$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa File: eccc049d-f39e-3a01-8af3-e167539adf3d.roa (raw, json) Hash identifier: 5lRVEJien+HNmm9z02VWuYAM6IRF45bhZpE/4dZluFk= Subject key identifier: 3D:8D:9C:C9:E2:76:BC:1B:17:ED:81:B9:3A:F4:40:43:43:5E:54:47 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EC0A7379F12F24E20AA142520 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:37:9f:12:f2:4e:20:aa:14:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=25b5b9b5-2f1f-4891-ab8d-70f1b9b4b34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:cf:4c:71:6e:71:e3:d2:46:1a:df:56:7b: 00:2f:b0:ed:75:ac:4b:64:7e:02:0d:db:b7:4d:e1: d8:ae:23:18:18:e2:81:1e:e9:c5:fe:d2:ef:67:67: ed:d6:d0:f4:0c:0b:f3:71:44:bb:33:c7:e5:78:e6: 7e:9d:2a:25:52:d7:ca:ee:82:01:9f:2b:ec:dd:4f: de:6d:c8:2c:e0:84:c4:3f:0f:7c:20:a4:79:6c:ed: 57:ca:51:a3:b6:0b:a6:85:b5:79:d2:d6:c4:91:65: 4d:f0:5d:09:b8:6a:81:d3:c4:fd:57:46:6e:55:d5: b3:4b:d6:e6:04:dc:91:55:52:c2:de:62:74:43:e7: ed:55:f8:58:6d:dc:0c:a3:ba:9c:42:54:de:11:54: 14:36:83:d7:49:41:23:8a:68:5c:2d:54:67:15:67: d9:70:16:cf:14:92:9e:6a:c7:b4:45:2b:aa:79:ff: 56:34:82:74:71:17:93:9d:77:71:91:00:28:e7:24: 7e:6d:05:5b:f0:77:dd:d2:9f:6c:ba:1b:df:44:02: 15:d6:d4:b7:60:74:21:22:4d:58:45:da:3b:dc:f1: 05:ea:1a:8b:45:2d:8c:98:c7:94:11:ab:31:13:8a: 89:8b:66:fd:f1:18:2e:8a:82:77:ec:96:54:54:ec: 0a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8D:9C:C9:E2:76:BC:1B:17:ED:81:B9:3A:F4:40:43:43:5E:54:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:44:3b:29:dd:80:51:e0:f5:02:c7:2f:f5:e3:84:4d:5e:cb: dc:66:6c:e1:b5:bf:a0:9e:61:e8:55:9c:45:c9:5e:04:90:ef: c0:c7:69:f0:3f:89:48:0a:1d:df:1d:07:aa:ef:2f:0e:22:95: eb:20:c7:bb:f3:e0:1b:3d:de:41:8b:cb:63:59:bc:67:14:dc: c9:b8:1b:f0:2e:e8:3e:15:5f:c7:c9:ed:b0:d3:4b:33:eb:62: c1:8d:36:9a:bc:37:f1:2b:8a:e4:fe:d3:02:ee:0e:65:3c:5f: ff:0e:7c:30:a4:22:90:e4:d0:f6:bd:cb:70:7c:3b:bc:a8:14: 7e:a3:5d:82:15:3d:81:af:20:94:d1:d7:7f:11:35:2c:b5:49: a0:18:7c:47:ab:7d:c5:58:d7:fc:f6:a7:9b:59:dc:b9:53:6e: 52:a8:d7:69:cb:b2:47:4c:26:39:9d:65:c7:96:28:60:77:ff: 57:7a:04:02:47:da:bd:a8:bc:ce:42:6d:9f:1c:62:86:08:4f: 36:c3:68:73:3e:a3:c1:00:cf:12:29:72:a8:28:0d:e0:a2:92: 40:2e:1d:88:3c:56:c5:2a:f1:a5:14:df:54:1f:f1:db:d1:3a: 24:97:1c:d9:21:51:4f:46:f5:9d:2b:1d:34:66:06:77:4e:84: 4f:dc:ba:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApzefEvJOIKoUJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk MjViNWI5YjUtMmYxZi00ODkxLWFiOGQtNzBmMWI5YjRiMzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1vPTHFucePSRhrfVnsAL7DtdaxLZH4CDdu3 TeHYriMYGOKBHunF/tLvZ2ft1tD0DAvzcUS7M8fleOZ+nSolUtfK7oIBnyvs3U/e bcgs4ITEPw98IKR5bO1XylGjtgumhbV50tbEkWVN8F0JuGqB08T9V0ZuVdWzS9bm BNyRVVLC3mJ0Q+ftVfhYbdwMo7qcQlTeEVQUNoPXSUEjimhcLVRnFWfZcBbPFJKe ase0RSuqef9WNIJ0cReTnXdxkQAo5yR+bQVb8Hfd0p9suhvfRAIV1tS3YHQhIk1Y Rdo73PEF6hqLRS2MmMeUEasxE4qJi2b98RguioJ37JZUVOwKWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2NnMnidrwbF+2BuTr0QENDXlRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWNjYzA0OWQtZjM5ZS0z YTAxLThhZjMtZTE2NzUzOWFkZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdEOyndgFHg9QLHL/XjhE1ey9xmbOG1v6CeYehVnEXJXgSQ78DHafA/ iUgKHd8dB6rvLw4ilesgx7vz4Bs93kGLy2NZvGcU3Mm4G/Au6D4VX8fJ7bDTSzPr YsGNNpq8N/EriuT+0wLuDmU8X/8OfDCkIpDk0Pa9y3B8O7yoFH6jXYIVPYGvIJTR 138RNSy1SaAYfEerfcVY1/z2p5tZ3LlTblKo12nLskdMJjmdZceWKGB3/1d6BAJH 2r2ovM5CbZ8cYoYITzbDaHM+o8EAzxIpcqgoDeCikkAuHYg8VsUq8aUU31Qf8dvR OiSXHNkhUU9G9Z0rHTRmBndOhE/culM= -----END CERTIFICATE-----Generated at Fri Aug 7 21:43:55 2026 by rpki-client