$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33a7e675-8cbb-3daa-b083-db5305d2ba97.roa File: 33a7e675-8cbb-3daa-b083-db5305d2ba97.roa (raw, json) Hash identifier: 9xDUvIfqCTRTy7tqJF9LLE1Gu+YmQYIwtSgfgg0UaBw= Subject key identifier: 25:07:E5:95:CA:9A:C7:33:79:C1:51:83:68:52:0F:A6:63:A6:DE:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D86956D8E56CF7437DBDDE540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33a7e675-8cbb-3daa-b083-db5305d2ba97.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 15169 IP address blocks: 172.217.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:6d:8e:56:cf:74:37:db:dd:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=c1e6edb3-13d5-48da-932b-f6cd971f4aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:dc:d0:26:c2:95:ed:5f:9e:65:2a:83:af: 3b:7b:d7:49:d3:ff:2c:fb:63:33:1c:ee:ff:ee:b4: e7:76:0e:cd:68:0b:3a:5d:a7:aa:38:90:80:25:1d: be:46:dd:dc:74:39:17:32:e4:5f:86:da:57:71:de: 84:3d:70:19:6e:3e:0c:ce:f7:cf:18:f9:4d:28:53: 67:10:1c:68:3e:b7:68:47:09:9e:6a:df:27:42:4d: 53:23:f9:39:6e:3d:ef:65:d5:45:9b:84:5b:f3:8c: 70:55:49:8c:c0:1c:8f:01:ed:0e:90:aa:06:a6:30: d6:a5:cb:ec:a3:3e:fe:d2:ce:42:a5:dc:d8:fe:ad: 4e:b5:e4:1c:05:7f:cf:8a:49:4b:91:7c:4e:95:c9: 68:88:40:23:3a:8c:52:f2:a2:36:ae:f5:d1:1d:b2: 89:54:66:5e:eb:24:5c:80:f4:00:69:bf:fe:fc:69: 8f:13:10:c5:0b:4e:62:0f:ee:87:55:6c:82:d3:5d: 6a:a9:85:8c:c7:2b:18:53:13:97:46:f8:99:18:21: ed:f0:a9:cc:e2:b3:fc:df:c8:4a:fc:14:ce:ac:f4: 2e:d7:5a:ba:3f:25:f6:cc:cd:05:2c:b1:75:ca:b6: 57:17:22:be:5a:97:52:25:7f:f0:e2:5a:db:c6:86: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:07:E5:95:CA:9A:C7:33:79:C1:51:83:68:52:0F:A6:63:A6:DE:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33a7e675-8cbb-3daa-b083-db5305d2ba97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:3c:af:55:7b:36:54:c3:e1:bd:4a:5a:25:77:ac:f6:f4:f9: 75:04:34:dd:46:f2:5e:2d:65:4a:1c:74:5d:04:dd:d8:be:4f: f6:be:02:86:f6:05:56:9a:64:45:d5:08:0d:df:7b:1c:81:15: 4f:66:e6:54:cd:c6:3b:cf:75:77:26:97:ab:61:ec:07:c4:a5: 7e:d0:40:ca:bf:cc:8f:9f:24:bd:32:e6:7d:3a:9b:e0:53:c4: 8b:5d:75:d8:19:8a:23:50:e8:09:03:6a:dd:3f:4a:47:30:bc: 5f:7f:91:28:92:d3:35:46:61:bd:41:93:78:24:7b:df:48:f1: fb:92:29:c6:7d:ac:a4:6c:be:6f:fa:47:87:59:73:fc:21:1e: f0:a9:f9:81:38:58:67:5b:0a:56:68:07:4e:63:aa:92:ea:69: d1:6c:c8:9a:c3:a7:de:86:0f:79:33:df:61:a3:26:da:30:49: 59:b1:49:5a:46:1e:e9:20:1d:45:51:92:23:40:92:3a:01:bf: 2a:1d:44:f6:74:ea:e1:36:d6:05:05:c6:de:41:be:55:ed:01: 06:2d:8d:13:b3:42:cd:fb:b0:cc:57:15:61:73:88:c5:ee:21: 0b:a4:56:22:40:4c:a0:b0:cc:05:aa:69:60:1f:48:3e:f1:7b: 2c:16:37:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlW2OVs90N9vd5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YzFlNmVkYjMtMTNkNS00OGRhLTkzMmItZjZjZDk3MWY0YWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLTc0CbCle1fnmUqg687e9dJ0/8s+2MzHO7/ 7rTndg7NaAs6XaeqOJCAJR2+Rt3cdDkXMuRfhtpXcd6EPXAZbj4MzvfPGPlNKFNn EBxoPrdoRwmeat8nQk1TI/k5bj3vZdVFm4Rb84xwVUmMwByPAe0OkKoGpjDWpcvs oz7+0s5CpdzY/q1OteQcBX/PiklLkXxOlcloiEAjOoxS8qI2rvXRHbKJVGZe6yRc gPQAab/+/GmPExDFC05iD+6HVWyC011qqYWMxysYUxOXRviZGCHt8KnM4rP838hK /BTOrPQu11q6PyX2zM0FLLF1yrZXFyK+WpdSJX/w4lrbxoZvqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUH5ZXKmsczecFRg2hSD6Zjpt5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzNhN2U2NzUtOGNiYi0z ZGFhLWIwODMtZGI1MzA1ZDJiYTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALI8r1V7NlTD4b1KWiV3rPb0+XUENN1G8l4tZUocdF0E3di+T/a+Aob2 BVaaZEXVCA3fexyBFU9m5lTNxjvPdXcml6th7AfEpX7QQMq/zI+fJL0y5n06m+BT xItdddgZiiNQ6AkDat0/SkcwvF9/kSiS0zVGYb1Bk3gke99I8fuSKcZ9rKRsvm/6 R4dZc/whHvCp+YE4WGdbClZoB05jqpLqadFsyJrDp96GD3kz32GjJtowSVmxSVpG HukgHUVRkiNAkjoBvyodRPZ06uE21gUFxt5BvlXtAQYtjROzQs37sMxXFWFziMXu IQukViJATKCwzAWqaWAfSD7xeywWN78= -----END CERTIFICATE-----Generated at Fri Apr 17 08:03:06 2026 by rpki-client