$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa File: 739bd5a1-d6b5-3e48-8130-252f11afed97.roa (raw, json) Hash identifier: IckmfrKTvH3jYv+n2Z5Wn17I6J9sQDMiAlgN8b2vW08= Subject key identifier: EC:15:E6:3B:BD:D7:08:EA:53:A8:FF:FF:4D:72:88:4E:53:EA:00:C0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD5F00D26A0247380ADF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:5f:00:d2:6a:02:47:38:0a:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1fdd03f9-5575-4472-9126-55d0e2393dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:b9:08:02:13:8a:9d:42:3f:53:d0:b0:64: 29:6b:7d:1e:8b:2f:cb:d6:c3:2b:f4:03:1d:8a:60: 69:63:b0:c4:b6:9e:02:bf:da:bb:5d:a8:c8:11:4c: 99:59:f1:f5:88:78:84:b2:b5:7c:70:9c:cd:72:ec: b7:0a:f2:22:e2:21:33:ed:eb:81:19:23:8f:34:91: 28:3a:d8:03:be:32:c7:97:b4:3e:ca:f2:a7:29:c0: 8d:64:a8:f4:db:2a:ea:61:0b:b9:e4:0a:48:d5:e9: 80:77:01:75:4a:76:5f:a3:46:5a:97:4c:fc:f8:24: b3:8c:1a:af:d9:4a:de:2d:86:ff:04:87:25:9f:bd: d7:41:14:a4:9e:b2:89:12:84:91:73:1a:d3:4b:98: 12:f8:ff:e0:61:77:bc:8f:c2:72:d3:6a:86:33:6d: 84:5e:fc:bf:ca:b2:3a:7d:3e:d1:57:9a:c2:e5:57: ae:60:06:02:85:f1:20:4a:3b:3e:45:d3:35:1a:95: 06:99:a7:f5:d7:dd:a6:95:06:65:6a:0c:ab:f2:4a: 5a:0d:62:a5:c5:5e:58:5e:e4:b4:5d:60:c7:64:bb: 2d:d4:08:26:ab:75:e8:30:cd:6e:61:4e:12:3c:93: 68:7a:95:ce:5a:1e:da:cb:e5:83:a3:e7:a5:e9:18: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:15:E6:3B:BD:D7:08:EA:53:A8:FF:FF:4D:72:88:4E:53:EA:00:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:39:f7:1f:44:5e:a9:70:43:a3:a0:b9:66:c5:4b:cb:51:2d: e6:18:fe:c2:c8:dd:34:14:35:6d:3d:38:27:45:03:8b:53:c3: 3f:2c:13:54:ec:a8:5c:50:74:3c:fa:1a:9b:22:20:7b:3b:0f: 77:fc:53:35:7b:95:5f:02:27:e5:25:81:95:92:8c:a2:20:8f: aa:d7:c7:bb:4b:24:3a:79:37:9a:b5:c0:e2:f3:d5:98:33:5f: 27:e9:73:85:4d:71:4e:89:86:b1:40:6b:82:6c:a4:81:09:d7: 3a:2e:89:23:dd:c0:da:c5:50:2c:e3:3a:b6:95:5b:33:cc:d1: 99:18:d1:41:87:c8:71:ce:55:46:eb:cc:44:ea:24:47:7b:20: 9e:39:f7:43:46:05:ef:b2:34:96:57:41:14:61:e8:92:7a:c9: 4f:ea:a1:b6:f8:b2:de:45:38:b8:c5:41:99:1d:33:1a:d7:c6: c9:17:e1:6d:49:00:ec:c6:a6:08:2e:ce:6f:04:2b:89:a9:85: 78:a9:d8:51:af:e3:e3:f9:5e:1c:12:df:f9:00:68:42:d7:dd: 33:8e:7f:cb:08:dc:73:ab:9f:df:2a:b9:a8:3a:65:15:df:3e: e8:e1:7f:43:b0:04:8e:8b:9d:5b:d8:dd:03:e2:40:db:a7:77: d9:ef:38:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzV8A0moCRzgK3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWZkZDAzZjktNTU3NS00NDcyLTkxMjYtNTVkMGUyMzkzZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya+5CAITip1CP1PQsGQpa30eiy/L1sMr9AMd imBpY7DEtp4Cv9q7XajIEUyZWfH1iHiEsrV8cJzNcuy3CvIi4iEz7euBGSOPNJEo OtgDvjLHl7Q+yvKnKcCNZKj02yrqYQu55ApI1emAdwF1SnZfo0Zal0z8+CSzjBqv 2UreLYb/BIcln73XQRSknrKJEoSRcxrTS5gS+P/gYXe8j8Jy02qGM22EXvy/yrI6 fT7RV5rC5VeuYAYChfEgSjs+RdM1GpUGmaf1192mlQZlagyr8kpaDWKlxV5YXuS0 XWDHZLst1Agmq3XoMM1uYU4SPJNoepXOWh7ay+WDo+el6RgPSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwV5ju91wjqU6j//01yiE5T6gDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzM5YmQ1YTEtZDZiNS0z ZTQ4LTgxMzAtMjUyZjExYWZlZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE59x9EXqlwQ6OguWbFS8tRLeYY/sLI3TQUNW09OCdFA4tTwz8sE1Ts qFxQdDz6GpsiIHs7D3f8UzV7lV8CJ+UlgZWSjKIgj6rXx7tLJDp5N5q1wOLz1Zgz Xyfpc4VNcU6JhrFAa4JspIEJ1zouiSPdwNrFUCzjOraVWzPM0ZkY0UGHyHHOVUbr zETqJEd7IJ4590NGBe+yNJZXQRRh6JJ6yU/qobb4st5FOLjFQZkdMxrXxskX4W1J AOzGpgguzm8EK4mphXip2FGv4+P5XhwS3/kAaELX3TOOf8sI3HOrn98quag6ZRXf Pujhf0OwBI6LnVvY3QPiQNund9nvOJg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:00 2025 by rpki-client