$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8862f3fe-5ce1-3f18-a69b-178764bf2b8b.roa File: 8862f3fe-5ce1-3f18-a69b-178764bf2b8b.roa (raw, json) Hash identifier: U63GgCtWLEsaFV71Yj/4zikJD61gqxRFvpN52anwH1I= Subject key identifier: D3:F2:E6:F2:50:B5:B5:C8:A4:BF:BD:B0:7B:4D:EE:D7:82:70:10:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DCC607066F98E7E4647CD2400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8862f3fe-5ce1-3f18-a69b-178764bf2b8b.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 15169 IP address blocks: 172.217.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:70:66:f9:8e:7e:46:47:cd:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=4994ebfc-065d-403d-a821-801807565914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c6:cb:c1:9f:17:ef:bc:a4:6b:81:f1:90:32: 4e:07:d8:9c:b3:16:14:1a:12:5f:8e:d6:4f:69:f8: ae:2f:9f:56:76:6d:ed:03:e1:a1:33:57:d0:06:99: 2b:e5:5f:5c:fa:16:f1:77:a3:61:3d:08:87:2b:83: 57:28:cf:ef:86:10:7b:3e:d6:79:b7:8c:3b:11:ca: 35:55:8e:52:5b:ef:63:3f:ec:50:99:bd:23:6d:98: c7:c9:98:70:bd:46:a1:91:7a:d9:ef:1a:12:25:64: a7:8d:c5:03:98:08:f8:2d:3b:34:0b:d5:dd:37:ae: 93:ec:e3:d1:f9:f3:23:f7:50:d9:e9:e7:77:5b:f2: 57:8a:73:76:6b:5a:ee:bd:f3:58:c2:3c:58:9f:ca: 94:80:7b:a1:5f:ee:f2:a3:b0:54:69:49:21:d5:80: a1:1f:ef:1f:1a:5f:69:2f:87:61:16:25:d7:0f:b8: 3d:3e:66:57:e5:e5:9e:14:d9:fa:07:42:30:c4:4d: 48:6c:43:37:37:5b:7f:dc:ad:ac:75:fd:cc:b0:37: 1b:cf:e0:23:10:43:4f:3c:9e:11:88:d3:e7:11:b5: 48:66:3d:1b:96:99:d5:37:c8:2c:47:18:da:8c:13: 03:42:fd:82:c4:18:16:5c:a1:c3:0e:07:57:0c:f9: d4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F2:E6:F2:50:B5:B5:C8:A4:BF:BD:B0:7B:4D:EE:D7:82:70:10:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8862f3fe-5ce1-3f18-a69b-178764bf2b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ec:c2:49:01:d9:b7:b2:ad:35:7b:84:7d:9b:c6:8b:ab:94: 09:e3:3e:a3:b2:40:89:63:20:17:bf:1a:7d:61:6b:04:d3:9d: e6:d9:94:8d:44:ae:a6:27:f0:21:51:9c:16:06:03:6e:77:39: b5:b4:56:89:c1:92:1e:ac:de:33:d0:22:a7:47:f4:df:df:9a: cd:8a:ed:00:e4:08:07:ae:35:61:04:4a:57:c6:21:b2:8f:69: 06:a7:75:35:c3:d2:8b:ca:3e:c4:5a:86:f8:4f:2a:79:37:35: aa:8c:c0:87:45:95:eb:1f:4c:33:51:c7:74:5a:54:fb:53:44: 08:1e:09:75:af:27:6c:9b:33:24:34:a3:17:51:53:cb:01:d6: e2:1f:24:6a:a6:ee:15:0b:57:8a:ad:d4:cd:00:f8:d5:85:f0: 36:6f:1d:14:1c:a1:a5:9c:b0:74:27:0d:de:88:99:09:b2:b5: 18:0a:5b:2d:9b:5d:81:9d:43:b8:0d:92:ce:4d:f9:06:33:33: 5e:9e:d4:ec:6d:5b:71:5c:04:e0:51:bb:fb:52:12:91:a8:a2: d2:bc:b0:30:a7:20:b2:87:02:cf:98:b0:ae:f7:d2:5b:72:50: 4e:24:0f:f2:0a:7c:54:c6:b0:f5:ff:17:20:20:1b:c5:5d:13: 02:ec:44:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYHBm+Y5+RkfNJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk NDk5NGViZmMtMDY1ZC00MDNkLWE4MjEtODAxODA3NTY1OTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcbLwZ8X77yka4HxkDJOB9icsxYUGhJfjtZP afiuL59Wdm3tA+GhM1fQBpkr5V9c+hbxd6NhPQiHK4NXKM/vhhB7PtZ5t4w7Eco1 VY5SW+9jP+xQmb0jbZjHyZhwvUahkXrZ7xoSJWSnjcUDmAj4LTs0C9XdN66T7OPR +fMj91DZ6ed3W/JXinN2a1ruvfNYwjxYn8qUgHuhX+7yo7BUaUkh1YChH+8fGl9p L4dhFiXXD7g9PmZX5eWeFNn6B0IwxE1IbEM3N1t/3K2sdf3MsDcbz+AjEENPPJ4R iNPnEbVIZj0blpnVN8gsRxjajBMDQv2CxBgWXKHDDgdXDPnUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPy5vJQtbXIpL+9sHtN7teCcBA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODg2MmYzZmUtNWNlMS0z ZjE4LWE2OWItMTc4NzY0YmYyYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPswkkB2beyrTV7hH2bxourlAnjPqOyQIljIBe/Gn1hawTTnebZlI1E rqYn8CFRnBYGA253ObW0VonBkh6s3jPQIqdH9N/fms2K7QDkCAeuNWEESlfGIbKP aQandTXD0ovKPsRahvhPKnk3NaqMwIdFlesfTDNRx3RaVPtTRAgeCXWvJ2ybMyQ0 oxdRU8sB1uIfJGqm7hULV4qt1M0A+NWF8DZvHRQcoaWcsHQnDd6ImQmytRgKWy2b XYGdQ7gNks5N+QYzM16e1OxtW3FcBOBRu/tSEpGootK8sDCnILKHAs+YsK730lty UE4kD/IKfFTGsPX/FyAgG8VdEwLsRFE= -----END CERTIFICATE-----Generated at Wed May 13 03:09:40 2026 by rpki-client