$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa File: 71ae16c5-d31e-3798-a172-6d1d107c2749.roa (raw, json) Hash identifier: ddU6ZsuK48EQbgn3wpQ+bF8OY/G7vLZfgF7i8C+X0QQ= Subject key identifier: CC:8D:15:A5:61:0A:C6:39:61:61:C9:55:62:3D:A2:23:29:81:CD:26 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79ED59246375E6258D19404 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.217.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:d5:92:46:37:5e:62:58:d1:94:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d7d1a394-dba2-43be-adce-7c5ee1429592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f2:84:e2:76:d4:fb:24:fb:fd:3d:6f:cd:c3: 11:b9:74:17:6e:f4:18:80:a7:fa:d7:a1:de:3f:7d: 46:e4:21:f7:18:57:34:2d:95:94:f8:35:e4:e2:3a: f1:d9:b8:83:e4:82:85:71:df:90:b4:9b:e6:34:55: 1c:69:fc:78:97:08:33:ec:b8:0e:85:84:52:36:f8: 62:b4:5e:76:20:27:60:7a:18:0f:21:fe:d5:d1:a7: 12:e2:bd:32:41:b8:0b:3f:bd:a0:61:35:4d:1c:c4: 52:f0:ac:cd:f9:8c:42:54:6d:13:c8:55:50:4d:18: a6:c4:36:5c:23:c9:2a:1e:05:02:02:4e:de:3e:75: 2c:a7:13:52:75:15:4e:79:46:68:8d:4e:22:cd:d1: e9:34:d6:fd:6c:a4:e6:68:80:d6:b1:6f:17:5c:20: 95:b6:23:6c:c5:2d:99:d8:a9:c8:ad:d4:04:8e:30: fa:23:81:d5:57:18:e6:cf:09:89:54:64:df:e3:19: 55:5a:ed:84:24:02:80:e4:89:5e:28:b7:a0:d0:f0: f7:8f:fc:ae:05:b3:8a:d9:c2:88:b2:81:f6:de:79: 33:7a:a0:09:3f:1c:7b:21:98:e1:4e:28:65:4c:ba: 28:0a:09:5a:16:ec:6f:b5:33:10:c9:26:b2:24:ed: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8D:15:A5:61:0A:C6:39:61:61:C9:55:62:3D:A2:23:29:81:CD:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:43:f8:ca:ca:cd:dc:19:02:0f:7b:c4:06:bb:09:1b:cf:b6: 91:3e:db:73:f3:cd:ab:3f:19:c2:99:24:26:69:de:8e:bf:24: 7e:d6:33:6d:55:c7:4f:77:21:4f:9a:5c:df:13:64:8a:bf:a2: 13:f0:9b:0f:1c:52:ef:66:1c:5e:41:cc:fa:56:6f:75:73:a2: 09:cb:89:36:80:ed:af:56:aa:02:15:94:2e:4a:14:dc:9e:28: 2c:c2:db:ae:59:4f:26:ea:67:6a:74:09:0e:6a:e5:c4:83:d6: 8f:f6:04:e5:0f:7d:5e:6a:cc:cc:54:7e:4c:a9:32:8e:dc:07: d6:71:a4:0f:a9:03:9d:c3:ec:10:67:d6:e3:d9:62:47:eb:8b: 3a:ad:f9:a5:ca:26:63:91:49:9f:4d:65:5f:81:0a:47:84:cf: db:48:fa:dc:93:56:45:2d:95:b3:70:c7:94:c1:87:b5:0d:18: e0:1d:53:84:9f:61:73:3c:ef:e9:d2:77:8a:ec:46:ca:b2:49: 5c:37:1a:0d:00:4b:92:21:13:38:0f:34:00:f1:15:f1:a8:f2: 6d:5c:2a:f7:a0:f2:08:6e:79:71:4b:c0:f1:0d:6f:a7:5d:61: 06:40:36:b8:4b:88:a3:c1:80:32:c7:a6:b9:8c:e4:c9:32:bd: 98:8f:d6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nntWSRjdeYljRlAQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDdkMWEzOTQtZGJhMi00M2JlLWFkY2UtN2M1ZWUxNDI5NTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPKE4nbU+yT7/T1vzcMRuXQXbvQYgKf616He P31G5CH3GFc0LZWU+DXk4jrx2biD5IKFcd+QtJvmNFUcafx4lwgz7LgOhYRSNvhi tF52ICdgehgPIf7V0acS4r0yQbgLP72gYTVNHMRS8KzN+YxCVG0TyFVQTRimxDZc I8kqHgUCAk7ePnUspxNSdRVOeUZojU4izdHpNNb9bKTmaIDWsW8XXCCVtiNsxS2Z 2KnIrdQEjjD6I4HVVxjmzwmJVGTf4xlVWu2EJAKA5IleKLeg0PD3j/yuBbOK2cKI soH23nkzeqAJPxx7IZjhTihlTLooCglaFuxvtTMQySayJO3alwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyNFaVhCsY5YWHJVWI9oiMpgc0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzFhZTE2YzUtZDMxZS0z Nzk4LWExNzItNmQxZDEwN2MyNzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZD+MrKzdwZAg97xAa7CRvPtpE+23Pzzas/GcKZJCZp3o6/JH7WM21V x093IU+aXN8TZIq/ohPwmw8cUu9mHF5BzPpWb3VzognLiTaA7a9WqgIVlC5KFNye KCzC265ZTybqZ2p0CQ5q5cSD1o/2BOUPfV5qzMxUfkypMo7cB9ZxpA+pA53D7BBn 1uPZYkfrizqt+aXKJmORSZ9NZV+BCkeEz9tI+tyTVkUtlbNwx5TBh7UNGOAdU4Sf YXM87+nSd4rsRsqySVw3Gg0AS5IhEzgPNADxFfGo8m1cKveg8ghueXFLwPENb6dd YQZANrhLiKPBgDLHprmM5MkyvZiP1rs= -----END CERTIFICATE-----Generated at Wed Jul 29 06:06:52 2026 by rpki-client