$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa File: 2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa (raw, json) Hash identifier: 1H/XgvqCURCcoJ3doFHx9cBLnY151AJ5wboE3/RgmpU= Subject key identifier: 9A:CF:69:4C:98:32:D1:FF:D1:36:02:B4:C1:10:A1:84:21:B0:17:8C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6F22CCA28217838B54F5E380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 15169 IP address blocks: 172.217.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:cc:a2:82:17:83:8b:54:f5:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=72ab0623-56e6-4774-890e-bbc1bac9cd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:a8:98:bd:ea:c5:15:1c:f4:b0:aa:09:8e: 21:37:75:7d:23:d4:80:64:bd:41:cb:7c:03:86:02: ef:78:c7:b6:c4:35:77:89:ec:3a:78:b5:7d:58:bc: 50:d1:dc:ea:ca:89:64:29:3f:34:dd:14:46:80:a3: fa:b1:1a:fb:57:4a:fd:a5:21:40:3d:e2:91:24:34: c4:67:22:f0:cd:db:72:13:05:9c:fc:57:ad:96:8a: 74:fd:ff:fb:2e:4a:7b:17:a5:9d:cb:f5:2f:41:b1: 1c:a9:9e:a6:99:d1:7c:62:0b:8a:0c:39:c5:3f:67: ef:f7:7d:64:91:c8:0a:5c:f6:cd:59:fd:2d:44:c9: 33:a9:dc:62:0d:0f:ef:2a:59:f7:34:82:00:c2:37: 98:1a:d1:ff:13:b4:06:11:08:ac:b4:33:29:51:46: 00:18:3d:22:7b:55:47:ea:bd:e0:39:76:3f:87:b1: 1c:82:09:d4:ec:23:34:fb:7e:4d:57:7f:ef:df:80: 9e:cd:75:0a:ea:8e:b7:1c:1f:16:56:74:b8:35:c3: c0:6c:be:28:29:dc:19:90:8d:97:05:4d:90:4c:70: 3f:3f:f2:a7:cc:8a:08:a9:27:5e:46:f0:65:b9:58: d0:5d:9d:4a:cc:c1:56:2f:d0:a7:d1:0b:e3:d4:63: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CF:69:4C:98:32:D1:FF:D1:36:02:B4:C1:10:A1:84:21:B0:17:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:c3:e4:da:63:4e:a4:5f:c1:56:36:bb:1e:70:63:ad:73:c3: d9:81:90:73:8b:f4:e1:a6:28:5c:92:f2:59:11:aa:b5:31:73: d4:b8:51:c5:96:cc:ea:6c:c1:26:07:ba:9a:de:14:a5:9c:2a: 9c:3d:d1:00:4c:22:26:f9:10:94:96:f7:18:96:bf:23:55:dd: f3:25:10:a8:74:93:b1:98:5a:b8:be:76:ae:f1:7e:86:c4:8f: 13:b8:dc:a9:4b:b4:39:01:1b:77:23:51:6a:eb:76:d6:83:61: 55:dd:7b:7d:66:17:1e:1a:f5:41:05:b3:7b:a7:88:99:63:b5: a1:80:1a:10:7f:1c:94:2c:30:90:9f:f5:2e:36:72:07:56:11: d0:8f:f1:3b:d0:9c:72:f7:3d:f5:45:b4:d0:a2:be:8f:ab:98: 47:94:60:f3:e5:21:dd:4d:87:11:b3:21:ff:b1:3f:bf:e6:5d: 86:8b:08:cc:9f:ad:54:bc:12:f9:aa:5f:5c:43:8a:5d:eb:b0: 8c:5d:a2:e1:81:3d:2c:8c:c1:36:60:64:25:06:49:c8:2c:93: 4d:0b:17:3d:0a:e3:6c:d6:b0:72:7c:ba:18:1e:20:30:60:a7: 0d:7d:71:d3:e3:35:9e:ef:9c:40:6f:55:5f:3e:df:1f:e5:98: b9:09:0d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIsyigheDi1T144AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NzJhYjA2MjMtNTZlNi00Nzc0LTg5MGUtYmJjMWJhYzljZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnqomL3qxRUc9LCqCY4hN3V9I9SAZL1By3wD hgLveMe2xDV3iew6eLV9WLxQ0dzqyolkKT803RRGgKP6sRr7V0r9pSFAPeKRJDTE ZyLwzdtyEwWc/Fetlop0/f/7Lkp7F6Wdy/UvQbEcqZ6mmdF8YguKDDnFP2fv931k kcgKXPbNWf0tRMkzqdxiDQ/vKln3NIIAwjeYGtH/E7QGEQistDMpUUYAGD0ie1VH 6r3gOXY/h7EcggnU7CM0+35NV3/v34CezXUK6o63HB8WVnS4NcPAbL4oKdwZkI2X BU2QTHA/P/KnzIoIqSdeRvBluVjQXZ1KzMFWL9Cn0Qvj1GO6/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrPaUyYMtH/0TYCtMEQoYQhsBeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmVlYTVlNDMtNGEyNy0z OTI4LTlhNmItZmJiNWNmMjMwODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/D5NpjTqRfwVY2ux5wY61zw9mBkHOL9OGmKFyS8lkRqrUxc9S4UcWW zOpswSYHupreFKWcKpw90QBMIib5EJSW9xiWvyNV3fMlEKh0k7GYWri+dq7xfobE jxO43KlLtDkBG3cjUWrrdtaDYVXde31mFx4a9UEFs3uniJljtaGAGhB/HJQsMJCf 9S42cgdWEdCP8TvQnHL3PfVFtNCivo+rmEeUYPPlId1NhxGzIf+xP7/mXYaLCMyf rVS8EvmqX1xDil3rsIxdouGBPSyMwTZgZCUGScgsk00LFz0K42zWsHJ8uhgeIDBg pw19cdPjNZ7vnEBvVV8+3x/lmLkJDQg= -----END CERTIFICATE-----Generated at Thu Nov 5 17:27:25 2026 by rpki-client