$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa File: 8684240a-b3e2-3586-b1f0-1953cb883e6c.roa (raw, json) Hash identifier: ufUnzkq+YL67lyl4tD/TEmG3wN5dIqkbcv+bDdOqf+Q= Subject key identifier: 34:1F:FF:D4:05:85:93:5F:15:5F:3F:51:E5:AF:74:CD:57:AA:13:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C412BFB2740109BC80660 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:41:2b:fb:27:40:10:9b:c8:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=642a73bc-94b1-4ca7-a302-d2adc3c05348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d8:6c:f3:1a:80:bf:bf:19:4d:0f:e2:c7:e6: a9:f1:a7:31:b9:0f:48:b6:fe:0f:c6:1c:bc:65:d3: cc:97:ba:fa:fd:d1:5f:af:33:63:a7:a2:f1:cb:15: 5d:8b:76:3e:2d:a0:e3:f2:e9:d2:2c:8f:ab:1a:5e: bf:9a:11:3d:60:c1:63:1c:01:6a:a6:2c:80:d8:eb: 73:58:96:c4:92:14:63:43:a8:a6:94:a0:2d:56:b1: e5:a5:b5:f9:2a:10:55:2d:ca:1e:cc:fc:55:15:32: 92:ea:f9:c6:fb:e6:ee:58:a6:9d:a4:39:cb:5e:7d: 9e:8b:c3:0f:6a:2c:3d:19:eb:f1:d2:dc:53:48:f5: ee:6c:33:0c:b9:5e:bd:59:b2:4a:a1:65:2b:56:90: 83:c8:3e:eb:08:27:40:88:6f:64:57:62:62:d0:f4: 3f:7b:11:9c:40:e2:16:ba:29:d5:a5:87:9e:46:83: 8b:61:c4:94:f7:3d:20:e6:f8:9d:9a:a2:24:3d:f5: 59:a4:73:99:1e:9b:dd:9e:35:64:d3:a3:f2:28:d9: c0:0c:67:0e:7c:63:17:2a:57:1a:2b:c2:c0:ef:63: 7b:f1:81:e4:9a:a5:ea:54:f0:57:5a:63:71:d5:6a: 97:3e:88:bc:c6:3e:99:bf:92:15:72:8f:b1:e5:81: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1F:FF:D4:05:85:93:5F:15:5F:3F:51:E5:AF:74:CD:57:AA:13:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d3:62:68:6c:27:05:a4:7a:2d:04:e4:1d:8b:03:11:00:bd: 37:32:9a:10:61:f1:f1:5d:10:c8:19:0e:cc:78:c8:b3:0a:a7: b1:c1:2f:8c:37:c4:ba:4e:63:49:db:1a:4c:d5:b7:d6:c9:ce: 55:34:e4:26:2b:73:05:34:84:57:e8:3b:fc:e4:d3:33:e7:fd: 18:ea:d0:d4:a1:29:7e:11:8f:32:2c:03:04:8f:f9:22:7d:e6: 69:08:de:af:d6:ed:57:77:88:f5:d6:e4:c0:b3:fa:ab:35:c2: 87:32:88:47:c6:f6:48:36:37:e6:46:29:4d:4b:ee:56:b8:fa: a8:01:dc:57:60:e3:32:75:6a:5a:2d:f8:1e:5c:48:b4:a7:66: 14:4d:86:42:6e:f5:63:95:26:04:3a:33:d8:8c:79:f0:ab:87: db:6a:a1:53:dc:c7:70:a8:34:dd:5d:5d:00:57:6f:8f:fa:c5: e8:4d:92:23:c7:40:1d:17:63:a6:95:a9:18:67:d2:e0:7f:7d: c8:2b:3d:33:c1:78:86:37:54:b8:67:6b:ff:58:ce:f1:c8:9e: 7a:3c:2e:b6:77:95:7f:0e:5e:97:28:4b:b7:e1:92:a9:94:1c: 0d:76:36:50:b1:55:e9:02:b3:97:3e:83:83:fc:a5:ba:a4:77: af:e3:13:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEEr+ydAEJvIBmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NjQyYTczYmMtOTRiMS00Y2E3LWEzMDItZDJhZGMzYzA1MzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNhs8xqAv78ZTQ/ix+ap8acxuQ9Itv4Pxhy8 ZdPMl7r6/dFfrzNjp6LxyxVdi3Y+LaDj8unSLI+rGl6/mhE9YMFjHAFqpiyA2Otz WJbEkhRjQ6imlKAtVrHlpbX5KhBVLcoezPxVFTKS6vnG++buWKadpDnLXn2ei8MP aiw9Gevx0txTSPXubDMMuV69WbJKoWUrVpCDyD7rCCdAiG9kV2Ji0PQ/exGcQOIW uinVpYeeRoOLYcSU9z0g5vidmqIkPfVZpHOZHpvdnjVk06PyKNnADGcOfGMXKlca K8LA72N78YHkmqXqVPBXWmNx1WqXPoi8xj6Zv5IVco+x5YEK7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQf/9QFhZNfFV8/UeWvdM1XqhPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY4NDI0MGEtYjNlMi0z NTg2LWIxZjAtMTk1M2NiODgzZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHTYmhsJwWkei0E5B2LAxEAvTcymhBh8fFdEMgZDsx4yLMKp7HBL4w3 xLpOY0nbGkzVt9bJzlU05CYrcwU0hFfoO/zk0zPn/Rjq0NShKX4RjzIsAwSP+SJ9 5mkI3q/W7Vd3iPXW5MCz+qs1wocyiEfG9kg2N+ZGKU1L7la4+qgB3Fdg4zJ1alot +B5cSLSnZhRNhkJu9WOVJgQ6M9iMefCrh9tqoVPcx3CoNN1dXQBXb4/6xehNkiPH QB0XY6aVqRhn0uB/fcgrPTPBeIY3VLhna/9YzvHInno8LrZ3lX8OXpcoS7fhkqmU HA12NlCxVekCs5c+g4P8pbqkd6/jE4o= -----END CERTIFICATE-----Generated at Sat Jun 13 09:21:36 2026 by rpki-client