$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa File: a061a393-c24b-3e7d-890c-891cf39b13c9.roa (raw, json) Hash identifier: 23B+8bB2PKJ6IJhO+PyI5g3xq+KxNHp3F8AbTfpuuW0= Subject key identifier: 2E:CD:FB:75:AA:A0:A6:88:05:B8:D3:8D:D6:10:07:B4:47:D2:85:18 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EC0A7548A96DF7A0180309E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:54:8a:96:df:7a:01:80:30:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=aa003d43-3783-4b74-8734-cb4d672dae58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:a7:99:3a:5b:f4:ec:d9:92:eb:80:59:65: f1:9e:e5:19:f5:d4:c3:cb:59:aa:0b:b7:c3:1e:4d: 56:67:54:db:1d:08:be:21:4e:77:33:d8:1e:1b:96: 14:ca:76:ee:a0:a7:a5:c2:3c:e5:75:cd:13:da:d0: e8:3a:bb:1d:35:3e:cc:a3:2d:56:1e:3b:31:e6:b0: d4:94:f3:27:f2:30:ba:10:a5:32:b1:66:f8:98:82: d5:46:b2:8b:e5:0b:54:b1:ce:6d:4c:f7:f5:8d:96: fd:d5:1e:c2:c0:fc:74:5f:e2:b9:b1:e0:8d:91:2d: c5:dd:37:e2:88:a3:aa:62:c2:12:49:a1:2b:0e:05: c0:69:62:ba:ab:e1:9f:c1:12:a9:f9:0f:32:67:5d: 47:a1:c3:f4:58:0b:dd:a2:ad:09:91:98:9a:8b:be: 43:a2:2a:3b:2f:30:c8:4a:ed:9c:e6:d9:0d:b5:90: 3b:f6:73:89:cc:9d:11:51:f6:17:c9:2f:ef:98:f8: 6f:57:a3:3f:ac:c5:ff:ec:20:38:db:57:06:fd:21: 97:49:f4:00:db:58:30:27:3a:c6:c5:f5:da:5e:a7: 45:b4:0b:4d:df:10:45:e8:e7:61:13:c1:a0:b4:6c: 72:df:57:6e:7d:25:b2:28:68:61:15:74:7a:c3:d6: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CD:FB:75:AA:A0:A6:88:05:B8:D3:8D:D6:10:07:B4:47:D2:85:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:de:25:f0:d5:a5:53:87:80:20:ff:35:46:ee:43:5f:10:66: 6e:1e:5d:d3:9c:19:19:81:66:f0:4f:26:66:c7:ee:a8:bc:37: 6b:14:25:80:a1:b5:f4:74:4e:6d:eb:bc:86:e2:3c:b3:d8:e7: 3a:8e:b1:70:c9:1e:cd:50:ff:20:dc:76:2f:a6:56:c5:40:3b: f0:d9:a0:8e:49:42:b0:92:59:84:64:cc:d2:86:18:af:ae:19: 86:9f:7c:16:61:6f:2b:cf:58:a6:ba:7d:61:52:c5:8e:83:31: b3:14:22:32:4f:91:ea:4d:8a:92:24:53:31:33:c3:12:8d:ba: b0:74:c0:6c:ee:60:4f:e1:01:20:ce:56:58:c4:2b:00:65:16: 19:74:70:7d:0f:3d:60:b6:ae:6d:c3:e1:42:6d:5c:54:4e:93: 53:3f:35:b7:83:d9:63:f5:30:b9:fd:a2:df:22:db:7f:9b:78: 04:b2:2b:3d:cc:21:8d:26:4c:da:fe:c1:ab:aa:62:61:00:04: c7:54:c8:a8:9c:ce:6b:ed:eb:30:89:6b:ea:4d:21:48:9b:2c: 64:57:db:2e:8e:3a:14:8f:7c:0d:96:6b:38:f5:cd:c3:45:91: dc:bb:7d:93:de:88:ce:b1:e9:c6:aa:4f:c2:48:da:2e:47:a2: af:96:06:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap1SKlt96AYAwnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk YWEwMDNkNDMtMzc4My00Yjc0LTg3MzQtY2I0ZDY3MmRhZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PWnmTpb9OzZkuuAWWXxnuUZ9dTDy1mqC7fD Hk1WZ1TbHQi+IU53M9geG5YUynbuoKelwjzldc0T2tDoOrsdNT7Moy1WHjsx5rDU lPMn8jC6EKUysWb4mILVRrKL5QtUsc5tTPf1jZb91R7CwPx0X+K5seCNkS3F3Tfi iKOqYsISSaErDgXAaWK6q+GfwRKp+Q8yZ11HocP0WAvdoq0JkZiai75Doio7LzDI Su2c5tkNtZA79nOJzJ0RUfYXyS/vmPhvV6M/rMX/7CA421cG/SGXSfQA21gwJzrG xfXaXqdFtAtN3xBF6OdhE8GgtGxy31dufSWyKGhhFXR6w9YacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7N+3WqoKaIBbjTjdYQB7RH0oUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA2MWEzOTMtYzI0Yi0z ZTdkLTg5MGMtODkxY2YzOWIxM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/eJfDVpVOHgCD/NUbuQ18QZm4eXdOcGRmBZvBPJmbH7qi8N2sUJYCh tfR0Tm3rvIbiPLPY5zqOsXDJHs1Q/yDcdi+mVsVAO/DZoI5JQrCSWYRkzNKGGK+u GYaffBZhbyvPWKa6fWFSxY6DMbMUIjJPkepNipIkUzEzwxKNurB0wGzuYE/hASDO VljEKwBlFhl0cH0PPWC2rm3D4UJtXFROk1M/NbeD2WP1MLn9ot8i23+beASyKz3M IY0mTNr+wauqYmEABMdUyKiczmvt6zCJa+pNIUibLGRX2y6OOhSPfA2Wazj1zcNF kdy7fZPeiM6x6caqT8JI2i5Hoq+WBrs= -----END CERTIFICATE-----Generated at Fri Aug 7 21:46:07 2026 by rpki-client