$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f5885ba-2023-329b-8f3a-25904f05aa70.roa File: 8f5885ba-2023-329b-8f3a-25904f05aa70.roa (raw, json) Hash identifier: +vTelO8rsMuQsldOzD3ynMiPH/qVcrFdMcsz21/wLus= Subject key identifier: E5:4D:14:B8:DA:49:1A:07:CE:4F:D9:31:91:21:9B:27:BD:C5:60:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BCD3D92CAA64124F8B530 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f5885ba-2023-329b-8f3a-25904f05aa70.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 172.217.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:cd:3d:92:ca:a6:41:24:f8:b5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=fd80f997-ae5e-48e5-b6ed-f2953c02524f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:fb:d3:08:d2:3b:fe:2c:f2:1c:03:10:78: 7d:5d:32:87:45:c8:ef:e0:d4:35:26:7e:4e:8e:bd: 1e:7a:89:18:b2:6c:2b:95:7f:89:cc:c4:f1:c5:61: 35:42:f4:c3:45:e7:f5:56:b5:e0:06:d1:01:26:e3: 4c:87:79:22:4d:7e:04:32:76:88:6a:c4:6c:77:02: 80:12:03:ec:a2:87:5a:61:2e:4d:75:24:38:0d:7e: 19:1f:27:1e:07:db:1d:73:be:4b:ad:74:05:c5:86: a8:4a:c2:4c:6e:b9:a9:95:83:b5:27:7a:a0:13:c8: 88:c7:3e:a4:d2:b7:89:e8:57:fe:96:32:07:57:0d: b7:67:c7:04:22:d4:02:9d:5b:68:06:a3:0e:05:5e: a3:8d:f7:c8:be:42:52:23:13:0f:21:c1:de:67:ce: a0:95:ba:6a:94:ee:e7:e5:2a:11:37:9b:26:e5:b9: ae:26:5f:37:ab:45:e4:5d:7e:f9:35:27:c8:33:c7: 1c:f7:21:9a:6b:54:d6:ce:e4:88:d4:71:7d:32:23: 40:c1:5c:19:a3:f7:a9:3b:b4:25:a0:82:47:e5:07: 02:c3:69:f6:3d:74:c7:b5:65:b2:04:b6:a1:98:cc: 56:b3:ba:96:aa:4a:c2:01:66:41:44:31:bd:84:55: 31:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:14:B8:DA:49:1A:07:CE:4F:D9:31:91:21:9B:27:BD:C5:60:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f5885ba-2023-329b-8f3a-25904f05aa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:46:cb:f6:fc:13:73:96:08:76:16:24:9b:5a:a2:4a:fd:14: 69:66:9a:d3:04:7f:7e:06:b5:4a:79:44:bb:f2:da:d3:57:13: d3:17:2c:98:6a:4d:3d:5d:49:ad:e8:14:ae:99:16:34:8c:9d: 51:c6:b9:c0:0c:43:4c:ba:cb:bc:43:56:12:75:b6:46:7f:0c: d9:c8:43:f0:23:8a:b4:5f:81:5c:c8:c1:6b:74:b5:37:19:59: 42:4b:78:bd:4a:19:ef:85:e4:97:5f:5f:87:22:6c:82:29:ca: 66:38:7d:a2:e1:dd:d0:84:17:f2:6e:4e:54:af:e5:e0:3d:92: ae:2f:f0:3f:33:31:b7:a7:7a:5f:ab:da:07:17:92:c6:b0:d3: c8:f8:38:62:d4:93:15:9d:e6:42:ae:d4:ef:b1:be:1a:63:23: b2:a4:9b:28:fc:12:21:07:61:9d:6b:30:be:44:e3:6a:5a:da: 42:e5:34:c6:d0:6f:ef:01:1b:bb:b9:2c:a0:6f:44:b7:e3:b5: 79:1d:c6:99:97:78:4d:17:ec:d8:9b:39:da:10:7b:94:c4:eb: e2:4f:d7:8a:e2:2e:93:20:75:f3:ec:ae:53:60:33:ff:4c:a6: b1:fc:19:0d:94:98:d4:1c:fb:fb:b2:ec:04:7c:58:56:3b:e8: 26:23:de:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm809ksqmQST4tTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZmQ4MGY5OTctYWU1ZS00OGU1LWI2ZWQtZjI5NTNjMDI1MjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vf70wjSO/4s8hwDEHh9XTKHRcjv4NQ1Jn5O jr0eeokYsmwrlX+JzMTxxWE1QvTDRef1VrXgBtEBJuNMh3kiTX4EMnaIasRsdwKA EgPsoodaYS5NdSQ4DX4ZHyceB9sdc75LrXQFxYaoSsJMbrmplYO1J3qgE8iIxz6k 0reJ6Ff+ljIHVw23Z8cEItQCnVtoBqMOBV6jjffIvkJSIxMPIcHeZ86glbpqlO7n 5SoRN5sm5bmuJl83q0XkXX75NSfIM8cc9yGaa1TWzuSI1HF9MiNAwVwZo/epO7Ql oIJH5QcCw2n2PXTHtWWyBLahmMxWs7qWqkrCAWZBRDG9hFUxnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVNFLjaSRoHzk/ZMZEhmye9xWCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY1ODg1YmEtMjAyMy0z MjliLThmM2EtMjU5MDRmMDVhYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNk/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJGy/b8E3OWCHYWJJtaokr9FGlmmtMEf34GtUp5RLvy2tNXE9MXLJhq TT1dSa3oFK6ZFjSMnVHGucAMQ0y6y7xDVhJ1tkZ/DNnIQ/AjirRfgVzIwWt0tTcZ WUJLeL1KGe+F5JdfX4cibIIpymY4faLh3dCEF/JuTlSv5eA9kq4v8D8zMbenel+r 2gcXksaw08j4OGLUkxWd5kKu1O+xvhpjI7Kkmyj8EiEHYZ1rML5E42pa2kLlNMbQ b+8BG7u5LKBvRLfjtXkdxpmXeE0X7NibOdoQe5TE6+JP14riLpMgdfPsrlNgM/9M prH8GQ2UmNQc+/uy7AR8WFY76CYj3pA= -----END CERTIFICATE-----Generated at Sat Jun 13 14:49:50 2026 by rpki-client