$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa File: dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa (raw, json) Hash identifier: uvtqnBCFdG8OqU/ZcZlXGWHMp8IPs+WOD7zVxggy0Zw= Subject key identifier: DC:DE:96:CA:E5:E4:89:B9:5B:E7:67:48:B0:3A:06:24:4E:9B:11:5F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA796A685B808FF9DA441B780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.217.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:a6:85:b8:08:ff:9d:a4:41:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=86e186dd-fe24-4bdf-89bc-89a52e5175bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:26:69:db:c1:a8:70:0a:2d:cf:bd:9d:bb:f2: 2f:af:06:0f:b6:f9:5b:96:25:04:67:93:ae:35:e6: 11:3c:ec:af:75:cc:5c:a3:c9:b1:d9:86:67:65:fc: 63:c1:56:d4:d5:d2:49:26:fa:73:02:ea:b7:f5:6f: 2d:62:47:1c:f3:cb:b3:99:97:70:8a:a9:49:8f:7c: 76:5d:d8:2c:1f:e4:5e:c5:86:23:b2:45:10:5f:65: 78:df:0c:24:76:ca:c5:d0:3e:85:1b:cc:87:d7:80: 0b:a5:fb:69:9e:47:92:c2:3c:a2:c2:66:de:f8:46: e7:43:75:89:6b:89:81:1e:ab:e7:be:b3:8c:f1:36: 63:a7:50:b6:11:26:0f:bb:7f:b9:95:5d:99:cb:5e: d4:8b:76:5f:b3:d9:0c:2c:30:ef:30:bb:d5:77:9a: 13:5e:93:4b:f0:60:3b:66:9b:1a:9d:92:f8:f8:87: 98:03:b8:55:7a:15:54:43:ee:21:38:44:02:41:4f: f8:ca:b7:8d:5b:03:3b:42:8a:d1:da:24:ac:46:0c: 26:13:07:a9:f0:e1:78:4d:7a:c7:7a:0c:1e:5a:10: d4:ae:c4:07:de:cd:7e:c7:e5:30:69:20:2c:0e:79: 1a:ae:64:6a:b6:c3:85:9d:64:f4:18:d2:ca:06:56: 54:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DE:96:CA:E5:E4:89:B9:5B:E7:67:48:B0:3A:06:24:4E:9B:11:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d3:02:85:53:6b:18:8f:ba:4e:6f:49:9f:be:57:56:20:d3: 38:a0:e6:d8:6b:6c:59:03:aa:c8:63:d6:be:44:5e:a5:81:2a: 07:d6:5c:fc:11:bd:0b:c5:c2:12:eb:5b:ef:0e:ef:16:04:ba: 28:3b:c4:73:4a:8d:ad:bd:0d:d3:88:e1:7f:05:25:39:ee:f2: b1:92:e8:fc:af:eb:07:de:a0:ae:3d:47:e8:40:93:88:1e:c2: be:19:6b:5d:dd:20:23:c2:0e:d5:22:5f:d6:d8:af:fe:7f:9c: a8:cd:9b:80:3f:6f:ea:3c:f7:43:f6:13:74:8f:c4:b5:60:df: 32:41:3c:55:77:9f:4d:ed:63:8a:e6:a0:09:c8:a1:42:aa:ec: 03:2a:ce:dc:0a:3b:73:ac:d1:36:b1:f6:f4:11:e2:cb:ad:1a: 06:56:ad:fa:98:03:cf:d1:98:39:7c:bf:4a:d4:95:29:17:ac: bf:f4:06:cf:83:7e:b0:ea:ca:04:3d:2e:19:da:af:82:59:bf: ca:9f:3a:44:89:3c:a6:57:76:28:77:82:44:a6:e4:ab:cf:2d: b1:34:36:20:a9:54:fb:9f:dc:7a:02:fb:ae:f0:7d:c6:b8:18: 5f:96:7a:00:24:44:f1:db:14:70:17:b4:34:9b:7b:ea:6a:8e: fb:8c:96:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlqaFuAj/naRBt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODZlMTg2ZGQtZmUyNC00YmRmLTg5YmMtODlhNTJlNTE3NWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySZp28GocAotz72du/IvrwYPtvlbliUEZ5Ou NeYRPOyvdcxco8mx2YZnZfxjwVbU1dJJJvpzAuq39W8tYkcc88uzmZdwiqlJj3x2 XdgsH+RexYYjskUQX2V43wwkdsrF0D6FG8yH14ALpftpnkeSwjyiwmbe+EbnQ3WJ a4mBHqvnvrOM8TZjp1C2ESYPu3+5lV2Zy17Ui3Zfs9kMLDDvMLvVd5oTXpNL8GA7 ZpsanZL4+IeYA7hVehVUQ+4hOEQCQU/4yreNWwM7QorR2iSsRgwmEwep8OF4TXrH egweWhDUrsQH3s1+x+UwaSAsDnkarmRqtsOFnWT0GNLKBlZULwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzelsrl5Im5W+dnSLA6BiROmxFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZiOGM1ZmYtNDA0NS0z NzJmLWJiMzEtOTNmNTE2NTFjMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbTAoVTaxiPuk5vSZ++V1Yg0zig5thrbFkDqshj1r5EXqWBKgfWXPwR vQvFwhLrW+8O7xYEuig7xHNKja29DdOI4X8FJTnu8rGS6Pyv6wfeoK49R+hAk4ge wr4Za13dICPCDtUiX9bYr/5/nKjNm4A/b+o890P2E3SPxLVg3zJBPFV3n03tY4rm oAnIoUKq7AMqztwKO3Os0Tax9vQR4sutGgZWrfqYA8/RmDl8v0rUlSkXrL/0Bs+D frDqygQ9Lhnar4JZv8qfOkSJPKZXdih3gkSm5KvPLbE0NiCpVPuf3HoC+67wfca4 GF+WegAkRPHbFHAXtDSbe+pqjvuMlvg= -----END CERTIFICATE-----Generated at Wed Jul 29 04:08:37 2026 by rpki-client