$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa File: 640ab488-921d-3ed3-a072-3005686e58b7.roa (raw, json) Hash identifier: fX77e7LnqdwOF3ElztfI8s9qSHqTnvZ38cDGWcA8pgE= Subject key identifier: 2C:C7:28:B1:7A:2D:E5:9E:F8:B5:A2:0A:68:E5:39:25:D0:ED:CD:44 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79EB946C4B35194758DC180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.217.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:b9:46:c4:b3:51:94:75:8d:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4620ea90-e9b7-4e0b-84f6-d109c5e1601d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:31:b6:6b:95:10:71:72:4a:a3:8f:17:b9: e0:4a:54:7b:de:2b:5c:a5:ec:ea:72:ca:ba:bb:62: 83:34:b6:5d:49:7e:e9:3c:7d:dd:1e:d1:b4:76:c3: 1f:49:ab:9a:dc:d7:f4:7e:6a:70:7e:50:75:ea:a9: 25:6e:05:91:ba:60:73:a2:56:b4:b2:f0:ab:d9:03: 5e:78:8b:29:2e:60:76:8e:09:fd:6f:1e:11:84:66: 74:30:82:e1:29:6d:10:ea:59:d7:56:16:a8:78:43: 4c:70:e0:37:ca:ec:65:48:27:1b:e0:ee:67:94:a8: 0d:e7:9e:9c:d7:fd:2b:5e:f5:df:80:d5:d6:5a:05: 40:26:bb:32:49:cd:f8:b6:f8:d1:a4:b0:9e:29:fd: 56:a8:68:26:d5:44:a0:16:27:bd:08:45:97:bf:62: 5c:42:02:f0:cd:22:71:5b:eb:4a:d8:6b:e7:1a:ab: f0:c8:84:89:59:58:eb:80:61:d4:7e:35:36:8b:e9: 2e:4e:9e:36:3d:ea:bf:11:8c:b3:9a:f7:97:ba:8e: 77:6f:3d:0a:32:c3:62:0b:a6:d9:95:db:d6:4f:80: f5:7b:14:a8:23:54:a6:1c:65:f3:a2:c2:82:4b:ca: 3c:43:d7:52:c0:f3:f8:ac:39:30:8a:d6:30:79:63: 4b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C7:28:B1:7A:2D:E5:9E:F8:B5:A2:0A:68:E5:39:25:D0:ED:CD:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:db:99:52:fb:9d:c7:db:bc:b2:00:e6:79:8d:f2:bd:37:6e: 19:b9:10:0c:bc:4f:eb:8c:24:17:ce:c9:d2:ff:e1:58:eb:16: 38:cd:eb:64:08:7d:0b:09:b7:9c:0e:5b:77:ad:a9:0b:63:e2: ed:c0:b6:fb:16:2a:c7:48:5e:c7:ab:96:f5:55:3b:2a:2b:2a: a3:59:e1:2c:aa:53:4b:15:e1:ff:a5:19:44:b7:f3:c3:43:15: 0c:21:aa:c4:f4:8a:7e:b7:cd:2f:8b:84:e6:c3:47:f2:b5:4e: 65:2a:33:21:c4:c4:5a:91:f7:10:75:4c:3b:ab:cb:9d:56:35: ba:3d:94:55:82:f9:2c:a2:c1:d4:17:19:7f:e6:2c:6d:94:5b: 03:68:18:a2:20:bb:e4:9d:e7:c3:85:31:ba:75:bf:58:bf:4d: d6:48:79:9a:0b:96:d0:77:71:12:90:8b:3c:f6:82:1c:49:0a: 16:03:c6:52:88:ed:77:78:73:b4:d0:86:f5:7e:96:13:e0:b2: c5:dd:3f:83:30:93:dc:8a:41:8e:4c:0e:28:e8:86:c5:4d:d5: 56:64:6b:fe:fc:98:92:c9:4e:91:4c:7c:d0:1d:82:08:c6:e8: dc:7e:28:5b:b5:46:91:4b:90:d4:bc:c5:e0:76:82:3c:61:8a: 97:43:52:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnrlGxLNRlHWNwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDYyMGVhOTAtZTliNy00ZTBiLTg0ZjYtZDEwOWM1ZTE2MDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWQxtmuVEHFySqOPF7ngSlR73itcpezqcsq6 u2KDNLZdSX7pPH3dHtG0dsMfSaua3Nf0fmpwflB16qklbgWRumBzola0svCr2QNe eIspLmB2jgn9bx4RhGZ0MILhKW0Q6lnXVhaoeENMcOA3yuxlSCcb4O5nlKgN556c 1/0rXvXfgNXWWgVAJrsySc34tvjRpLCeKf1WqGgm1USgFie9CEWXv2JcQgLwzSJx W+tK2GvnGqvwyISJWVjrgGHUfjU2i+kuTp42Peq/EYyzmveXuo53bz0KMsNiC6bZ ldvWT4D1exSoI1SmHGXzosKCS8o8Q9dSwPP4rDkwitYweWNLzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzHKLF6LeWe+LWiCmjlOSXQ7c1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQwYWI0ODgtOTIxZC0z ZWQzLWEwNzItMzAwNTY4NmU1OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjbmVL7ncfbvLIA5nmN8r03bhm5EAy8T+uMJBfOydL/4VjrFjjN62QI fQsJt5wOW3etqQtj4u3AtvsWKsdIXserlvVVOyorKqNZ4SyqU0sV4f+lGUS388ND FQwhqsT0in63zS+LhObDR/K1TmUqMyHExFqR9xB1TDury51WNbo9lFWC+SyiwdQX GX/mLG2UWwNoGKIgu+Sd58OFMbp1v1i/TdZIeZoLltB3cRKQizz2ghxJChYDxlKI 7Xd4c7TQhvV+lhPgssXdP4Mwk9yKQY5MDijohsVN1VZka/78mJLJTpFMfNAdggjG 6Nx+KFu1RpFLkNS8xeB2gjxhipdDUlk= -----END CERTIFICATE-----Generated at Fri Aug 7 21:47:10 2026 by rpki-client