$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa File: 640ab488-921d-3ed3-a072-3005686e58b7.roa (raw, json) Hash identifier: OBIYWZ1nNqcOmflTjJaif5PC+CITizcDPc0zQVvFQ6g= Subject key identifier: 5D:12:2C:92:DD:F3:9E:96:8E:DF:46:87:4A:9A:B4:6B:7B:3E:FF:41 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC9286E3A9FFE1BD41900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c9:28:6e:3a:9f:fe:1b:d4:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=7c46d730-16cc-4869-84c4-0c76f4eaaf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:37:2d:25:c3:36:77:fd:6e:33:a7:69:ba:aa: 12:0f:ae:27:c7:e3:55:d8:69:48:31:98:a4:ea:1f: 88:61:5a:2a:c7:3b:fc:f5:d9:e7:49:9c:4c:b7:75: be:cf:83:c5:40:c6:28:28:b4:b6:05:39:d7:71:cb: 13:71:2c:4a:f8:72:1b:91:9f:aa:78:33:92:93:2c: ea:46:c5:70:da:83:bf:89:f6:c1:90:e7:12:bb:fa: 92:2a:45:b5:9d:ed:79:e9:7b:a6:4b:91:52:4d:0e: e1:d0:65:20:54:2f:5f:b0:26:3d:d4:12:7f:77:46: d3:b9:a8:12:5f:16:cf:93:0a:14:9d:37:92:ce:68: 22:69:ce:70:9f:0f:06:59:cc:4d:2d:dc:81:57:a4: 69:6b:2c:ae:7e:a0:91:a7:82:dd:25:18:46:21:89: 0f:ad:ba:1b:e9:ae:3e:1d:5a:ce:fc:93:52:83:26: 6f:cc:36:7a:e6:4f:bd:a3:10:34:5c:be:b4:dc:9a: 70:d8:47:db:f3:85:76:62:48:d2:a4:7e:52:da:ec: 13:55:53:10:fa:01:1e:85:52:2d:20:04:2b:4b:4c: 74:85:40:df:52:86:29:b1:87:4d:88:d6:a1:d6:60: 0b:6a:64:ba:ea:01:bc:f0:52:5e:f1:c3:8e:e4:a1: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:12:2C:92:DD:F3:9E:96:8E:DF:46:87:4A:9A:B4:6B:7B:3E:FF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:0f:2a:38:52:3a:b3:9a:a7:4e:b2:20:43:2a:07:f7:64:fa: 08:be:b3:54:78:6c:34:cc:9c:70:4e:34:76:da:ec:e6:98:bc: 68:3e:c1:c6:e5:9d:63:98:f9:99:f7:d2:be:1e:7f:02:a2:9b: eb:e8:d1:fd:0a:ad:96:1f:32:34:c9:d1:fb:2f:e0:19:66:23: 0f:cb:ac:c2:2a:54:cb:b3:c3:49:e3:f9:90:23:ef:e0:4c:7a: 09:80:f8:01:94:cb:28:9b:5d:71:53:71:67:3a:cd:a9:88:b6: 75:c0:fa:e8:1c:e1:93:dc:6f:37:b6:ab:bf:f7:57:e2:de:4a: 15:db:2d:a1:c0:55:99:d7:64:54:b3:68:5e:eb:96:76:61:b2: 25:b3:09:63:ea:d3:30:92:8e:a8:5d:7e:1c:f1:8b:07:80:29: 00:c6:c6:6b:a0:5d:99:cf:01:1d:00:3e:d4:0e:54:09:10:eb: 11:7b:e0:3f:d7:7d:b3:cb:66:02:6a:44:0e:a3:ce:42:cc:5d: 26:03:80:22:5f:d2:87:0c:a8:d3:63:25:58:c6:3c:36:75:e6: 98:0b:58:1a:79:25:5b:3b:81:f0:6a:b7:b5:00:60:15:da:ec: c9:0f:56:ec:e8:3a:30:2a:27:24:68:c9:eb:a3:1d:29:50:ea: 0a:25:da:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8kobjqf/hvUGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk N2M0NmQ3MzAtMTZjYy00ODY5LTg0YzQtMGM3NmY0ZWFhZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDctJcM2d/1uM6dpuqoSD64nx+NV2GlIMZik 6h+IYVoqxzv89dnnSZxMt3W+z4PFQMYoKLS2BTnXccsTcSxK+HIbkZ+qeDOSkyzq RsVw2oO/ifbBkOcSu/qSKkW1ne156XumS5FSTQ7h0GUgVC9fsCY91BJ/d0bTuagS XxbPkwoUnTeSzmgiac5wnw8GWcxNLdyBV6RpayyufqCRp4LdJRhGIYkPrbob6a4+ HVrO/JNSgyZvzDZ65k+9oxA0XL603Jpw2Efb84V2YkjSpH5S2uwTVVMQ+gEehVIt IAQrS0x0hUDfUoYpsYdNiNah1mALamS66gG88FJe8cOO5KEUsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0SLJLd856Wjt9Gh0qatGt7Pv9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQwYWI0ODgtOTIxZC0z ZWQzLWEwNzItMzAwNTY4NmU1OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIPKjhSOrOap06yIEMqB/dk+gi+s1R4bDTMnHBONHba7OaYvGg+wcbl nWOY+Zn30r4efwKim+vo0f0KrZYfMjTJ0fsv4BlmIw/LrMIqVMuzw0nj+ZAj7+BM egmA+AGUyyibXXFTcWc6zamItnXA+ugc4ZPcbze2q7/3V+LeShXbLaHAVZnXZFSz aF7rlnZhsiWzCWPq0zCSjqhdfhzxiweAKQDGxmugXZnPAR0APtQOVAkQ6xF74D/X fbPLZgJqRA6jzkLMXSYDgCJf0ocMqNNjJVjGPDZ15pgLWBp5JVs7gfBqt7UAYBXa 7MkPVuzoOjAqJyRoyeujHSlQ6gol2h8= -----END CERTIFICATE-----Generated at Sat Jun 13 13:47:57 2026 by rpki-client