$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa File: 86147445-4d27-3a02-b65f-dcb48ef32850.roa (raw, json) Hash identifier: xeANZ7UzLQuhBHoAV18qElPttKjdIQD279apd5gMkic= Subject key identifier: F4:0A:35:E1:93:F8:C8:57:70:96:F2:13:53:0C:79:20:EE:34:F0:5A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BBEAA4A6D4BD2E174C400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:be:aa:4a:6d:4b:d2:e1:74:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d478da2c-6a21-44d7-a040-42de12b99165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:50:a2:43:a8:77:9b:9e:4e:a9:84:c6:cf:26: ff:90:5e:7a:39:64:b5:7a:05:4f:b3:3c:b7:06:fd: e6:87:b2:79:b8:fd:61:a1:2a:b6:c8:39:dd:a1:20: 3b:b0:b1:95:ab:ec:8e:d4:78:26:77:30:d6:6f:20: f1:ab:34:d6:a2:dc:aa:38:44:c5:80:e4:6d:a1:69: de:f0:cf:7c:05:51:c1:ea:36:5d:63:f0:d9:b8:5c: 69:1e:e3:4f:9d:ca:f6:cd:95:a5:23:e7:68:ac:db: 3e:2c:94:2d:5d:aa:ef:67:d1:aa:e8:5f:d1:fd:5b: b9:fa:f2:61:ba:5e:88:d3:f5:b0:f2:f5:69:a9:e2: ac:74:0d:df:08:b0:b6:55:f1:4c:89:bd:67:3d:bb: bd:fd:9d:40:e7:5a:12:65:f6:9d:98:e9:3f:b9:2f: c5:4c:80:97:a3:15:10:ea:80:76:33:22:a4:f7:09: e3:0a:d9:a3:ad:ff:35:8f:51:ee:d8:6d:2b:f7:f7: 37:0c:3c:ae:3c:e1:40:e5:1a:2d:27:94:eb:18:37: 9e:82:65:d4:ef:5c:f1:37:32:90:a3:21:05:02:7a: 84:6f:a8:1d:7b:25:cb:10:32:da:ef:f1:ff:c4:b5: a7:f3:5d:44:27:5e:31:54:be:68:50:ae:3a:f0:62: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0A:35:E1:93:F8:C8:57:70:96:F2:13:53:0C:79:20:EE:34:F0:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:14:62:6f:76:21:1c:66:dc:5b:67:25:da:eb:b4:46:20:7b: 56:2d:98:11:c1:0c:7c:2c:94:67:bf:40:a1:93:23:1a:dd:bd: 8f:0c:06:1e:2d:ae:0f:92:28:8d:dc:62:81:5c:43:53:fd:6e: 99:a7:15:c5:cb:62:2b:c9:69:af:36:a8:18:87:3b:85:00:0c: 80:a3:68:e7:a2:c4:3d:a6:bf:c9:54:92:9f:7d:29:f8:e5:47: c4:76:bd:66:4b:26:17:2b:4e:2b:af:3b:32:04:87:d8:eb:df: 17:1c:13:52:be:d7:9c:70:97:5a:bf:2c:ba:fd:5d:0f:c2:f1: b6:11:67:d1:eb:4b:96:e3:ba:3f:af:f8:ee:fb:18:f7:13:eb: b7:40:38:07:3b:7a:8b:86:34:b5:7b:be:48:df:13:63:70:74: 6d:e5:fe:d7:82:7d:8f:5b:66:d8:a3:f2:16:0d:be:85:79:cd: 5d:1c:53:65:24:a7:dd:9a:5f:fe:fe:77:be:96:8a:00:f5:38: 7c:e3:02:bf:1a:e5:b7:6c:5b:19:99:98:bf:3f:29:a6:fa:c2: d3:a1:2e:9f:8d:fb:0d:6b:e2:b0:6d:91:cc:0a:94:94:38:fd: 55:af:32:3d:64:9f:4e:35:02:9d:44:f9:e5:c7:af:c0:d7:9b: 55:f0:bb:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm76qSm1L0uF0xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDQ3OGRhMmMtNmEyMS00NGQ3LWEwNDAtNDJkZTEyYjk5MTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFCiQ6h3m55OqYTGzyb/kF56OWS1egVPszy3 Bv3mh7J5uP1hoSq2yDndoSA7sLGVq+yO1HgmdzDWbyDxqzTWotyqOETFgORtoWne 8M98BVHB6jZdY/DZuFxpHuNPncr2zZWlI+dorNs+LJQtXarvZ9Gq6F/R/Vu5+vJh ul6I0/Ww8vVpqeKsdA3fCLC2VfFMib1nPbu9/Z1A51oSZfadmOk/uS/FTICXoxUQ 6oB2MyKk9wnjCtmjrf81j1Hu2G0r9/c3DDyuPOFA5RotJ5TrGDeegmXU71zxNzKQ oyEFAnqEb6gdeyXLEDLa7/H/xLWn811EJ14xVL5oUK468GKiNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQKNeGT+MhXcJbyE1MMeSDuNPBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODYxNDc0NDUtNGQyNy0z YTAyLWI2NWYtZGNiNDhlZjMyODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUUYm92IRxm3FtnJdrrtEYge1YtmBHBDHwslGe/QKGTIxrdvY8MBh4t rg+SKI3cYoFcQ1P9bpmnFcXLYivJaa82qBiHO4UADICjaOeixD2mv8lUkp99Kfjl R8R2vWZLJhcrTiuvOzIEh9jr3xccE1K+15xwl1q/LLr9XQ/C8bYRZ9HrS5bjuj+v +O77GPcT67dAOAc7eouGNLV7vkjfE2NwdG3l/teCfY9bZtij8hYNvoV5zV0cU2Uk p92aX/7+d76WigD1OHzjAr8a5bdsWxmZmL8/Kab6wtOhLp+N+w1r4rBtkcwKlJQ4 /VWvMj1kn041Ap1E+eXHr8DXm1Xwuzc= -----END CERTIFICATE-----Generated at Sat Jun 13 13:27:34 2026 by rpki-client