$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32f738d-e272-3502-be6b-3b1726c0da29.roa File: f32f738d-e272-3502-be6b-3b1726c0da29.roa (raw, json) Hash identifier: SXQw3e7lY81V1j20KsaWCravqG8MO2Qft35POsxpNT4= Subject key identifier: 1C:21:E9:18:A0:EB:F9:75:C5:63:BF:58:87:DD:C7:77:F2:24:85:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8412332317210C8AA3326480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32f738d-e272-3502-be6b-3b1726c0da29.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:33:23:17:21:0c:8a:a3:32:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=84f3c420-5832-48f7-a9dc-71f9bc32209d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b0:cb:a3:5e:1d:a8:02:6c:aa:a5:bc:27:5f: 09:c9:0e:77:f8:0e:53:96:12:08:a2:bf:12:11:cb: d2:07:e6:44:ab:d7:33:d5:72:36:20:21:84:f7:0b: ab:ad:6d:12:ef:d3:b1:53:88:69:82:aa:ae:30:62: bd:6c:e8:31:60:6d:88:27:a4:30:4d:37:52:e4:42: 42:f0:71:87:4a:50:30:77:2a:1a:b4:9a:5e:10:41: 0e:55:07:25:05:98:20:33:81:59:16:10:cd:e4:96: 81:2c:c6:8d:68:df:d9:bc:81:81:6f:36:55:e3:2f: b4:6b:dc:af:f5:6c:7c:15:29:aa:9a:9a:4c:cd:9a: 8a:d2:f5:ff:81:15:d8:2d:7b:10:97:4b:29:19:c2: 28:c1:5a:40:8f:ae:79:d3:b0:f6:1c:e0:9c:be:12: 2d:f9:99:41:af:6f:6c:11:d1:9d:d2:5b:cb:34:3a: 83:ef:bc:c6:f1:aa:91:a0:ae:ee:29:87:eb:95:51: 62:34:d3:b6:f9:b9:8d:36:8b:fa:e1:4b:da:43:c2: 5d:d8:7c:39:15:a1:9f:02:29:ef:59:f3:33:9a:20: 26:02:20:bd:a4:40:1b:1e:6c:c9:39:87:36:62:ef: 02:e1:90:ae:58:6f:39:42:a5:d9:32:6b:35:b9:be: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:21:E9:18:A0:EB:F9:75:C5:63:BF:58:87:DD:C7:77:F2:24:85:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32f738d-e272-3502-be6b-3b1726c0da29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f7:9e:58:b3:0f:66:33:b0:c5:43:de:2f:34:0a:63:93:ba: 41:bc:f7:35:a9:18:88:29:b8:92:6c:d1:b2:f5:ae:fa:9d:be: 59:64:23:35:2a:5e:f4:c3:29:f2:11:fa:4b:f7:44:9d:48:82: 35:31:a5:fa:1c:77:9c:d3:74:20:20:d3:10:59:ba:53:b0:8a: 44:9c:2b:ed:38:f0:c6:e8:17:4a:df:e1:85:5c:7f:35:bd:64: a1:22:df:b0:2c:08:b0:96:84:61:7a:74:b9:e7:3e:6e:72:11: d8:cf:03:bf:8c:6d:5b:05:85:a8:73:62:03:8d:0b:0c:da:52: d1:9f:ef:66:ec:ac:66:9f:ea:0b:f6:b6:f9:86:f0:02:6f:96: a2:37:d8:1c:3f:cb:79:c5:82:47:ac:97:10:51:4d:1d:f1:18: 6e:8c:d2:09:db:d5:1f:4a:69:ed:8d:a3:87:cc:51:38:25:0c: f4:7e:04:db:6d:23:21:e7:2e:15:18:37:30:1c:79:1f:e2:5e: 07:17:c5:5e:6b:73:95:ed:35:a8:39:c2:42:90:eb:90:3c:14: f1:e0:30:e0:10:b9:d5:a5:3e:19:1e:a1:bb:d2:16:2f:65:cb: a9:79:b4:80:37:45:38:9a:ab:8f:63:d3:89:e3:6c:8e:a0:bc: cb:6c:c1:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjMjFyEMiqMyZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODRmM2M0MjAtNTgzMi00OGY3LWE5ZGMtNzFmOWJjMzIyMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrDLo14dqAJsqqW8J18JyQ53+A5TlhIIor8S EcvSB+ZEq9cz1XI2ICGE9wurrW0S79OxU4hpgqquMGK9bOgxYG2IJ6QwTTdS5EJC 8HGHSlAwdyoatJpeEEEOVQclBZggM4FZFhDN5JaBLMaNaN/ZvIGBbzZV4y+0a9yv 9Wx8FSmqmppMzZqK0vX/gRXYLXsQl0spGcIowVpAj65507D2HOCcvhIt+ZlBr29s EdGd0lvLNDqD77zG8aqRoK7uKYfrlVFiNNO2+bmNNov64UvaQ8Jd2Hw5FaGfAinv WfMzmiAmAiC9pEAbHmzJOYc2Yu8C4ZCuWG85QqXZMms1ub6V0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwh6Rig6/l1xWO/WIfdx3fyJIUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjMyZjczOGQtZTI3Mi0z NTAyLWJlNmItM2IxNzI2YzBkYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz3nlizD2YzsMVD3i80CmOTukG89zWpGIgpuJJs0bL1rvqdvllkIzUq XvTDKfIR+kv3RJ1IgjUxpfocd5zTdCAg0xBZulOwikScK+048MboF0rf4YVcfzW9 ZKEi37AsCLCWhGF6dLnnPm5yEdjPA7+MbVsFhahzYgONCwzaUtGf72bsrGaf6gv2 tvmG8AJvlqI32Bw/y3nFgkeslxBRTR3xGG6M0gnb1R9Kae2No4fMUTglDPR+BNtt IyHnLhUYNzAceR/iXgcXxV5rc5XtNag5wkKQ65A8FPHgMOAQudWlPhkeobvSFi9l y6l5tIA3RTiaq49j04njbI6gvMtswSE= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:12 2025 by rpki-client