$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa File: b8e4ffb5-04fb-3989-bac1-011a62674a35.roa (raw, json) Hash identifier: 32Nnsoa7j8IQP2fYZgD4y8BkZlNdvpkcxnk0tRea7N8= Subject key identifier: C2:22:0F:77:4B:87:A2:BB:09:F6:58:76:51:2C:CC:D2:15:E5:5D:54 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E4469CE2F85EF80096BB280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 172.217.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:69:ce:2f:85:ef:80:09:6b:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=8166f886-bf30-4b1c-a33d-ae531c5b6870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:5f:2e:ec:80:58:f8:7d:20:4a:18:08:85: ab:b8:a5:87:3d:55:4e:3a:12:5a:11:36:c2:1f:74: fb:7f:e1:c2:1b:50:89:93:3e:84:9f:40:b8:38:71: af:cb:45:54:30:13:1e:9b:6b:70:4d:be:c7:cb:7f: 3e:32:07:8d:09:65:e8:a3:68:26:56:d3:bf:da:77: 18:76:19:c9:88:d2:86:1d:9a:23:26:61:40:e1:98: 91:f8:88:a1:df:7c:a1:e3:1d:66:1e:59:46:d6:30: 42:9b:22:8d:16:ce:61:53:e6:ee:c2:3a:b9:79:fd: fa:a4:17:a0:d7:b4:da:89:3b:94:87:8a:a6:12:a3: 35:c7:f3:58:64:bb:11:01:8c:4d:d6:4f:95:e1:4a: 96:cc:87:43:b0:a4:ef:10:60:00:6c:55:a6:e5:3a: 32:f8:20:13:14:7e:0c:2f:ea:ac:70:ec:d5:d1:5e: 85:df:5f:db:a5:0a:f4:07:a7:5c:56:a0:6e:2f:02: a2:32:26:5f:08:02:ff:de:6b:b5:4d:d2:b2:c9:ae: 49:c6:18:4a:97:c8:9a:2c:c2:65:7e:a1:49:11:5d: 67:f8:4f:09:f2:24:6a:65:47:52:e1:63:22:bd:1c: 2d:b2:6e:f7:31:20:f9:95:78:9a:22:c4:0f:9d:13: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:22:0F:77:4B:87:A2:BB:09:F6:58:76:51:2C:CC:D2:15:E5:5D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:58:de:c5:fb:09:ed:e9:e4:73:f4:ee:e0:d4:0e:53:81:ea: 20:cf:7b:13:cb:0f:05:9e:6c:bc:29:92:09:29:a5:3f:38:68: 86:82:fe:da:ba:43:54:f0:6e:c5:d5:e8:48:37:43:90:63:76: 9d:d9:57:b3:d4:29:84:ca:fd:9c:64:f8:8d:49:95:ba:ab:f2: 7c:70:4c:ab:74:90:66:64:47:1d:1d:4b:07:5c:28:45:db:b4: df:c8:b2:ac:f9:f2:92:f4:3e:e8:c3:c9:5a:e4:fb:d1:cf:8b: 69:f1:5a:a7:14:4b:bf:e2:37:b4:95:a7:09:c0:ff:3e:97:ac: c5:e6:2a:b0:94:9c:f9:85:83:de:55:24:22:88:c8:05:83:85: 7f:49:fd:7a:1d:51:fe:0b:69:47:d0:50:8c:81:1b:5f:6a:9f: 15:e3:73:1d:30:9f:2b:9d:48:a8:ac:dd:8f:72:ec:6c:c3:05: 1b:45:d9:31:c9:c6:d3:d1:fd:5c:41:6d:90:56:5f:37:f3:c7: 37:6d:1d:c3:ae:d3:ea:70:1d:a1:45:ab:b8:0d:96:9c:aa:90: f8:e3:a1:aa:39:87:ef:b9:42:50:81:6e:65:1c:5b:00:04:70: a1:d7:37:7a:1b:fb:08:b1:68:24:78:1d:f5:a2:19:db:06:42: 86:e3:86:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRGnOL4XvgAlrsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ODE2NmY4ODYtYmYzMC00YjFjLWEzM2QtYWU1MzFjNWI2ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5BfLuyAWPh9IEoYCIWruKWHPVVOOhJaETbC H3T7f+HCG1CJkz6En0C4OHGvy0VUMBMem2twTb7Hy38+MgeNCWXoo2gmVtO/2ncY dhnJiNKGHZojJmFA4ZiR+Iih33yh4x1mHllG1jBCmyKNFs5hU+buwjq5ef36pBeg 17TaiTuUh4qmEqM1x/NYZLsRAYxN1k+V4UqWzIdDsKTvEGAAbFWm5Toy+CATFH4M L+qscOzV0V6F31/bpQr0B6dcVqBuLwKiMiZfCAL/3mu1TdKyya5JxhhKl8iaLMJl fqFJEV1n+E8J8iRqZUdS4WMivRwtsm73MSD5lXiaIsQPnRP6CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIiD3dLh6K7CfZYdlEszNIV5V1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjhlNGZmYjUtMDRmYi0z OTg5LWJhYzEtMDExYTYyNjc0YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFY3sX7Ce3p5HP07uDUDlOB6iDPexPLDwWebLwpkgkppT84aIaC/tq6 Q1TwbsXV6Eg3Q5Bjdp3ZV7PUKYTK/Zxk+I1Jlbqr8nxwTKt0kGZkRx0dSwdcKEXb tN/Isqz58pL0PujDyVrk+9HPi2nxWqcUS7/iN7SVpwnA/z6XrMXmKrCUnPmFg95V JCKIyAWDhX9J/XodUf4LaUfQUIyBG19qnxXjcx0wnyudSKis3Y9y7GzDBRtF2THJ xtPR/VxBbZBWXzfzxzdtHcOu0+pwHaFFq7gNlpyqkPjjoao5h++5QlCBbmUcWwAE cKHXN3ob+wixaCR4HfWiGdsGQobjhmk= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:58 2026 by rpki-client