$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa File: a67282dc-ef4b-3424-b14a-d7cc85f54925.roa (raw, json) Hash identifier: 0OZpUutaFKLeZxxQnShc/PxuppIKx48FQbJO6Hpjk70= Subject key identifier: 89:9A:DE:D9:04:EA:B7:CD:8C:FD:33:C0:45:57:02:BD:BE:39:83:3E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BCCA313B63EF13E978760 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:cc:a3:13:b6:3e:f1:3e:97:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=107d8a43-2333-4fde-b5e5-af773e015dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:4f:6f:94:c2:d9:b3:a9:bc:1f:6d:52:10: 4d:25:e4:6f:ae:83:51:43:1e:ea:22:35:ed:e2:c4: 62:2c:a5:64:a9:39:31:96:aa:b7:39:a7:0a:f0:f4: 9e:a1:d8:67:d7:2d:59:6b:63:37:75:88:bf:ed:25: 2a:ac:78:fe:f2:38:c1:a9:a1:42:34:33:c0:a4:79: 76:6f:ca:22:4e:c2:e1:d3:02:a9:79:5b:9b:48:ea: f8:67:39:54:87:39:db:35:4e:82:2e:2b:20:18:3b: 9f:4a:21:ae:86:b2:e6:97:01:3f:ec:95:2e:ea:3a: 79:ff:21:3c:07:5f:f5:25:ef:0c:df:4d:bf:76:cf: 72:6c:11:58:60:aa:9c:05:e6:60:06:b3:ce:9e:be: 1e:77:0f:c9:14:81:82:35:6d:bf:53:23:d7:4e:a4: 94:92:b9:b9:8a:31:48:d1:bb:c9:2d:28:44:47:ba: 3f:9b:d9:a6:11:01:43:5c:b3:d5:6e:a5:b8:d3:d2: 0c:68:0d:8f:42:c6:ea:eb:52:18:23:07:09:cf:9b: 92:a6:5b:5a:c9:6d:75:d0:07:fb:35:c3:8d:f5:62: 7a:30:7d:ad:84:42:9e:1f:0d:ba:55:e4:a4:02:71: c2:6e:86:d9:cc:9b:4b:b2:98:3e:08:b1:7a:d2:75: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9A:DE:D9:04:EA:B7:CD:8C:FD:33:C0:45:57:02:BD:BE:39:83:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bc:86:7c:cc:09:52:95:c2:c4:f6:29:ff:d5:15:82:17:0b: 8b:68:70:a4:5c:6a:90:fd:98:98:00:16:cc:ce:47:22:db:1b: 96:67:59:42:56:68:bd:9e:64:0a:b7:2a:06:58:94:ad:e9:9b: ad:9a:53:03:f8:33:5b:f5:52:15:7f:12:cd:b7:a1:60:71:64: 9b:fd:46:3f:5d:1e:e5:30:82:40:b8:88:5d:89:ac:7f:64:40: 59:ac:c7:58:c4:e6:fb:3d:bb:24:32:8e:34:7f:08:58:b1:11: aa:9b:ce:b2:7e:42:6d:ed:da:65:1b:d7:db:46:e5:aa:53:c8: 06:43:ab:76:70:6e:7d:d5:ec:22:7d:f6:ca:15:a7:c3:28:db: b8:38:08:91:74:5d:58:54:3f:b5:ff:e1:ba:13:6f:3b:e0:e4: fc:d4:2b:fe:d6:33:f7:c0:96:4d:cb:47:26:56:96:90:fc:1b: d7:18:a5:79:e5:22:8d:9a:f1:21:a4:98:71:23:57:ef:37:53: f6:9c:c0:fe:be:37:27:a1:ef:74:5c:e6:69:d0:9c:c9:77:2b: f0:7b:4b:72:ed:1e:71:bb:07:38:40:d1:4a:e7:85:dc:ad:fd: 63:30:cf:7d:9e:9c:2d:1a:de:34:45:ec:49:16:c2:0b:bd:88: ef:fd:a0:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8yjE7Y+8T6Xh2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MTA3ZDhhNDMtMjMzMy00ZmRlLWI1ZTUtYWY3NzNlMDE1ZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsRPb5TC2bOpvB9tUhBNJeRvroNRQx7qIjXt 4sRiLKVkqTkxlqq3OacK8PSeodhn1y1Za2M3dYi/7SUqrHj+8jjBqaFCNDPApHl2 b8oiTsLh0wKpeVubSOr4ZzlUhznbNU6CLisgGDufSiGuhrLmlwE/7JUu6jp5/yE8 B1/1Je8M302/ds9ybBFYYKqcBeZgBrPOnr4edw/JFIGCNW2/UyPXTqSUkrm5ijFI 0bvJLShER7o/m9mmEQFDXLPVbqW409IMaA2PQsbq61IYIwcJz5uSpltayW110Af7 NcON9WJ6MH2thEKeHw26VeSkAnHCbobZzJtLspg+CLF60nVGCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIma3tkE6rfNjP0zwEVXAr2+OYM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTY3MjgyZGMtZWY0Yi0z NDI0LWIxNGEtZDdjYzg1ZjU0OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm8hnzMCVKVwsT2Kf/VFYIXC4tocKRcapD9mJgAFszORyLbG5ZnWUJW aL2eZAq3KgZYlK3pm62aUwP4M1v1UhV/Es23oWBxZJv9Rj9dHuUwgkC4iF2JrH9k QFmsx1jE5vs9uyQyjjR/CFixEaqbzrJ+Qm3t2mUb19tG5apTyAZDq3Zwbn3V7CJ9 9soVp8Mo27g4CJF0XVhUP7X/4boTbzvg5PzUK/7WM/fAlk3LRyZWlpD8G9cYpXnl Io2a8SGkmHEjV+83U/acwP6+Nyeh73Rc5mnQnMl3K/B7S3LtHnG7BzhA0Urnhdyt /WMwz32enC0a3jRF7EkWwgu9iO/9oFw= -----END CERTIFICATE-----Generated at Sat Jun 13 13:08:08 2026 by rpki-client