$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa File: dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa (raw, json) Hash identifier: 2cyi37TFGReuy9sBO60QFIdJJ3oMt7L7lnbzT0wX8yo= Subject key identifier: C4:78:FB:0C:09:25:F7:37:13:D9:3F:EA:8E:2E:63:5D:1B:2C:59:DC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DF4DB77836446CD193DE43284 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 15169 IP address blocks: 172.217.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:77:83:64:46:cd:19:3d:e4:32:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=7b762e1f-4eef-451f-a6fd-65dfc57a3e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:21:08:68:a4:cc:a0:03:26:84:c7:4e:a1: 3c:bc:32:94:ec:75:4e:61:32:04:04:44:c2:d5:e2: d9:57:29:1c:dc:d0:c6:9b:45:ca:64:80:7e:96:3d: fa:1b:69:61:a9:8e:92:05:71:67:c5:a9:57:f1:37: 7e:28:30:b5:32:dc:6a:ae:7c:f6:74:92:ae:ec:5d: 0a:f8:bd:d7:15:d7:89:c6:84:48:cf:83:28:bf:bb: 80:ad:ae:4e:ae:c3:f3:40:d4:23:b7:96:5a:f8:8d: c8:a0:34:26:fd:77:93:63:c0:38:88:4e:e5:31:4b: 08:ae:1c:8e:10:65:13:af:c2:cd:3a:89:3a:e0:ff: 13:d3:4e:fe:11:8a:f3:fa:5f:d4:00:fc:ed:6f:8b: 4c:93:8e:c6:b8:98:7e:dc:26:72:b7:8a:b5:16:41: a4:fb:a2:4f:dc:d6:ef:69:63:da:4d:25:31:d8:e7: 48:49:5e:73:71:ad:be:fa:45:46:5b:0f:36:0f:db: 1f:55:99:15:ed:ce:fb:40:7a:5a:18:1e:da:1e:3e: 73:1c:05:07:97:d5:a4:74:fe:99:61:37:a1:c0:1e: cd:a4:2d:00:c9:10:24:d2:e0:80:97:35:e6:f8:fc: 80:b4:e6:c6:11:6f:b0:76:e6:3a:8f:dc:74:88:db: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:78:FB:0C:09:25:F7:37:13:D9:3F:EA:8E:2E:63:5D:1B:2C:59:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b1:89:a6:e8:87:00:7c:75:80:99:88:98:bd:af:13:1d:0d: 1a:db:f7:80:50:e2:bc:f0:e1:be:94:2b:b0:a8:d3:21:c6:c1: 42:67:c6:d1:37:f7:77:d3:6c:1d:4d:2f:64:d8:56:4d:34:ec: 86:7b:e4:6a:66:b9:55:d6:06:4f:84:5e:2f:8b:4f:37:08:73: 8f:28:69:7e:ab:90:e5:f6:2e:48:27:e8:08:d0:c3:b8:a3:e1: db:fc:8b:53:ac:5d:a4:b3:1e:ed:48:f3:58:25:ec:3f:d7:32: 40:5e:25:e4:57:74:05:d4:d2:f9:e8:a3:53:51:c7:c4:81:2e: 56:d6:b2:22:28:ac:21:d7:e8:72:b2:4e:21:a7:a5:91:e9:d5: 4f:37:54:54:c1:bc:9f:21:dc:eb:cc:0f:4e:e1:79:42:4f:32: 36:9a:5f:92:be:e8:84:c0:24:7a:e9:eb:bb:93:36:56:ab:54: 7e:54:d7:07:eb:95:00:8a:b7:48:9c:f8:0e:b0:32:ad:5e:00: f6:47:60:c6:44:39:41:a8:32:a7:e3:9f:54:26:6a:b7:79:64: 28:02:e9:a3:1a:ff:95:f7:f0:39:28:64:53:74:b8:cc:cf:8b: 42:da:d3:34:0b:ee:27:4d:bd:2a:d9:4a:4f:e6:c6:ad:72:51: f8:98:88:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3023eDZEbNGT3kMoQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk N2I3NjJlMWYtNGVlZi00NTFmLWE2ZmQtNjVkZmM1N2EzZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw0hCGikzKADJoTHTqE8vDKU7HVOYTIEBETC 1eLZVykc3NDGm0XKZIB+lj36G2lhqY6SBXFnxalX8Td+KDC1Mtxqrnz2dJKu7F0K +L3XFdeJxoRIz4Mov7uAra5OrsPzQNQjt5Za+I3IoDQm/XeTY8A4iE7lMUsIrhyO EGUTr8LNOok64P8T007+EYrz+l/UAPztb4tMk47GuJh+3CZyt4q1FkGk+6JP3Nbv aWPaTSUx2OdISV5zca2++kVGWw82D9sfVZkV7c77QHpaGB7aHj5zHAUHl9WkdP6Z YTehwB7NpC0AyRAk0uCAlzXm+PyAtObGEW+wduY6j9x0iNt1uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR4+wwJJfc3E9k/6o4uY10bLFncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZiOGM1ZmYtNDA0NS0z NzJmLWJiMzEtOTNmNTE2NTFjMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKxiabohwB8dYCZiJi9rxMdDRrb94BQ4rzw4b6UK7Co0yHGwUJnxtE3 93fTbB1NL2TYVk007IZ75GpmuVXWBk+EXi+LTzcIc48oaX6rkOX2Lkgn6AjQw7ij 4dv8i1OsXaSzHu1I81gl7D/XMkBeJeRXdAXU0vnoo1NRx8SBLlbWsiIorCHX6HKy TiGnpZHp1U83VFTBvJ8h3OvMD07heUJPMjaaX5K+6ITAJHrp67uTNlarVH5U1wfr lQCKt0ic+A6wMq1eAPZHYMZEOUGoMqfjn1Qmard5ZCgC6aMa/5X38DkoZFN0uMzP i0La0zQL7idNvSrZSk/mxq1yUfiYiD4= -----END CERTIFICATE-----Generated at Sat Jun 13 13:14:21 2026 by rpki-client