9:37:b7:f5:48:ef: 93:fa:b9:c7:99:10:97:62:cf:24:d2:e7:6d:98:fb:c1:94:bf: b4:97:d5:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnD4jsMMxG1/c+mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MGRjNGRhNDQtNjk5Ni00YjY5LTg5OTQtNTI0MmY1ZGQ3MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLdPI7hnRoDmqg4bjdBeCF8gGUxXI0EoIqmg 7uwaEGCINikhTJkmEDupF0rCfw3oVFqgXC/p2FFxdG2Cl6TdOGDkosw69S8n5ngU Xy8RbpC/uSkxA4DfIcDRNR7wjTqZyDrp7zkUtuIKWNpSP6kSfM4r69exdz8LWIGK CMMNtt0TL2wGOqrG1tL5n6ksMewtJI0i1hmEa7pbBvKMUikB03YXuCMEMdpMX5yd hpjUtfu9M8Thihg4g3e1khtDfCEHtNHY339y4K/PyHZzHv27yXxgJDZ0t1cCALSu mKV2XeplE5Ad7xjQgy3wZu5MvVae5MLXsX5my+R4V258uMPTdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdFMndt/9W+Hd7TySABye9li69zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzExZWRkMzQtYzIxZS0z NmE3LWE2Y2ItMmZlNGNiNjNkNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChX+sYdkSjz/zplf8NjP4HTF+DLd/dmhgQznO6mNKh5S6ypqo9w+lLk qZh9Ji8E1/Q2NnfkFr4aR5yjKLhdQs0cpO5XE3wCpG4eqw7X0/NAFg0nh8kUdGGW M88q5cblDk7hwzmGnJG8YfmB7lfGUy3YyZMZlcMOSiK/ng85CLiBq+hA19jEn7DW +GU9CC7UkpAGy6Hxpn3RI1Hgar5XHVjB5Jdm2BftkCInIjaqZFjm0++RcEskLU4h u0+6jIBiQ5bHGp3oeQrGo0X8hl0/+vC/wFjfrED/RGiaLhcl+avW57193tk3t/VI 75P6uceZEJdizyTS522Y+8GUv7SX1ZE= -----END CERTIFICATE-----Generated at Sat Jun 13 13:10:03 2026 by rpki-client