$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab7b560f-d613-3ae1-9329-f7563f517db9.roa File: ab7b560f-d613-3ae1-9329-f7563f517db9.roa (raw, json) Hash identifier: Uho+gvP/r3xPX5B7BmiDL16fFz/Yu65CX9kqP1UZLUw= Subject key identifier: 9B:63:92:87:2F:9B:45:6D:EA:26:C7:A1:61:8F:DB:A8:7C:D3:0E:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC3244A768EA95A976CA8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab7b560f-d613-3ae1-9329-f7563f517db9.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c3:24:4a:76:8e:a9:5a:97:6c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=4fbff0c8-51ac-4244-a229-62d092a89d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:15:bd:df:5b:69:01:30:0c:5a:8c:24:27:6c: 7e:a2:e1:5a:4a:08:38:b2:03:51:de:72:fd:ee:4e: 06:e7:5b:c0:3a:55:59:64:f9:51:44:e3:5f:64:85: 48:af:54:6b:9d:10:29:53:3a:6c:3c:0c:b4:30:b2: 83:be:40:24:80:7e:b5:18:15:1e:c7:97:ed:fd:21: 63:ed:ed:3b:9a:4e:c7:59:65:a4:5e:d3:ae:54:e4: 3f:65:8a:28:df:72:8a:22:52:0d:95:c2:cc:dc:48: 04:73:71:e3:bc:5f:ce:e2:b2:8b:d4:cf:b0:a4:ad: 03:a0:af:cd:47:e4:a1:f7:c7:cd:74:da:89:c9:14: 03:cd:32:89:d1:08:96:2b:35:c2:1a:4a:11:48:76: 7a:af:02:16:f7:1d:ef:93:7b:43:86:f4:83:ee:57: a8:4a:1b:2e:eb:98:7f:b8:90:dc:db:a2:6f:11:9c: 4e:ab:4f:5f:c3:00:ef:74:ae:8e:3b:d6:cb:6f:06: 9c:21:57:a9:3b:b1:d3:f4:ab:35:e4:80:cf:1a:a8: 92:f9:28:16:cb:13:41:2d:07:79:55:c0:c7:c5:15: ed:ed:82:16:7a:e5:cd:e1:5d:81:6b:44:56:66:3d: e3:ef:be:d2:0b:30:88:de:60:a7:05:e1:5e:29:d5: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:63:92:87:2F:9B:45:6D:EA:26:C7:A1:61:8F:DB:A8:7C:D3:0E:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab7b560f-d613-3ae1-9329-f7563f517db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:53:5c:2d:2a:10:e8:0b:6d:41:0b:54:d2:4d:9f:e3:fd:1f: d0:f8:68:71:e3:f9:db:b5:07:cf:35:21:57:50:7e:fd:6a:ca: 89:4f:31:d4:ef:74:da:c9:22:03:9a:ed:74:bf:ab:86:c3:6f: 01:84:cf:a1:37:a2:fa:42:b6:1b:33:12:11:ae:87:77:83:47: 1c:02:c4:ec:cf:86:e8:3d:4f:c9:eb:da:12:5e:c0:89:10:a3: b9:d7:b3:37:cb:69:1a:6f:1e:69:2a:ae:8d:bb:4f:b1:8f:b4: 87:76:3a:f8:5f:d9:64:e1:cc:c1:5b:49:32:e0:27:d1:78:0c: 65:93:db:d8:46:dd:a3:8b:7f:88:df:49:f5:78:db:b1:b0:ee: 83:a4:4d:e1:f0:e3:ce:7d:92:ab:37:dd:3c:75:d8:ac:b4:68: 9b:b8:52:8a:57:4a:1e:7e:d0:f3:9f:19:ce:c4:df:ac:d5:b3: 9a:58:42:65:a0:a8:80:c7:62:6e:bf:10:97:2e:36:cf:5c:25: 20:77:bf:d8:1c:00:e0:a4:09:2c:44:a5:c3:a1:44:29:54:6f: c2:86:66:39:b9:a6:77:d7:8d:88:0b:f6:bf:6e:6f:a6:2b:f8: bb:01:88:33:79:89:17:b0:87:42:52:75:cd:82:96:a7:4a:4e: 24:1c:e4:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8MkSnaOqVqXbKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NGZiZmYwYzgtNTFhYy00MjQ0LWEyMjktNjJkMDkyYTg5ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBW931tpATAMWowkJ2x+ouFaSgg4sgNR3nL9 7k4G51vAOlVZZPlRRONfZIVIr1RrnRApUzpsPAy0MLKDvkAkgH61GBUex5ft/SFj 7e07mk7HWWWkXtOuVOQ/ZYoo33KKIlINlcLM3EgEc3HjvF/O4rKL1M+wpK0DoK/N R+Sh98fNdNqJyRQDzTKJ0QiWKzXCGkoRSHZ6rwIW9x3vk3tDhvSD7leoShsu65h/ uJDc26JvEZxOq09fwwDvdK6OO9bLbwacIVepO7HT9Ks15IDPGqiS+SgWyxNBLQd5 VcDHxRXt7YIWeuXN4V2Ba0RWZj3j777SCzCI3mCnBeFeKdWtvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtjkocvm0Vt6ibHoWGP26h80w5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWI3YjU2MGYtZDYxMy0z YWUxLTkzMjktZjc1NjNmNTE3ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExTXC0qEOgLbUELVNJNn+P9H9D4aHHj+du1B881IVdQfv1qyolPMdTv dNrJIgOa7XS/q4bDbwGEz6E3ovpCthszEhGuh3eDRxwCxOzPhug9T8nr2hJewIkQ o7nXszfLaRpvHmkqro27T7GPtId2Ovhf2WThzMFbSTLgJ9F4DGWT29hG3aOLf4jf SfV427Gw7oOkTeHw4859kqs33Tx12Ky0aJu4UopXSh5+0POfGc7E36zVs5pYQmWg qIDHYm6/EJcuNs9cJSB3v9gcAOCkCSxEpcOhRClUb8KGZjm5pnfXjYgL9r9ub6Yr +LsBiDN5iRewh0JSdc2ClqdKTiQc5EY= -----END CERTIFICATE-----Generated at Sat Jun 13 18:51:17 2026 by rpki-client