$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa File: 87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa (raw, json) Hash identifier: QK4kxT8IIOZTWMlGBVabU6JCXXNeh9qyRV0Y0zl++x8= Subject key identifier: AD:DA:8D:81:F2:C4:AF:8E:44:F7:14:0D:A4:CB:10:A3:BD:43:19:CF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A079B189FFB5F5C45AE100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.217.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:79:b1:89:ff:b5:f5:c4:5a:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=332e9612-3817-4e5c-baaf-abedfc7618d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d6:b7:bc:c2:58:81:33:35:f0:4a:34:f8:7f: 2e:1a:df:54:f7:78:6a:cf:76:5a:11:e5:86:c9:2b: 28:4b:f4:18:4d:dd:d5:d8:fa:0b:be:c2:e4:d6:20: a3:bc:bd:2b:8f:a2:41:8e:a3:b3:c0:e3:a4:0d:77: 62:95:7e:01:44:0c:a0:4e:4c:69:46:72:2f:8c:01: 6d:fe:54:7f:b9:1a:c1:04:9d:85:b5:5e:75:b7:9f: b9:09:41:f6:e3:70:63:b5:fc:c9:d5:60:4d:4e:53: 78:e9:25:0d:f5:b9:4e:53:ca:ae:bd:ca:3b:cd:2e: c5:9f:34:43:83:1b:c1:df:73:29:0d:82:82:ca:be: 2d:67:cb:d0:9b:3e:c8:1e:c0:47:28:52:c3:c2:f4: 72:b7:d8:b5:1a:49:b7:17:c5:46:57:94:72:5e:82: 22:27:df:95:93:b7:52:54:76:65:2c:8d:6c:05:62: 79:31:2f:41:af:d9:5d:88:8d:8f:eb:91:c6:ee:c3: 6a:56:9a:00:0e:2c:63:87:08:6f:e8:12:e0:7d:fe: a3:85:bc:f9:8c:4a:65:be:00:f1:3a:82:26:64:a4: 43:7f:fa:d6:f1:f1:3a:2b:ec:67:2c:f8:c3:61:33: 1d:d8:32:ee:2b:93:89:5d:90:f9:6a:52:c6:fd:02: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DA:8D:81:F2:C4:AF:8E:44:F7:14:0D:A4:CB:10:A3:BD:43:19:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ba:93:68:60:2c:37:1e:c2:1b:7c:7a:68:03:38:dc:d3:4c: ef:9f:25:3b:36:cf:c2:1e:9e:8e:6c:78:2e:46:48:75:0d:74: b9:2f:b1:e6:99:99:cb:55:38:bb:70:7c:62:10:62:8c:0a:c8: 2e:dd:e6:09:1f:02:15:45:77:9e:4a:22:a6:62:22:84:9f:64: be:49:70:d4:95:65:ac:d9:a8:f8:fa:bd:92:0e:c7:06:7e:06: 8e:8a:ec:5e:c1:0a:01:b5:dd:3b:ce:62:e1:52:ee:78:93:b7: b6:62:7f:b4:0c:39:2e:aa:22:fe:74:ee:e6:aa:9f:8c:15:50: 3e:53:2b:63:89:bb:7d:85:44:2d:38:80:2a:9a:81:95:1d:78: 84:5c:74:4e:44:c8:74:c3:ab:14:18:1e:40:78:18:65:16:a4: 2b:7c:b9:47:ba:df:f2:3f:dd:91:4a:f5:29:06:32:70:7a:75: 92:84:64:13:50:95:7c:e7:ad:fd:50:cd:4f:73:08:8e:91:6e: 91:e9:17:78:7f:66:81:f3:12:65:85:4a:4b:51:fc:bd:9e:4c: 8b:44:fb:f4:12:44:3b:91:6f:7d:39:45:7a:46:67:b4:c9:c8: cc:52:b7:a3:f2:f9:9f:d3:3b:12:27:46:f3:6d:d1:b5:6a:d9: d7:f0:9e:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noHmxif+19cRa4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzMyZTk2MTItMzgxNy00ZTVjLWJhYWYtYWJlZGZjNzYxOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ta3vMJYgTM18Eo0+H8uGt9U93hqz3ZaEeWG ySsoS/QYTd3V2PoLvsLk1iCjvL0rj6JBjqOzwOOkDXdilX4BRAygTkxpRnIvjAFt /lR/uRrBBJ2FtV51t5+5CUH243BjtfzJ1WBNTlN46SUN9blOU8quvco7zS7FnzRD gxvB33MpDYKCyr4tZ8vQmz7IHsBHKFLDwvRyt9i1Gkm3F8VGV5RyXoIiJ9+Vk7dS VHZlLI1sBWJ5MS9Br9ldiI2P65HG7sNqVpoADixjhwhv6BLgff6jhbz5jEplvgDx OoImZKRDf/rW8fE6K+xnLPjDYTMd2DLuK5OJXZD5alLG/QJOIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3ajYHyxK+ORPcUDaTLEKO9QxnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODdmNGRjMmMtMzFiYy0z M2VjLThlN2QtZDFiZDY1YmE2YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG6k2hgLDcewht8emgDONzTTO+fJTs2z8Ieno5seC5GSHUNdLkvseaZ mctVOLtwfGIQYowKyC7d5gkfAhVFd55KIqZiIoSfZL5JcNSVZazZqPj6vZIOxwZ+ Bo6K7F7BCgG13TvOYuFS7niTt7Zif7QMOS6qIv507uaqn4wVUD5TK2OJu32FRC04 gCqagZUdeIRcdE5EyHTDqxQYHkB4GGUWpCt8uUe63/I/3ZFK9SkGMnB6dZKEZBNQ lXznrf1QzU9zCI6RbpHpF3h/ZoHzEmWFSktR/L2eTItE+/QSRDuRb305RXpGZ7TJ yMxSt6Py+Z/TOxInRvNt0bVq2dfwnlA= -----END CERTIFICATE-----Generated at Wed Jul 29 09:06:03 2026 by rpki-client