$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5fa89d53-c65a-344e-8232-29b9daa5f984.roa File: 5fa89d53-c65a-344e-8232-29b9daa5f984.roa (raw, json) Hash identifier: xL0mJiFSdB7kPgR7AbxL4lOslW83bkITeUlZy8aM9NE= Subject key identifier: 58:7C:CD:3F:74:93:87:11:75:A7:5E:BB:74:09:2E:92:9E:B0:1A:C2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EAD1C4B894E47A06925DDFE40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5fa89d53-c65a-344e-8232-29b9daa5f984.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 15169 IP address blocks: 172.217.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:4b:89:4e:47:a0:69:25:dd:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=25c95149-c57e-46fe-89af-7ac8d762cc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:98:fd:b7:86:f6:31:db:c1:64:be:f8:0b:19: a0:0c:fd:e0:74:ef:ec:f2:c9:1a:0b:96:6f:b1:e7: 21:cb:29:0b:26:44:d0:dd:2e:a9:73:dc:43:27:b3: 9b:3a:38:cd:4d:7c:e8:19:8b:d3:8a:b7:ae:f7:52: fc:39:cc:e1:12:a5:d8:d3:d0:87:2c:a5:60:a2:52: 93:cb:6b:02:93:c7:4e:8a:90:db:e2:3c:ff:7f:e8: a0:da:e6:45:25:a7:ba:3d:e6:57:85:9b:2a:e1:21: 1e:c2:d8:84:02:c3:5e:b7:fa:f7:52:35:d1:7b:5c: 03:b5:a5:a7:d8:65:cd:23:86:c0:fa:4d:d7:23:de: f1:9a:53:da:ef:be:71:c1:dd:05:c1:50:0b:8d:ea: 02:c7:4b:2e:d5:2e:1e:59:36:6f:76:0d:cb:bf:23: 11:0d:27:dc:a3:47:01:9a:7f:fc:0c:b6:cb:9a:80: 07:a7:2c:a7:dd:99:92:f7:13:9b:9a:47:ce:71:ce: ea:77:32:22:03:d0:fa:29:98:55:5a:73:1b:46:d1: 01:12:65:26:34:29:a0:ca:da:d9:57:d3:65:4a:49: 0d:3e:c5:1f:d2:2a:be:d6:ac:6b:b8:35:3e:87:1e: a5:2f:e8:f5:5f:2f:6e:ab:08:5d:0d:6d:e0:e9:3b: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7C:CD:3F:74:93:87:11:75:A7:5E:BB:74:09:2E:92:9E:B0:1A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5fa89d53-c65a-344e-8232-29b9daa5f984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:63:3b:2a:23:26:8e:a5:e0:a1:d1:bb:7d:87:46:b0:4a:a4: b8:64:a0:44:33:70:80:e3:4a:76:8f:28:5b:e8:11:6d:66:be: 38:71:f3:4d:5e:46:f9:2e:ec:e9:bc:41:6a:2b:a8:8d:23:3e: 1a:93:4f:6a:0e:5d:60:c7:bb:40:21:aa:4d:fc:6b:a9:2f:5a: 66:75:51:f3:84:83:35:0e:bf:65:d5:a7:f0:15:52:f0:6c:25: 1f:c6:b7:9d:3c:23:05:3f:4d:75:25:69:7d:b4:a5:ca:62:ce: de:d3:c4:25:07:ef:16:f3:dc:be:9d:1d:d5:51:11:d7:3c:28: fb:5d:eb:b4:e2:a8:64:f8:eb:b3:6f:80:91:b9:c8:e9:90:4e: 93:0f:bb:b7:b8:17:bf:64:7c:7e:86:f2:35:cd:bb:97:75:a6: 64:94:8a:e9:d6:b1:d5:97:42:25:7f:2d:99:14:41:77:22:64: a8:b6:2d:ba:e2:51:f8:d6:b2:10:c8:12:6f:5b:4d:6a:1b:c3: 20:a3:ec:75:f3:3d:8e:06:c2:26:e9:fa:65:19:a0:a0:fb:fe: 8b:4b:80:11:6b:de:62:54:1e:a9:57:f0:cc:99:9f:bf:f9:a8: a6:1b:3e:7d:6f:70:47:af:f7:81:2b:15:d8:85:c8:fb:56:44: 82:61:8e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHEuJTkegaSXd/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk MjVjOTUxNDktYzU3ZS00NmZlLTg5YWYtN2FjOGQ3NjJjYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJj9t4b2MdvBZL74CxmgDP3gdO/s8skaC5Zv sechyykLJkTQ3S6pc9xDJ7ObOjjNTXzoGYvTireu91L8OczhEqXY09CHLKVgolKT y2sCk8dOipDb4jz/f+ig2uZFJae6PeZXhZsq4SEewtiEAsNet/r3UjXRe1wDtaWn 2GXNI4bA+k3XI97xmlPa775xwd0FwVALjeoCx0su1S4eWTZvdg3LvyMRDSfco0cB mn/8DLbLmoAHpyyn3ZmS9xObmkfOcc7qdzIiA9D6KZhVWnMbRtEBEmUmNCmgytrZ V9NlSkkNPsUf0iq+1qxruDU+hx6lL+j1Xy9uqwhdDW3g6TuYfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFh8zT90k4cRdadeu3QJLpKesBrCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWZhODlkNTMtYzY1YS0z NDRlLTgyMzItMjliOWRhYTVmOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5jOyojJo6l4KHRu32HRrBKpLhkoEQzcIDjSnaPKFvoEW1mvjhx801e Rvku7Om8QWorqI0jPhqTT2oOXWDHu0Ahqk38a6kvWmZ1UfOEgzUOv2XVp/AVUvBs JR/Gt508IwU/TXUlaX20pcpizt7TxCUH7xbz3L6dHdVREdc8KPtd67TiqGT467Nv gJG5yOmQTpMPu7e4F79kfH6G8jXNu5d1pmSUiunWsdWXQiV/LZkUQXciZKi2Lbri UfjWshDIEm9bTWobwyCj7HXzPY4Gwibp+mUZoKD7/otLgBFr3mJUHqlX8MyZn7/5 qKYbPn1vcEev94ErFdiFyPtWRIJhjng= -----END CERTIFICATE-----Generated at Fri Aug 7 21:43:49 2026 by rpki-client