$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa File: 7c4bfe71-a264-378d-8208-efb0eb90221e.roa (raw, json) Hash identifier: pWqx+QAVHW/ICvOcsmTM7P8FQFxmGBwk4aztvMY5k0Q= Subject key identifier: D8:5E:8B:C5:17:AE:FB:8E:4F:03:9A:28:BA:36:14:A8:4D:10:00:38 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A0573BE953C4897427A0C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.217.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:57:3b:e9:53:c4:89:74:27:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1492fe26-0d57-4c87-b330-fefb3a4b46ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:04:e9:00:4a:89:32:e6:8b:9d:94:b4:7d:a8: 85:e2:a5:2e:bc:c8:f8:93:30:1e:09:0a:34:bf:02: 37:bf:6b:d8:d7:23:df:45:10:a7:ba:04:1e:7f:ec: a0:85:e7:3f:fc:44:7d:a1:f4:44:f7:11:7b:4a:4b: 8a:b3:12:3d:bd:b4:a2:25:1e:67:23:9d:57:f6:69: af:b4:25:2f:87:76:6f:01:ae:43:7d:aa:f5:e7:1f: 17:db:be:18:3f:85:a5:25:c2:01:67:5f:b1:40:98: 1b:eb:f9:1b:4e:50:fe:99:2e:b4:8c:55:8b:e3:86: f1:6b:ef:83:11:0c:6a:8d:49:fe:a4:48:aa:ae:8a: 74:19:fe:46:f4:1d:f5:1b:c6:48:70:64:81:11:47: 62:70:83:a4:c4:89:e8:b1:c4:cd:06:de:36:be:7d: 72:f8:7a:3c:4d:0b:bd:7d:43:2b:9c:d4:3f:7f:b5: 72:84:f1:b6:b7:39:dd:77:0f:1e:67:f4:e8:c9:3d: 7d:82:86:e5:e7:ae:17:5d:68:9e:ab:60:79:90:6e: 65:4b:fe:0c:ee:86:b8:cb:1d:4a:66:d6:51:0e:af: a2:2b:6c:d6:54:a4:0a:aa:bd:d3:ed:10:2f:0a:95: 11:64:0f:68:00:47:3e:a9:4c:c7:9b:45:0c:7a:18: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5E:8B:C5:17:AE:FB:8E:4F:03:9A:28:BA:36:14:A8:4D:10:00:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c7:bf:79:b2:fd:1f:7c:13:c1:9e:59:9a:44:4c:d7:e3:e6: f3:76:e5:82:dd:34:99:f6:fd:ba:85:df:84:7d:57:d6:63:c7: c7:e1:8a:80:f4:7c:d7:86:fe:e7:26:eb:68:4d:5a:44:37:7a: e6:d1:90:12:9a:12:ee:98:9d:dd:8a:d1:d6:c2:07:0d:43:0e: d8:3e:6b:b7:04:2e:2e:87:04:c6:73:e7:32:2a:9b:5d:e7:41: 98:c1:35:3a:56:f4:2a:ff:0b:6f:28:d6:29:e0:f1:6e:99:eb: e6:6e:24:96:d7:d6:87:69:4a:22:68:6e:80:e7:9d:2b:80:1b: b2:32:4a:ed:a5:e7:c2:28:01:ce:3c:93:f7:30:79:b6:18:bf: 29:1e:5c:06:da:07:5f:64:ad:8f:cd:6f:b6:08:07:89:bf:38: ee:28:45:39:a4:57:ef:1e:d9:07:a9:3c:0c:52:ba:17:68:8c: 51:37:e0:15:80:58:55:ca:80:92:da:55:77:e7:1f:58:02:23: a4:cd:7f:60:e2:0e:75:a6:9a:cd:e5:8f:27:24:b9:69:3c:a2: 09:de:74:e0:a6:c0:93:3a:92:e9:2c:53:20:da:38:ff:6a:86: 73:71:86:9f:77:b4:e0:b4:73:dc:ae:1f:11:14:b5:31:af:c7: ed:f7:db:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noFc76VPEiXQnoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTQ5MmZlMjYtMGQ1Ny00Yzg3LWIzMzAtZmVmYjNhNGI0NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQTpAEqJMuaLnZS0faiF4qUuvMj4kzAeCQo0 vwI3v2vY1yPfRRCnugQef+yghec//ER9ofRE9xF7SkuKsxI9vbSiJR5nI51X9mmv tCUvh3ZvAa5Dfar15x8X274YP4WlJcIBZ1+xQJgb6/kbTlD+mS60jFWL44bxa++D EQxqjUn+pEiqrop0Gf5G9B31G8ZIcGSBEUdicIOkxInoscTNBt42vn1y+Ho8TQu9 fUMrnNQ/f7VyhPG2tznddw8eZ/ToyT19gobl564XXWieq2B5kG5lS/4M7oa4yx1K ZtZRDq+iK2zWVKQKqr3T7RAvCpURZA9oAEc+qUzHm0UMehgICwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhei8UXrvuOTwOaKLo2FKhNEAA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2M0YmZlNzEtYTI2NC0z NzhkLTgyMDgtZWZiMGViOTAyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDHv3my/R98E8GeWZpETNfj5vN25YLdNJn2/bqF34R9V9Zjx8fhioD0 fNeG/ucm62hNWkQ3eubRkBKaEu6Ynd2K0dbCBw1DDtg+a7cELi6HBMZz5zIqm13n QZjBNTpW9Cr/C28o1ing8W6Z6+ZuJJbX1odpSiJoboDnnSuAG7IySu2l58IoAc48 k/cwebYYvykeXAbaB19krY/Nb7YIB4m/OO4oRTmkV+8e2QepPAxSuhdojFE34BWA WFXKgJLaVXfnH1gCI6TNf2DiDnWmms3ljyckuWk8ognedOCmwJM6kuksUyDaOP9q hnNxhp93tOC0c9yuHxEUtTGvx+332yI= -----END CERTIFICATE-----Generated at Wed Jul 29 04:09:11 2026 by rpki-client