$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa File: ade63972-a7fa-3aa6-9cdc-7f422468c453.roa (raw, json) Hash identifier: 1eZcshY5svDO9S1P1dBuF1KxC6q9w8H8KDeiq7GDqEI= Subject key identifier: 03:60:C1:72:0F:BB:AD:31:65:D8:35:5F:48:F7:D0:2A:4A:92:79:AE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C3C5181C904F278B981C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:3c:51:81:c9:04:f2:78:b9:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=72f5afbb-5bb8-4ba0-a9b5-682d85e0f73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:70:1c:e4:de:97:ed:35:10:d4:a3:76:6d: 65:84:9d:fc:0f:a6:7d:f5:ee:88:67:09:52:28:a5: d4:97:3b:68:ac:97:3a:eb:69:58:c2:44:b0:d7:7c: 7a:77:1a:0c:78:5c:da:db:76:bd:bf:d3:4c:cd:19: 37:f1:44:03:7b:8f:62:6c:53:80:32:d4:d0:55:16: 9e:db:39:49:3f:f6:35:ce:fd:6c:b0:27:b8:e0:fd: db:d2:b6:2b:24:63:fe:5c:c4:5e:41:f2:61:87:e0: b5:0a:98:93:93:31:a7:27:95:4d:d4:02:69:d1:a8: 8a:3d:20:fc:cf:a7:fa:85:bb:4a:02:2f:5d:57:28: ad:42:35:bc:dd:6c:78:92:b5:12:c2:10:93:f7:5c: 79:08:33:f5:a9:c7:3a:ad:04:af:30:c5:37:94:d4: 9b:28:24:cd:eb:33:a8:c0:ab:01:c2:6e:50:c7:48: 6f:cd:e9:d1:d5:d4:34:7f:41:60:a9:13:3e:f5:d9: 18:61:8a:72:d9:e1:78:cc:7a:ef:19:c0:4a:66:99: 63:f8:2d:f2:e9:31:a9:5e:a2:e7:65:e8:78:af:16: 8b:e2:f0:b4:f4:83:ad:89:94:e0:94:2f:3a:63:55: ab:21:9b:f6:5a:b5:76:da:df:24:84:9f:66:f8:e8: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:60:C1:72:0F:BB:AD:31:65:D8:35:5F:48:F7:D0:2A:4A:92:79:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:95:f4:10:84:5d:d0:5f:54:72:18:2e:be:82:43:ca:7d:2f: 4a:35:47:e6:90:88:11:d3:05:63:c2:6d:0b:66:72:cd:c0:d6: 81:f8:fa:f5:7f:82:85:2a:da:d9:8d:c2:cc:d9:54:86:91:00: b7:51:d7:98:e0:86:07:c4:9c:79:32:f9:db:5a:5e:bb:5f:96: 35:79:d8:9a:91:ec:05:ce:8c:fc:2f:c2:a9:cb:92:1b:c3:06: 9a:36:72:86:e3:73:cf:cd:58:25:41:61:f9:6d:be:af:f9:96: 11:28:20:fc:74:2a:dc:5c:e8:03:16:be:71:3c:af:60:0e:fc: b0:9d:d3:cc:f5:22:ed:b9:1c:d5:01:98:a7:70:e8:a4:b4:89: e7:15:34:00:94:c9:4b:86:55:93:f8:fa:af:21:b7:bd:6d:b3: 78:88:94:82:8b:3b:97:e8:fe:d1:c6:a7:6e:12:34:79:76:6e: ad:4f:9a:49:7e:34:33:fe:57:01:34:6a:67:5e:2d:2f:2e:c1: 27:cf:f3:52:c5:b6:0e:91:89:ce:ce:d2:7c:b8:53:30:0d:02: 84:cf:a3:9e:4a:11:89:fa:51:60:11:bc:92:11:d1:b1:a0:51: 06:8a:78:7c:f4:85:ee:7d:d6:0e:ee:12:bb:e4:f9:fa:1d:3b: 94:5f:a1:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnDxRgckE8ni5gcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NzJmNWFmYmItNWJiOC00YmEwLWE5YjUtNjgyZDg1ZTBmNzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW9wHOTel+01ENSjdm1lhJ38D6Z99e6IZwlS KKXUlztorJc662lYwkSw13x6dxoMeFza23a9v9NMzRk38UQDe49ibFOAMtTQVRae 2zlJP/Y1zv1ssCe44P3b0rYrJGP+XMReQfJhh+C1CpiTkzGnJ5VN1AJp0aiKPSD8 z6f6hbtKAi9dVyitQjW83Wx4krUSwhCT91x5CDP1qcc6rQSvMMU3lNSbKCTN6zOo wKsBwm5Qx0hvzenR1dQ0f0FgqRM+9dkYYYpy2eF4zHrvGcBKZplj+C3y6TGpXqLn Zeh4rxaL4vC09IOtiZTglC86Y1WrIZv2WrV22t8khJ9m+Ohs/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANgwXIPu60xZdg1X0j30CpKknmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWRlNjM5NzItYTdmYS0z YWE2LTljZGMtN2Y0MjI0NjhjNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6V9BCEXdBfVHIYLr6CQ8p9L0o1R+aQiBHTBWPCbQtmcs3A1oH4+vV/ goUq2tmNwszZVIaRALdR15jghgfEnHky+dtaXrtfljV52JqR7AXOjPwvwqnLkhvD Bpo2cobjc8/NWCVBYfltvq/5lhEoIPx0Ktxc6AMWvnE8r2AO/LCd08z1Iu25HNUB mKdw6KS0iecVNACUyUuGVZP4+q8ht71ts3iIlIKLO5fo/tHGp24SNHl2bq1Pmkl+ NDP+VwE0amdeLS8uwSfP81LFtg6Ric7O0ny4UzANAoTPo55KEYn6UWARvJIR0bGg UQaKeHz0he591g7uErvk+fodO5Rfod0= -----END CERTIFICATE-----Generated at Sat Jun 13 13:30:12 2026 by rpki-client