$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa File: 3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa (raw, json) Hash identifier: /HQf+QNYtyIlT2gqdttPZdNNaDLN+s0c3T+sNUEGJXQ= Subject key identifier: 7F:C0:BF:FB:4B:DD:18:7B:A5:E4:24:F5:01:18:7C:0D:CA:BC:A7:69 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BBF818735E83ED1105580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:bf:81:87:35:e8:3e:d1:10:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=566e7ac9-f26e-4193-bceb-68cd14df64ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:87:35:c2:47:67:11:41:ab:dd:82:b9:d7: 81:36:0c:b2:cc:14:69:60:17:a3:4b:ae:94:58:35: ef:bb:92:30:8d:8f:71:b3:2b:64:34:71:8f:1d:bb: bf:f8:ce:9d:80:f5:c6:6f:eb:11:7d:de:de:08:b3: a8:03:e7:95:53:5c:f4:b4:5d:df:54:e5:af:af:4b: bc:b8:9f:3c:b2:85:96:4f:04:45:72:33:1f:f2:dd: c0:7f:49:7d:db:09:d4:20:dc:04:7c:52:22:c2:43: 29:97:2d:2f:13:cc:20:48:fc:e0:b6:97:79:50:9a: df:26:57:5c:c0:12:dd:2d:c8:72:92:00:f9:6f:e4: ac:c4:14:0f:25:db:3b:df:e0:7f:a7:9b:2b:23:b5: 2e:a3:9c:53:d9:ed:40:87:ac:79:f8:07:3a:eb:3e: 16:3b:be:44:d8:f6:79:ec:4a:a0:a0:f5:98:07:39: 18:ee:74:11:7b:24:ec:a4:7e:89:b2:c2:b3:45:02: c7:08:57:e6:0e:c9:9e:5c:3d:20:61:9e:a5:10:b6: 56:53:e2:3e:32:67:7e:4a:12:1f:29:42:e4:16:e5: 9e:d1:25:2d:62:6c:ef:6c:5f:ef:93:ed:e4:3b:e5: b8:26:ec:fa:27:e7:a7:42:5d:ab:63:25:40:51:7f: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C0:BF:FB:4B:DD:18:7B:A5:E4:24:F5:01:18:7C:0D:CA:BC:A7:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:37:55:2c:1f:81:4e:59:8a:e6:01:0d:3e:8a:9d:15:f8:f3: a0:92:5d:7f:9e:7b:f2:41:75:c3:a7:9d:9e:b7:d9:c1:61:01: b2:52:ae:5d:d8:e9:3c:b8:ab:6c:c3:fd:a4:2a:25:44:2d:8e: 97:83:9e:23:33:c0:7b:d3:a1:29:41:d4:30:67:32:a9:10:d0: 7e:ce:3a:4b:0c:21:7e:f5:4b:d7:be:f1:f2:b4:1d:1d:48:db: 72:f9:5c:1b:ed:df:f6:bf:6f:68:19:3c:a9:11:e9:c1:28:66: b1:00:8a:8e:0b:6d:cd:5f:98:39:e7:8c:cf:35:bc:68:b5:12: 20:df:5e:be:19:d1:cd:39:b6:0e:89:90:8a:67:d4:3a:74:bc: 79:71:4e:2f:3d:d4:6c:9d:f8:f8:d7:af:86:67:29:74:21:1b: 0d:c6:56:7c:dc:39:97:35:d5:f9:59:d6:f4:6c:76:fe:81:af: 3b:fc:d6:55:2e:91:cf:6b:61:be:a1:29:6f:b4:b7:8c:cf:93: ce:94:e3:a7:2f:86:7e:48:a9:ab:83:f7:0f:10:fc:b2:2e:e6: 45:4d:52:1d:5b:8a:5c:4f:39:c6:81:9d:9a:4d:ef:16:cd:bf: b2:62:ff:d7:c0:86:e9:58:d6:e5:f1:a4:62:ff:9a:82:50:1d: 70:76:b9:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm7+BhzXoPtEQVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NTY2ZTdhYzktZjI2ZS00MTkzLWJjZWItNjhjZDE0ZGY2NGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSWHNcJHZxFBq92CudeBNgyyzBRpYBejS66U WDXvu5IwjY9xsytkNHGPHbu/+M6dgPXGb+sRfd7eCLOoA+eVU1z0tF3fVOWvr0u8 uJ88soWWTwRFcjMf8t3Af0l92wnUINwEfFIiwkMply0vE8wgSPzgtpd5UJrfJldc wBLdLchykgD5b+SsxBQPJds73+B/p5srI7Uuo5xT2e1Ah6x5+Ac66z4WO75E2PZ5 7EqgoPWYBzkY7nQReyTspH6JssKzRQLHCFfmDsmeXD0gYZ6lELZWU+I+Mmd+ShIf KULkFuWe0SUtYmzvbF/vk+3kO+W4Juz6J+enQl2rYyVAUX/mfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/Av/tL3Rh7peQk9QEYfA3KvKdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzY2MmZhNTEtNzUxZi0z ZGMxLWIxYzEtYjlmZGFiOGYyNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw3VSwfgU5ZiuYBDT6KnRX486CSXX+ee/JBdcOnnZ632cFhAbJSrl3Y 6Ty4q2zD/aQqJUQtjpeDniMzwHvToSlB1DBnMqkQ0H7OOksMIX71S9e+8fK0HR1I 23L5XBvt3/a/b2gZPKkR6cEoZrEAio4Lbc1fmDnnjM81vGi1EiDfXr4Z0c05tg6J kIpn1Dp0vHlxTi891Gyd+PjXr4ZnKXQhGw3GVnzcOZc11flZ1vRsdv6Brzv81lUu kc9rYb6hKW+0t4zPk86U46cvhn5IqauD9w8Q/LIu5kVNUh1bilxPOcaBnZpN7xbN v7Ji/9fAhulY1uXxpGL/moJQHXB2uSk= -----END CERTIFICATE-----Generated at Sat Jun 13 18:34:37 2026 by rpki-client