$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab7b560f-d613-3ae1-9329-f7563f517db9.roa File: ab7b560f-d613-3ae1-9329-f7563f517db9.roa (raw, json) Hash identifier: xaDfS4aHJfY6FpIgfOUDTUFsHRoBQfuyrzy/pGtlsJA= Subject key identifier: 9B:0B:12:42:14:5F:43:FB:FD:80:FA:29:96:5D:1F:B7:CA:49:E7:41 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79EA3583269970FBCE20080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab7b560f-d613-3ae1-9329-f7563f517db9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.217.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:a3:58:32:69:97:0f:bc:e2:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e92e88ba-042d-4603-bbc3-cbb9044ec52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:d2:e2:83:8e:b8:73:a0:79:22:3f:ff:ff: f6:b1:69:de:db:12:d8:88:0c:b8:8e:a1:df:33:11: 6b:8e:84:ae:18:7d:47:fe:fa:b0:03:d3:c5:f0:dd: 2b:da:25:27:db:7d:be:58:b7:53:31:ae:b2:a1:ed: 89:2c:76:b5:b2:05:d0:7f:f3:17:47:00:57:c1:72: 54:6f:f5:ab:0c:e2:f1:f6:74:de:19:1e:e9:d3:73: 98:28:d4:25:de:bf:4e:e0:e8:24:bc:22:fd:96:b5: a7:03:66:49:18:1a:53:7d:a2:05:9c:80:c7:ff:60: ed:81:76:cf:93:86:81:f1:58:3b:6e:ca:b5:2b:b0: 6b:79:21:91:83:7d:02:2c:cf:16:63:ec:4b:52:c9: 3b:2c:df:5a:08:61:24:d6:b4:ae:0d:b9:37:26:a0: 45:d2:ba:d3:16:69:3e:c0:2b:65:71:aa:89:3a:70: 7c:17:65:12:3c:ab:f8:8e:ab:c6:a3:eb:8a:6f:55: 8f:52:c1:38:28:fc:78:39:25:f8:85:67:25:6b:ad: 57:49:e0:80:f5:69:7b:df:59:de:dc:fa:b3:0a:bf: 49:93:e3:30:e2:db:1d:17:78:25:45:6b:eb:86:14: 0e:5f:6e:11:b5:ad:cf:1b:d6:54:fd:7b:ee:d9:a2: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0B:12:42:14:5F:43:FB:FD:80:FA:29:96:5D:1F:B7:CA:49:E7:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab7b560f-d613-3ae1-9329-f7563f517db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b4:be:03:a5:6a:42:9b:2c:e8:6c:81:71:88:a7:d0:9c:e7: 55:79:ae:1c:9f:d2:4f:41:dc:e6:10:df:81:c0:57:45:cc:09: 53:f8:c6:ee:cf:88:f1:3d:86:cc:1d:13:7a:cc:5e:06:b0:2b: f6:d8:52:a0:1f:45:75:ef:7f:2f:dc:38:99:af:1f:9d:b2:99: 6f:83:de:74:86:32:81:7a:f3:05:d6:d1:3a:d4:e7:51:f5:58: db:9e:29:ee:da:62:7e:62:a8:6c:8d:17:89:f1:71:44:a1:67: 79:3d:10:ca:2d:17:4a:b1:ce:41:17:1d:9d:85:80:36:78:1c: 80:d8:3c:d4:a7:93:bb:ca:8e:5a:73:9b:8d:27:a2:cd:1d:9e: 69:05:d6:3c:0f:08:36:02:98:c4:e2:20:a8:db:eb:24:fe:55: c3:18:ca:b4:02:55:e2:65:f8:72:c7:c3:62:cf:f9:a9:68:49: c0:fd:58:e8:25:33:bc:01:96:b0:f4:5b:9e:de:6b:16:71:c6: fe:57:6d:56:94:49:aa:f4:6d:bb:8b:b8:f9:13:6b:c8:e3:8b: 6c:a8:f2:3b:e1:28:1f:3c:cc:6a:dc:bf:47:7d:82:fc:7b:e4: 34:f0:ee:2d:6e:c0:7c:35:e1:a2:bd:ff:c4:5b:bd:95:31:c6: 0e:70:79:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnqNYMmmXD7ziAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTkyZTg4YmEtMDQyZC00NjAzLWJiYzMtY2JiOTA0NGVjNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgPS4oOOuHOgeSI////2sWne2xLYiAy4jqHf MxFrjoSuGH1H/vqwA9PF8N0r2iUn232+WLdTMa6yoe2JLHa1sgXQf/MXRwBXwXJU b/WrDOLx9nTeGR7p03OYKNQl3r9O4OgkvCL9lrWnA2ZJGBpTfaIFnIDH/2DtgXbP k4aB8Vg7bsq1K7BreSGRg30CLM8WY+xLUsk7LN9aCGEk1rSuDbk3JqBF0rrTFmk+ wCtlcaqJOnB8F2USPKv4jqvGo+uKb1WPUsE4KPx4OSX4hWcla61XSeCA9Wl731ne 3PqzCr9Jk+Mw4tsdF3glRWvrhhQOX24Rta3PG9ZU/Xvu2aK3fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsLEkIUX0P7/YD6KZZdH7fKSedBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWI3YjU2MGYtZDYxMy0z YWUxLTkzMjktZjc1NjNmNTE3ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi0vgOlakKbLOhsgXGIp9Cc51V5rhyf0k9B3OYQ34HAV0XMCVP4xu7P iPE9hswdE3rMXgawK/bYUqAfRXXvfy/cOJmvH52ymW+D3nSGMoF68wXW0TrU51H1 WNueKe7aYn5iqGyNF4nxcUShZ3k9EMotF0qxzkEXHZ2FgDZ4HIDYPNSnk7vKjlpz m40nos0dnmkF1jwPCDYCmMTiIKjb6yT+VcMYyrQCVeJl+HLHw2LP+aloScD9WOgl M7wBlrD0W57eaxZxxv5XbVaUSar0bbuLuPkTa8jji2yo8jvhKB88zGrcv0d9gvx7 5DTw7i1uwHw14aK9/8RbvZUxxg5weSw= -----END CERTIFICATE-----Generated at Wed Jul 29 05:52:17 2026 by rpki-client