$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa File: 839e5923-d592-30e5-ba37-9fbbbf065f7a.roa (raw, json) Hash identifier: r6YjSDxP8/P7H0sIuVCqtstG3riMZXD+vNGJZcOU8aw= Subject key identifier: DC:07:BC:18:02:44:77:76:A7:40:0B:16:F6:50:23:FA:84:A2:C7:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79E85B57D32573AAB388380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.217.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:85:b5:7d:32:57:3a:ab:38:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c219816d-4158-4fa2-ac1e-4ea276198a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:83:74:29:7e:b1:68:e3:0b:a6:6e:07:44:41: b3:c2:8a:2f:c1:35:fc:0a:7f:9f:05:60:22:92:52: 42:2b:04:08:08:a7:79:5f:5b:21:d3:86:76:7b:8b: b6:98:5b:b8:d3:4c:69:66:68:f7:90:aa:53:37:36: 3b:90:ed:5f:5f:6f:1f:90:34:56:8b:67:2e:f8:66: 91:a8:6c:e3:ec:0d:38:82:1a:89:6f:1a:87:8a:66: 5c:6a:66:35:18:95:aa:c5:b1:48:10:42:3f:86:94: 3b:41:59:0c:22:16:7f:98:25:1d:54:aa:ea:d2:a2: 62:5e:1f:bb:d8:24:23:46:43:28:3c:55:5a:76:ec: a0:ce:57:15:ef:e4:79:1f:1c:66:46:db:82:f2:be: 00:1b:c1:d8:68:7b:21:5a:c9:9d:6e:f7:a0:63:00: 93:c3:37:02:a9:51:74:6f:8e:df:04:ce:da:d9:3e: 9d:c6:69:53:22:e7:4a:54:a0:38:c5:83:b2:3e:76: db:30:97:1d:ed:b7:52:8f:40:f7:12:a1:a1:a3:85: 8a:12:e2:b9:87:f3:4e:d4:f8:37:30:64:8e:8e:c1: 00:7e:be:e1:c9:b5:6b:a0:77:dc:38:f0:35:56:ca: 84:70:13:1b:6b:a7:d5:a2:6e:19:d2:87:86:af:a2: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:07:BC:18:02:44:77:76:A7:40:0B:16:F6:50:23:FA:84:A2:C7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8b:7d:6a:f4:ce:cc:96:bf:6e:29:04:56:c8:7e:a3:4a:70: c7:fe:41:c0:31:49:f8:ae:8a:51:3c:82:a8:f0:29:c5:8f:9f: fe:34:13:22:8c:5a:93:0e:a2:10:71:09:4c:c6:1c:00:59:0f: 39:46:ce:49:93:c0:24:7b:e7:bb:3d:04:29:4d:c0:7a:95:61: 2f:48:c8:2d:09:d8:87:63:f6:42:1e:9d:a8:62:0a:1b:13:a0: 91:18:70:58:2b:4e:9f:4b:97:d0:e7:5a:15:e3:50:9a:a1:2e: 25:b3:17:74:b3:ef:3d:b3:75:46:0d:88:2a:75:f9:58:44:05: f1:b2:30:13:d3:4f:82:de:95:15:b9:24:fa:68:9e:58:fa:11: 7b:7e:6c:03:95:ee:c2:e0:0e:eb:5f:27:ba:3c:59:1f:b5:7f: 7c:62:fa:ad:7e:35:19:e7:8c:da:4c:62:d4:80:a8:ae:f1:81: 09:8c:01:99:fc:6c:a6:f2:17:56:80:9b:1e:fa:c2:ef:df:86: 5f:01:c2:9b:cf:9e:94:5c:c5:7e:6d:b6:22:5c:6c:59:91:9f: 08:32:59:fd:67:34:2f:18:8b:16:f5:fc:19:c4:4b:74:87:75: 51:77:23:d5:6e:74:71:1d:32:f9:45:00:f4:71:e9:ba:8a:7f: 48:4c:8f:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnoW1fTJXOqs4g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzIxOTgxNmQtNDE1OC00ZmEyLWFjMWUtNGVhMjc2MTk4YTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4N0KX6xaOMLpm4HREGzwoovwTX8Cn+fBWAi klJCKwQICKd5X1sh04Z2e4u2mFu400xpZmj3kKpTNzY7kO1fX28fkDRWi2cu+GaR qGzj7A04ghqJbxqHimZcamY1GJWqxbFIEEI/hpQ7QVkMIhZ/mCUdVKrq0qJiXh+7 2CQjRkMoPFVaduygzlcV7+R5HxxmRtuC8r4AG8HYaHshWsmdbvegYwCTwzcCqVF0 b47fBM7a2T6dxmlTIudKVKA4xYOyPnbbMJcd7bdSj0D3EqGho4WKEuK5h/NO1Pg3 MGSOjsEAfr7hybVroHfcOPA1VsqEcBMba6fVom4Z0oeGr6IFpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwHvBgCRHd2p0ALFvZQI/qEoscTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODM5ZTU5MjMtZDU5Mi0z MGU1LWJhMzctOWZiYmJmMDY1ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASLfWr0zsyWv24pBFbIfqNKcMf+QcAxSfiuilE8gqjwKcWPn/40EyKM WpMOohBxCUzGHABZDzlGzkmTwCR757s9BClNwHqVYS9IyC0J2Idj9kIenahiChsT oJEYcFgrTp9Ll9DnWhXjUJqhLiWzF3Sz7z2zdUYNiCp1+VhEBfGyMBPTT4LelRW5 JPponlj6EXt+bAOV7sLgDutfJ7o8WR+1f3xi+q1+NRnnjNpMYtSAqK7xgQmMAZn8 bKbyF1aAmx76wu/fhl8BwpvPnpRcxX5ttiJcbFmRnwgyWf1nNC8Yixb1/BnES3SH dVF3I9VudHEdMvlFAPRx6bqKf0hMjxg= -----END CERTIFICATE-----Generated at Wed Jul 29 05:04:15 2026 by rpki-client