$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa File: 452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa (raw, json) Hash identifier: 707I3ixYrE/b2C13pO5GIsJ22jFihs+QANT/LM6dvi4= Subject key identifier: 40:05:58:DE:97:E8:0C:2F:D7:1D:BA:10:56:A8:E3:DD:2B:3D:B9:72 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A030265AE3676149D42A40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.217.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:30:26:5a:e3:67:61:49:d4:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=34e00fce-b7cb-460d-9868-b02f6e5091f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bb:54:d5:ff:15:e7:14:34:e1:84:a5:46:79: 2f:bb:01:b5:1e:3b:fe:ab:a2:3e:af:81:88:30:27: 3e:42:6a:05:07:3a:3b:e6:e5:7e:b8:37:73:e5:ae: 7f:83:ab:38:0f:2c:c7:82:c3:a8:a2:f1:64:22:05: cd:ce:81:b7:db:d3:61:aa:c6:8f:ab:d4:22:3b:e0: 90:1e:d5:a5:55:f6:f4:7e:64:ab:73:c6:4c:0d:2b: 75:e8:b1:ab:a2:36:3b:8b:af:0a:4b:6b:cd:df:a5: c3:cd:c0:07:46:a5:0a:fe:d3:0d:bf:7a:99:cc:bb: be:ed:cc:23:f1:27:d7:b0:28:81:b0:9d:dd:b4:bb: 22:8e:fa:1e:a1:2b:18:14:22:5c:84:4c:3e:3b:25: 40:a5:b7:d2:a5:68:52:44:9a:a4:93:c3:76:7d:a4: 53:89:5b:12:bd:e2:16:85:06:3a:62:ca:30:91:06: ac:13:bf:75:22:29:24:57:20:a0:4a:5f:7a:75:3d: 87:67:92:a1:22:8c:0f:61:c4:07:26:8d:63:69:ca: ff:84:57:d0:28:1e:4e:17:97:7a:cb:f6:2b:27:ec: 11:e7:60:9f:97:5d:01:e5:0a:9f:78:a8:e6:6c:6e: a8:00:89:8f:50:91:59:b7:2d:5d:8a:3a:1d:22:3a: 34:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:05:58:DE:97:E8:0C:2F:D7:1D:BA:10:56:A8:E3:DD:2B:3D:B9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:80:4a:43:c5:19:e2:2d:5f:73:a8:d8:ff:2d:67:36:29:aa: b6:43:99:5f:57:36:3b:26:4b:04:b3:72:e6:a1:67:14:4f:4e: d6:2e:e8:e2:ac:c5:a7:df:5c:94:78:8e:c8:3d:b1:c5:89:33: de:08:e7:11:e0:c7:6b:d3:c8:27:28:8b:96:70:d9:a7:3c:5a: 0e:e5:13:74:21:e2:3c:3a:61:4a:91:8f:4d:99:52:df:72:9e: b7:a9:c2:42:7f:14:89:88:9e:8a:c5:17:4e:c4:59:0f:2f:8a: ba:69:9e:6b:3c:7c:fe:4f:e9:2a:7a:c3:d2:c0:54:60:36:70: 86:80:48:9d:4c:99:45:a0:3b:2d:46:9f:67:8a:40:ab:74:30: 9f:d2:7b:78:12:f7:6e:b5:49:87:74:41:ca:3d:fe:2a:09:a4: 22:6a:26:d4:b2:43:fb:36:40:42:a1:8b:18:8c:23:2f:ad:9e: 4c:2e:09:1d:ed:2a:bd:0a:fa:df:f9:6b:cc:db:b0:e4:5a:b5: ce:64:b9:1c:e0:f4:05:7d:4e:57:57:44:27:cd:44:1a:4b:ed: af:c4:6d:61:89:e8:09:83:81:95:2e:a5:72:f6:b7:03:26:f7: 57:21:f5:99:0c:f3:2f:9f:3e:c7:df:ea:71:21:f6:7f:70:6c: 4d:79:69:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noDAmWuNnYUnUKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzRlMDBmY2UtYjdjYi00NjBkLTk4NjgtYjAyZjZlNTA5MWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibtU1f8V5xQ04YSlRnkvuwG1Hjv+q6I+r4GI MCc+QmoFBzo75uV+uDdz5a5/g6s4DyzHgsOoovFkIgXNzoG329NhqsaPq9QiO+CQ HtWlVfb0fmSrc8ZMDSt16LGrojY7i68KS2vN36XDzcAHRqUK/tMNv3qZzLu+7cwj 8SfXsCiBsJ3dtLsijvoeoSsYFCJchEw+OyVApbfSpWhSRJqkk8N2faRTiVsSveIW hQY6YsowkQasE791IikkVyCgSl96dT2HZ5KhIowPYcQHJo1jacr/hFfQKB5OF5d6 y/YrJ+wR52Cfl10B5QqfeKjmbG6oAImPUJFZty1dijodIjo0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAFWN6X6Awv1x26EFao490rPblyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDUyMDg1YjgtZGRmZS0z MzE2LWFjMmUtZjcyOWQ2ZTNmMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWASkPFGeItX3Oo2P8tZzYpqrZDmV9XNjsmSwSzcuahZxRPTtYu6OKs xaffXJR4jsg9scWJM94I5xHgx2vTyCcoi5Zw2ac8Wg7lE3Qh4jw6YUqRj02ZUt9y nrepwkJ/FImInorFF07EWQ8virppnms8fP5P6Sp6w9LAVGA2cIaASJ1MmUWgOy1G n2eKQKt0MJ/Se3gS9261SYd0Qco9/ioJpCJqJtSyQ/s2QEKhixiMIy+tnkwuCR3t Kr0K+t/5a8zbsORatc5kuRzg9AV9TldXRCfNRBpL7a/EbWGJ6AmDgZUupXL2twMm 91ch9ZkM8y+fPsff6nEh9n9wbE15aZE= -----END CERTIFICATE-----Generated at Wed Jul 29 06:07:08 2026 by rpki-client