$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a2bdc4-401d-3385-a004-a6db5099550f.roa File: 56a2bdc4-401d-3385-a004-a6db5099550f.roa (raw, json) Hash identifier: un+bCbpEgAW3HaP0KhZFLx7q3vZGnXXS23aOS2+WyLo= Subject key identifier: 83:A2:E6:7D:70:C1:1B:45:CA:D4:11:F3:BD:61:5E:B8:A5:E5:82:2E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C44C8D1A70B2C29C77480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a2bdc4-401d-3385-a004-a6db5099550f.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:44:c8:d1:a7:0b:2c:29:c7:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=b35fa4b4-33ea-48b1-8e3c-09363f9fc6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:22:09:dd:c2:ac:0d:08:f1:40:0c:05:05:a5: b0:03:73:71:02:07:ad:71:cf:ad:bf:81:ad:c9:2a: 12:ef:8b:4d:e6:cd:69:37:62:18:db:9c:2f:28:af: 41:73:68:2b:e4:3b:1a:37:45:e6:3f:f3:4d:86:68: 82:40:a3:a1:4e:c6:60:02:53:e1:1b:3d:cf:45:0a: 9a:2a:03:f9:1c:44:45:1f:ff:0d:5e:f1:17:61:09: e0:20:5b:9f:2a:3d:63:9e:1d:8c:d1:49:cd:56:fa: f6:a7:fd:b6:e0:0e:82:6d:e1:ff:66:b6:28:16:87: e2:35:27:1b:61:1f:9d:dc:68:8c:93:22:ff:0b:09: 58:66:89:89:4e:a5:1c:91:19:23:36:f4:c6:3c:62: e4:d9:f6:8a:2a:1a:84:ca:a4:3e:42:92:0d:b8:02: 8b:51:11:e6:c6:2b:d9:70:57:47:08:5a:76:61:ee: 8c:2d:1e:4a:16:e1:ae:5a:bb:41:27:cd:f5:38:e2: e8:f1:a9:2b:db:33:8b:11:c9:b6:d0:0b:4f:8e:4f: 77:7a:3c:81:e8:71:30:62:94:72:14:a8:1c:3d:ce: ae:2e:bf:67:e6:17:71:b9:1e:44:55:33:02:b9:91: 93:20:5a:89:aa:de:d6:e0:fa:8a:60:ae:cc:b5:ed: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A2:E6:7D:70:C1:1B:45:CA:D4:11:F3:BD:61:5E:B8:A5:E5:82:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a2bdc4-401d-3385-a004-a6db5099550f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d4:29:0e:af:4e:42:61:ea:06:96:6a:4e:e8:9e:d1:d4:b7: ae:9c:ca:79:2e:3f:8f:86:a5:93:6a:de:5c:71:14:61:d3:b2: 2f:f6:f1:66:45:d8:9f:00:c4:cc:2a:d5:c4:37:26:dc:88:aa: 2a:94:bb:66:bf:77:e7:3d:79:d0:e0:84:6f:16:ba:e5:11:54: 2f:a0:19:ef:8b:a5:46:ea:a4:1a:c6:83:f5:c0:be:11:ad:d8: 1d:5f:12:86:b4:91:e9:39:97:79:13:eb:22:42:06:38:81:30: f1:d1:80:bd:ec:c3:33:57:f0:27:16:23:c9:2f:43:5c:98:53: a0:5a:dd:1c:54:a8:38:3b:aa:e2:0b:b8:6b:85:36:46:75:f9: 24:9b:d7:67:79:28:e7:95:46:95:67:21:55:a5:9f:9f:5f:69: 55:7e:f8:f4:93:c9:91:40:af:a9:0a:3f:d6:ed:a4:04:cf:97: 33:70:0e:92:73:e6:94:d6:ca:eb:a5:a9:b1:44:dc:3d:07:63: a2:a0:9f:f6:bb:3f:b0:08:c6:0f:7d:33:75:30:12:29:fb:38: 4c:60:c1:76:95:c7:ee:92:4e:0d:32:31:de:b0:40:fd:e1:6f: 95:fe:a9:33:91:82:13:ce:88:08:dd:0e:b6:51:8e:3b:90:4f: 34:78:0e:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnETI0acLLCnHdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YjM1ZmE0YjQtMzNlYS00OGIxLThlM2MtMDkzNjNmOWZjNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCIJ3cKsDQjxQAwFBaWwA3NxAgetcc+tv4Gt ySoS74tN5s1pN2IY25wvKK9Bc2gr5DsaN0XmP/NNhmiCQKOhTsZgAlPhGz3PRQqa KgP5HERFH/8NXvEXYQngIFufKj1jnh2M0UnNVvr2p/224A6CbeH/ZrYoFofiNScb YR+d3GiMkyL/CwlYZomJTqUckRkjNvTGPGLk2faKKhqEyqQ+QpINuAKLURHmxivZ cFdHCFp2Ye6MLR5KFuGuWrtBJ831OOLo8akr2zOLEcm20AtPjk93ejyB6HEwYpRy FKgcPc6uLr9n5hdxuR5EVTMCuZGTIFqJqt7W4PqKYK7Mte2gVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOi5n1wwRtFytQR871hXril5YIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTZhMmJkYzQtNDAxZC0z Mzg1LWEwMDQtYTZkYjUwOTk1NTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjUKQ6vTkJh6gaWak7ontHUt66cynkuP4+GpZNq3lxxFGHTsi/28WZF 2J8AxMwq1cQ3JtyIqiqUu2a/d+c9edDghG8WuuURVC+gGe+LpUbqpBrGg/XAvhGt 2B1fEoa0kek5l3kT6yJCBjiBMPHRgL3swzNX8CcWI8kvQ1yYU6Ba3RxUqDg7quIL uGuFNkZ1+SSb12d5KOeVRpVnIVWln59faVV++PSTyZFAr6kKP9btpATPlzNwDpJz 5pTWyuulqbFE3D0HY6Kgn/a7P7AIxg99M3UwEin7OExgwXaVx+6STg0yMd6wQP3h b5X+qTORghPOiAjdDrZRjjuQTzR4Ds0= -----END CERTIFICATE-----Generated at Sat Jun 13 13:30:26 2026 by rpki-client