$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa File: 739bd5a1-d6b5-3e48-8130-252f11afed97.roa (raw, json) Hash identifier: t+i5K6khmhLlSb+8HywB1S/DR4YLuNlIAOwDxVTRtv0= Subject key identifier: DF:0F:0D:CD:8A:95:AF:55:01:8C:4E:10:7A:7F:D8:87:9F:30:5A:9F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC64F46EA5D17E79E8970 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c6:4f:46:ea:5d:17:e7:9e:89:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=4f248ce2-f3dc-444b-8cbe-db686b36c690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:9e:9b:4e:49:c5:9b:0d:41:aa:aa:0e:c4: ac:ca:fb:f9:99:06:fa:48:55:8a:96:3c:aa:4a:d2: 69:92:25:dc:a7:4d:fd:0a:d5:48:bb:ce:1b:2f:04: 58:d2:07:24:f1:d8:a3:26:2b:9a:07:9f:14:21:eb: bf:5e:e9:b5:f0:a9:7d:15:ff:51:27:4c:f4:70:a5: b9:e4:4b:dd:06:e5:ea:80:ea:f4:65:dd:6f:79:02: 3f:60:0a:78:f8:d8:52:5f:d0:d8:2c:4b:5a:4b:69: 45:2d:3e:00:85:9e:7e:90:7e:6f:0e:9b:a1:20:0b: 13:6f:a4:06:8a:18:be:ed:26:fe:50:40:11:5a:90: 7c:aa:b8:53:e7:55:d0:c7:2b:63:17:88:e9:df:c4: 6f:3f:c9:5b:b1:bf:e0:93:39:7e:a4:cd:a5:5f:fe: 42:e9:dc:54:a4:37:50:69:d0:07:70:d5:2b:78:c8: dd:74:03:0a:9d:90:07:d8:89:0a:3d:e9:7c:54:3d: a5:d3:ef:ec:44:45:52:f6:fc:84:2f:58:05:e5:98: 04:25:e0:28:31:bc:4f:1c:82:fc:50:57:ff:91:13: ad:a4:53:88:cb:52:89:f2:d6:22:93:26:ae:91:88: a6:ab:26:16:ee:3d:5f:e5:9f:60:04:6c:62:f6:b3: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0F:0D:CD:8A:95:AF:55:01:8C:4E:10:7A:7F:D8:87:9F:30:5A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:3a:3a:b0:92:2d:e8:4b:1f:cc:80:4a:93:81:21:f7:84:78: bd:78:90:96:16:2f:51:0a:13:d3:85:52:e8:90:bb:b6:c3:89: d0:a7:97:6f:e0:a6:b0:05:09:e0:62:3d:f4:44:1d:2f:66:7f: 43:cf:55:4e:c1:d9:58:78:7f:b8:30:55:e6:1d:d4:fb:b7:37: 00:bb:6c:a4:47:ea:fc:62:9e:a4:6a:eb:73:e8:fc:e4:5d:df: 10:3b:f7:ab:6b:fb:98:31:78:7a:14:16:6c:8d:25:f4:24:21: 2d:e8:df:59:b2:01:95:3a:df:dd:62:55:ac:b3:28:81:9a:4e: c0:a8:64:6e:02:2c:46:af:7e:f8:77:4e:ef:ee:ee:22:ca:aa: 6d:4a:2a:09:ac:a9:00:b1:8a:c0:a9:c0:d0:e4:b5:43:a8:e8: 9e:33:96:81:d9:44:0f:36:71:b5:5a:8f:9c:6a:fc:69:be:7c: fb:61:8f:82:84:25:67:58:6a:0f:3b:30:e4:f7:af:79:55:ba: d8:9e:e0:e4:54:92:29:4e:0a:ef:38:5a:d2:c1:1e:fe:48:19: a9:c7:7e:f7:85:a9:18:6b:04:4c:c7:05:e1:e6:8f:97:46:91: 8d:a4:b7:a0:97:1e:11:dd:eb:c0:01:13:66:70:25:e4:5d:df: 4b:50:f8:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8ZPRupdF+eeiXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NGYyNDhjZTItZjNkYy00NDRiLThjYmUtZGI2ODZiMzZjNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom6em05JxZsNQaqqDsSsyvv5mQb6SFWKljyq StJpkiXcp039CtVIu84bLwRY0gck8dijJiuaB58UIeu/Xum18Kl9Ff9RJ0z0cKW5 5EvdBuXqgOr0Zd1veQI/YAp4+NhSX9DYLEtaS2lFLT4AhZ5+kH5vDpuhIAsTb6QG ihi+7Sb+UEARWpB8qrhT51XQxytjF4jp38RvP8lbsb/gkzl+pM2lX/5C6dxUpDdQ adAHcNUreMjddAMKnZAH2IkKPel8VD2l0+/sREVS9vyEL1gF5ZgEJeAoMbxPHIL8 UFf/kROtpFOIy1KJ8tYikyaukYimqyYW7j1f5Z9gBGxi9rNwhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8PDc2Kla9VAYxOEHp/2IefMFqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzM5YmQ1YTEtZDZiNS0z ZTQ4LTgxMzAtMjUyZjExYWZlZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk6OrCSLehLH8yASpOBIfeEeL14kJYWL1EKE9OFUuiQu7bDidCnl2/g prAFCeBiPfREHS9mf0PPVU7B2Vh4f7gwVeYd1Pu3NwC7bKRH6vxinqRq63Po/ORd 3xA796tr+5gxeHoUFmyNJfQkIS3o31myAZU6391iVayzKIGaTsCoZG4CLEavfvh3 Tu/u7iLKqm1KKgmsqQCxisCpwNDktUOo6J4zloHZRA82cbVaj5xq/Gm+fPthj4KE JWdYag87MOT3r3lVutie4ORUkilOCu84WtLBHv5IGanHfveFqRhrBEzHBeHmj5dG kY2kt6CXHhHd68ABE2ZwJeRd30tQ+Bo= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:24 2026 by rpki-client