$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa File: bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa (raw, json) Hash identifier: /EupAI+kJIg56JxOaOaCr9NsUdiQ+4Nkv2ANVZnWETY= Subject key identifier: 4A:EB:9A:96:B6:67:EE:AC:0F:24:27:98:41:E7:73:2B:9D:B4:8A:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BD13B708C7E9044D5F160 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.217.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:d1:3b:70:8c:7e:90:44:d5:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=42e02ef2-3d3e-488d-958f-5fc6c3ec36ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ef:a1:ad:f1:e2:a7:46:b5:b7:cd:f0:4c:be: f1:5d:c3:b5:50:4f:94:e5:5c:29:71:25:5d:5b:be: 18:75:02:15:0d:38:42:e0:24:75:7f:f0:b3:7d:d0: af:00:e8:98:39:59:3c:5a:2a:fe:44:b8:bd:20:8f: 10:34:8f:c8:91:10:1a:a5:b8:bc:63:30:0b:e6:89: 36:50:42:4b:90:87:42:f8:d7:5b:d2:77:27:42:34: d9:59:b9:3d:40:1d:bb:cd:b9:ea:38:77:f7:26:1e: f9:6d:22:63:d1:c5:7a:b0:7d:2c:5d:91:1a:9b:33: 1d:ce:e8:8f:92:88:ca:b2:f8:57:18:23:ef:61:83: 3a:06:cc:17:83:b6:26:f7:e8:7c:92:6b:13:0c:b5: c5:79:d1:32:12:60:14:0f:46:59:9f:49:a7:a3:76: 50:39:62:d6:0f:8a:a9:3c:d4:2d:10:0c:34:35:35: dc:b9:bc:dd:d0:e8:5b:56:72:76:51:83:b8:97:66: ea:1b:be:2e:9e:27:29:01:04:10:38:73:4e:7e:0f: 5f:0c:60:8b:b9:d7:4a:0e:84:17:a6:da:25:73:36: 44:4a:f4:d9:b2:9f:1f:ba:3f:00:f5:bf:dd:2b:fb: a6:9e:62:b3:96:c3:7d:dd:ee:63:f2:46:58:90:ee: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EB:9A:96:B6:67:EE:AC:0F:24:27:98:41:E7:73:2B:9D:B4:8A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:aa:c8:3c:1c:5b:76:24:f1:58:1f:00:67:c7:67:02:8d:2a: 39:5f:85:57:ec:e6:10:67:85:7d:7c:86:84:bf:b3:7f:16:08: 06:bc:1e:b1:e3:f5:fe:fa:c5:aa:a6:fb:e3:40:f1:89:24:ee: f4:3e:ba:7a:b4:e0:6e:12:2a:c2:6e:2c:6e:72:5a:1b:9e:87: 67:f2:dd:f1:ef:eb:ea:af:31:14:8a:4d:6a:11:46:68:1c:f3: 79:3f:ed:b7:a4:f4:80:bd:74:ef:24:74:99:d6:cc:96:73:15: 61:7f:73:df:c9:ca:9e:34:17:ad:d0:c9:bd:a1:78:77:8f:e0: cd:54:7a:0d:94:b4:b5:df:47:b8:94:ea:a1:f3:09:c5:57:f7: 7c:7b:ad:7c:8c:54:5f:a7:72:df:38:84:64:f3:4f:bf:6d:fb: 61:ac:4f:1f:5e:72:d0:bc:26:b8:58:06:10:f9:f9:40:43:76: f3:8f:c1:90:88:49:72:af:d1:46:0e:64:f3:21:89:d2:97:a2: cb:17:f2:cb:94:05:0b:4a:6b:f9:ac:a0:49:94:20:ed:2f:87: 55:cb:27:58:88:e4:cd:cc:a3:50:16:81:ff:d4:14:c8:d2:2b: 2e:7b:20:d8:41:80:65:cd:61:e7:8a:c4:cd:c6:91:49:91:d7: 41:1b:3a:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm9E7cIx+kETV8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDJlMDJlZjItM2QzZS00ODhkLTk1OGYtNWZjNmMzZWMzNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO+hrfHip0a1t83wTL7xXcO1UE+U5VwpcSVd W74YdQIVDThC4CR1f/CzfdCvAOiYOVk8Wir+RLi9II8QNI/IkRAapbi8YzAL5ok2 UEJLkIdC+Ndb0ncnQjTZWbk9QB27zbnqOHf3Jh75bSJj0cV6sH0sXZEamzMdzuiP kojKsvhXGCPvYYM6BswXg7Ym9+h8kmsTDLXFedEyEmAUD0ZZn0mno3ZQOWLWD4qp PNQtEAw0NTXcubzd0OhbVnJ2UYO4l2bqG74unicpAQQQOHNOfg9fDGCLuddKDoQX ptolczZESvTZsp8fuj8A9b/dK/umnmKzlsN93e5j8kZYkO5IjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErrmpa2Z+6sDyQnmEHncyudtIoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmRjMjlhMDItZGZjOC0z NGFiLThlZTktZTEzMTE3OTQzN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6qyDwcW3Yk8VgfAGfHZwKNKjlfhVfs5hBnhX18hoS/s38WCAa8HrHj 9f76xaqm++NA8Ykk7vQ+unq04G4SKsJuLG5yWhueh2fy3fHv6+qvMRSKTWoRRmgc 83k/7bek9IC9dO8kdJnWzJZzFWF/c9/Jyp40F63Qyb2heHeP4M1Ueg2UtLXfR7iU 6qHzCcVX93x7rXyMVF+nct84hGTzT79t+2GsTx9ectC8JrhYBhD5+UBDdvOPwZCI SXKv0UYOZPMhidKXossX8suUBQtKa/msoEmUIO0vh1XLJ1iI5M3Mo1AWgf/UFMjS Ky57INhBgGXNYeeKxM3GkUmR10EbOm0= -----END CERTIFICATE-----Generated at Sat Jun 13 10:30:53 2026 by rpki-client