$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa File: 3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa (raw, json) Hash identifier: Rob3NxpzTgDqKhvx5XCA1+VD/1poRLdJLTRLOEs9BWk= Subject key identifier: BC:18:8B:CF:37:80:70:8E:C1:BE:A2:C2:F2:50:73:43:82:83:72:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E446A14A799820183F6D340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 172.217.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:6a:14:a7:99:82:01:83:f6:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=9d2d62e0-4001-4c1c-9086-f48561decc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:8b:78:28:2e:db:2d:a4:d0:25:81:20:95: 66:30:5f:be:7a:92:06:69:d5:b4:33:4e:92:aa:c1: 8b:1c:af:48:37:01:59:43:ee:8e:2e:aa:9e:c0:9f: 99:ca:1f:f8:57:6c:b9:df:38:c2:1d:6c:17:ff:4b: f1:43:cc:60:1f:93:34:42:6d:06:4c:12:c3:21:8e: 89:1b:3e:ef:05:ca:ee:7e:21:c2:41:92:28:7a:4c: 9b:54:2d:5b:7b:b1:93:f2:d0:57:0a:40:a6:0e:e1: 44:38:af:0d:e5:c7:08:e6:04:18:09:8a:fc:19:14: 7e:53:47:f6:bf:e1:46:2c:45:be:86:ee:56:c0:2d: 9c:ad:52:77:2a:75:0e:08:2d:33:4c:a2:1f:1f:0a: 6e:77:d5:31:01:c2:de:c1:33:26:e8:66:38:8c:c7: 3b:0b:36:ff:b7:90:e3:e4:58:0c:68:a5:7b:0a:ae: 0b:4b:c8:bc:07:82:b9:95:21:6f:a3:e7:15:77:26: 78:af:8d:f4:b2:9b:03:3f:1b:7c:b0:d1:ed:d3:44: b9:c8:0a:dd:55:30:9a:f7:11:03:01:6d:df:25:a3: 49:93:7a:75:cb:32:8e:ba:2c:80:c3:40:84:08:d0: cd:b5:35:b1:3b:3e:fa:e6:85:8a:b3:f2:26:c4:f6: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:18:8B:CF:37:80:70:8E:C1:BE:A2:C2:F2:50:73:43:82:83:72:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:57:64:2b:47:80:9d:d6:43:c9:87:18:25:65:ba:d0:36:2b: 24:77:e4:7f:3b:25:04:f9:5c:c2:e3:a7:34:1f:64:e0:47:8b: 58:7d:1c:12:05:18:57:e4:88:3b:41:5d:6b:4d:cb:1d:54:07: c1:3e:10:c8:4d:76:ff:7d:af:b8:0b:5b:ab:cb:f6:9a:a4:27: 7c:37:70:40:10:00:00:68:79:f8:12:01:64:4d:51:a9:7e:88: 3a:42:88:f6:25:45:2a:82:f9:e8:f8:5b:3d:96:9d:a2:6e:68: 7d:89:dc:cb:4f:1c:13:c9:ed:e1:c5:8b:ee:53:36:94:f8:19: af:bf:97:48:cc:da:10:85:92:54:60:26:e6:67:c9:33:1d:61: 74:55:06:3f:4f:46:08:8b:96:4e:c7:ac:6a:7c:30:42:7f:f4: 5f:72:bf:e9:a9:cf:69:63:06:5c:7e:d0:a9:a5:05:4a:bf:2e: 50:de:e0:34:b9:37:0b:e1:1e:ae:d6:34:41:01:5b:78:38:20: d1:b9:0b:c2:a2:8a:f6:c0:25:7a:38:d1:b1:01:44:a2:34:35: e2:8d:81:a3:8e:6e:20:e6:69:da:6a:d2:c7:a8:08:25:ed:b7: 81:a5:21:bd:ad:17:1f:8f:3e:73:4d:ff:d1:01:ce:ab:fe:5c: 6d:bb:ef:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRGoUp5mCAYP200AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk OWQyZDYyZTAtNDAwMS00YzFjLTkwODYtZjQ4NTYxZGVjYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntSLeCgu2y2k0CWBIJVmMF++epIGadW0M06S qsGLHK9INwFZQ+6OLqqewJ+Zyh/4V2y53zjCHWwX/0vxQ8xgH5M0Qm0GTBLDIY6J Gz7vBcrufiHCQZIoekybVC1be7GT8tBXCkCmDuFEOK8N5ccI5gQYCYr8GRR+U0f2 v+FGLEW+hu5WwC2crVJ3KnUOCC0zTKIfHwpud9UxAcLewTMm6GY4jMc7Czb/t5Dj 5FgMaKV7Cq4LS8i8B4K5lSFvo+cVdyZ4r430spsDPxt8sNHt00S5yArdVTCa9xED AW3fJaNJk3p1yzKOuiyAw0CECNDNtTWxOz765oWKs/ImxPY8+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwYi883gHCOwb6iwvJQc0OCg3LUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2RkYTlmYTgtYjY5Yi0z Y2I0LTliZjEtNTJhZGY5OGYxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlXZCtHgJ3WQ8mHGCVlutA2KyR35H87JQT5XMLjpzQfZOBHi1h9HBIF GFfkiDtBXWtNyx1UB8E+EMhNdv99r7gLW6vL9pqkJ3w3cEAQAABoefgSAWRNUal+ iDpCiPYlRSqC+ej4Wz2WnaJuaH2J3MtPHBPJ7eHFi+5TNpT4Ga+/l0jM2hCFklRg JuZnyTMdYXRVBj9PRgiLlk7HrGp8MEJ/9F9yv+mpz2ljBlx+0KmlBUq/LlDe4DS5 NwvhHq7WNEEBW3g4ING5C8KiivbAJXo40bEBRKI0NeKNgaOObiDmadpq0seoCCXt t4GlIb2tFx+PPnNN/9EBzqv+XG277w4= -----END CERTIFICATE-----Generated at Sat Jun 13 11:25:10 2026 by rpki-client