$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa File: 42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa (raw, json) Hash identifier: EVN/F715m36CDqeRNoUS1IJbN68EY1/gcib1EciYPgc= Subject key identifier: 02:5A:D7:FD:5B:4F:C4:F1:FA:6F:59:68:5E:FC:05:12:7F:0A:8A:80 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E448F62DE2DF2BAC5360B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 172.217.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:8f:62:de:2d:f2:ba:c5:36:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=fe74ee0b-bd6d-4bef-9b62-4f90ac8c8efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:60:06:5c:d9:45:56:0a:57:ae:31:95:1e: df:d0:95:17:20:1c:16:e6:9d:24:e5:31:5b:7e:d2: 95:39:27:c1:46:99:72:ea:46:4d:12:78:67:5d:93: 31:26:e9:8c:af:e6:cc:a0:19:dd:a6:91:c0:bb:ce: e4:ef:df:04:81:d6:bc:68:2a:42:32:9a:57:71:ec: 63:66:5e:9b:56:d4:77:41:03:47:07:f5:2d:85:96: d2:bb:bb:56:2c:af:bd:af:c8:e8:0e:c3:e0:eb:e3: 75:73:aa:ab:95:5f:5b:fc:e7:7b:5a:95:4d:7e:c6: 38:be:8f:a3:5b:c0:22:4e:35:4a:3b:b8:9c:d3:75: 95:bd:e5:4d:a5:2b:d0:7e:cf:2b:3f:ad:66:9e:bb: e3:a6:b1:2c:ba:c7:5c:20:fd:1c:55:61:64:79:ef: 5e:0f:b8:72:c1:fc:26:db:93:f7:3c:a9:53:80:c6: da:35:c6:2b:57:99:4a:3a:d1:98:da:ac:65:a1:fa: 5c:66:0a:fc:00:fa:34:16:c6:e6:6f:7a:56:5c:56: eb:e0:32:60:08:70:2b:ad:83:a4:17:78:37:40:f2: 8f:4b:c0:b8:41:4d:b4:10:26:5b:af:b2:87:c0:0a: e7:1b:b7:da:a5:90:f1:6b:c0:d1:43:17:17:cd:f0: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5A:D7:FD:5B:4F:C4:F1:FA:6F:59:68:5E:FC:05:12:7F:0A:8A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0c:a1:35:fe:8b:91:b7:3c:c6:99:d1:62:4a:91:12:1b:aa: 69:72:eb:0a:d1:93:fa:bb:e4:4b:d9:9f:b8:7d:97:3a:86:03: 8c:5f:84:bc:2d:36:87:3a:27:e4:f4:ea:e4:6d:15:5e:38:5a: e4:9e:d4:18:19:a0:b9:cb:a4:26:1b:15:47:96:9c:45:48:a7: 21:f2:0b:76:a5:39:c8:73:55:7d:f2:1c:14:a6:1c:49:f0:18: 9b:f5:28:68:3e:6e:e5:f6:9a:8d:76:de:ce:79:c0:ef:4a:03: 75:8a:08:aa:1f:79:1c:c8:1d:e4:22:d9:ca:d1:03:ee:30:e4: 05:78:39:1b:1e:ab:d1:32:e0:04:c8:b1:cf:89:d9:5b:e6:a5: 21:24:51:d7:4f:53:ac:db:a2:ad:de:b6:57:ff:67:db:1e:32: 4e:a5:ae:df:45:9b:a8:02:6f:8d:7d:c1:fa:80:03:05:62:e6: d5:d4:55:f2:c2:67:6b:c9:2b:e5:3e:14:88:dd:6c:7f:bb:c2: de:ea:ef:47:57:16:c6:79:f1:89:ee:bc:ba:39:32:f8:a1:2a: 36:30:fc:59:59:d9:6c:89:da:c9:ce:c7:b8:d3:e2:10:64:26: 07:03:7a:e5:aa:fa:a4:ff:ae:71:23:08:98:80:2d:e4:7c:35: 19:8c:67:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRI9i3i3yusU2CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZmU3NGVlMGItYmQ2ZC00YmVmLTliNjItNGY5MGFjOGM4ZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWFgBlzZRVYKV64xlR7f0JUXIBwW5p0k5TFb ftKVOSfBRply6kZNEnhnXZMxJumMr+bMoBndppHAu87k798Egda8aCpCMppXcexj Zl6bVtR3QQNHB/UthZbSu7tWLK+9r8joDsPg6+N1c6qrlV9b/Od7WpVNfsY4vo+j W8AiTjVKO7ic03WVveVNpSvQfs8rP61mnrvjprEsusdcIP0cVWFkee9eD7hywfwm 25P3PKlTgMbaNcYrV5lKOtGY2qxlofpcZgr8APo0Fsbmb3pWXFbr4DJgCHArrYOk F3g3QPKPS8C4QU20ECZbr7KHwArnG7fapZDxa8DRQxcXzfD5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJa1/1bT8Tx+m9ZaF78BRJ/CoqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDJhZmNlYmItMTVkYy0z OGE5LWE2MGEtMjc2YTllYmYxZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcMoTX+i5G3PMaZ0WJKkRIbqmly6wrRk/q75EvZn7h9lzqGA4xfhLwt Noc6J+T06uRtFV44WuSe1BgZoLnLpCYbFUeWnEVIpyHyC3alOchzVX3yHBSmHEnw GJv1KGg+buX2mo123s55wO9KA3WKCKofeRzIHeQi2crRA+4w5AV4ORseq9Ey4ATI sc+J2VvmpSEkUddPU6zboq3etlf/Z9seMk6lrt9Fm6gCb419wfqAAwVi5tXUVfLC Z2vJK+U+FIjdbH+7wt7q70dXFsZ58YnuvLo5MvihKjYw/FlZ2WyJ2snOx7jT4hBk JgcDeuWq+qT/rnEjCJiALeR8NRmMZzo= -----END CERTIFICATE-----Generated at Sat Jun 13 13:34:01 2026 by rpki-client