$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa File: 7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa (raw, json) Hash identifier: bCJlvCgXYFoqeEc9ld48fs11RpbJLKDNhAkkXWz8pE8= Subject key identifier: 34:39:5B:92:F8:8A:25:55:73:DA:CB:F1:BD:33:5D:A8:73:7A:03:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD4E2305963E4D7A693400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4e:23:05:96:3e:4d:7a:69:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0f3e2723-6564-46f4-b196-4d474fdce3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:ad:f6:ec:8f:dd:30:5d:8d:ed:bb:b5:05: e8:3d:b0:e7:25:02:39:12:29:3f:6f:25:fa:39:3d: 90:68:62:64:5f:6f:87:1a:41:0b:1a:51:79:6e:54: a6:33:73:3d:ee:99:1d:e3:ef:f1:09:a9:65:62:83: db:27:4b:6b:90:41:e0:90:7b:e0:66:05:b0:1b:7a: eb:32:f1:0c:35:d4:fd:4c:f5:70:e1:19:cb:9c:b8: 3c:ce:2f:6f:52:e8:57:2e:12:54:e6:aa:36:c2:9a: c9:7f:91:87:f6:5f:bb:0b:0c:2a:2d:36:1e:79:d2: 57:8d:94:eb:87:30:63:c7:54:4c:54:9e:10:c5:e3: 6c:83:1d:c7:a3:e1:fb:39:2a:17:05:47:de:c2:8f: 04:53:a8:10:7d:a1:08:a3:d6:02:c6:08:0a:38:3b: a6:44:fd:36:5c:aa:93:97:7d:f0:57:73:ca:94:33: 25:e2:f7:27:48:83:c4:93:3f:e6:ce:a1:ff:c3:ab: a6:fb:ee:5b:8e:a3:65:bc:60:f0:16:2f:67:77:92: 4e:47:c5:76:fe:56:06:97:e4:ad:df:81:df:fc:20: 1c:f1:f7:41:24:99:90:64:4c:f9:7d:8f:8b:e9:b2: 35:5c:42:c9:03:8c:bb:11:8a:8e:16:94:77:3e:91: fc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:5B:92:F8:8A:25:55:73:DA:CB:F1:BD:33:5D:A8:73:7A:03:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f6:2b:20:14:43:12:b4:1d:b8:9f:df:a2:be:dd:d1:52:3d: c9:80:d2:e1:f3:52:1c:e4:f9:b2:57:f2:53:6a:25:62:e0:6f: 80:97:0a:7b:0a:f7:ec:aa:de:fd:6d:95:9a:b6:3b:24:d1:42: 9c:06:ea:55:da:31:a4:be:d2:70:e5:2e:3d:11:02:6a:53:07: 56:3a:2f:29:c7:93:dc:e6:d0:5a:09:96:ff:70:b7:09:ef:70: ec:3d:cf:53:a5:4d:02:ce:12:d6:91:26:4e:8c:e3:e1:e9:56: 88:b7:4b:43:6a:e9:a7:30:48:37:5d:05:25:f7:32:b3:c4:c7: cf:e2:3f:3a:02:f6:79:9d:1b:08:a8:77:a2:13:3d:e7:b8:49: 0a:e0:a2:ae:b5:7a:33:9a:e6:66:8a:0e:a4:73:4f:78:32:95: 12:db:6c:a5:58:ab:2a:44:6b:8c:b8:a7:1a:2a:1b:c2:b7:a5: e1:cc:9d:e5:3c:8f:5a:40:47:4e:07:72:b7:d0:23:a3:91:3e: 3a:88:80:66:9a:fc:13:a9:df:ec:3e:7b:d6:c2:65:94:e5:05: f8:5b:53:d8:df:ed:f0:85:25:1a:7d:d8:5d:7e:30:ed:8f:26: 9b:5b:0e:d5:83:1c:d8:27:6c:ab:eb:fd:37:ab:e7:c1:87:8d: fe:f6:6d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzU4jBZY+TXppNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MGYzZTI3MjMtNjU2NC00NmY0LWIxOTYtNGQ0NzRmZGNlM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYat9uyP3TBdje27tQXoPbDnJQI5Eik/byX6 OT2QaGJkX2+HGkELGlF5blSmM3M97pkd4+/xCallYoPbJ0trkEHgkHvgZgWwG3rr MvEMNdT9TPVw4RnLnLg8zi9vUuhXLhJU5qo2wprJf5GH9l+7CwwqLTYeedJXjZTr hzBjx1RMVJ4QxeNsgx3Ho+H7OSoXBUfewo8EU6gQfaEIo9YCxggKODumRP02XKqT l33wV3PKlDMl4vcnSIPEkz/mzqH/w6um++5bjqNlvGDwFi9nd5JOR8V2/lYGl+St 34Hf/CAc8fdBJJmQZEz5fY+L6bI1XELJA4y7EYqOFpR3PpH8hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ5W5L4iiVVc9rL8b0zXahzegP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2E4Y2U0M2MtYTFlZi0z ZTYyLTk5MzEtYmI5NGEwYmE2M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD2KyAUQxK0Hbif36K+3dFSPcmA0uHzUhzk+bJX8lNqJWLgb4CXCnsK 9+yq3v1tlZq2OyTRQpwG6lXaMaS+0nDlLj0RAmpTB1Y6LynHk9zm0FoJlv9wtwnv cOw9z1OlTQLOEtaRJk6M4+HpVoi3S0Nq6acwSDddBSX3MrPEx8/iPzoC9nmdGwio d6ITPee4SQrgoq61ejOa5maKDqRzT3gylRLbbKVYqypEa4y4pxoqG8K3peHMneU8 j1pAR04HcrfQI6ORPjqIgGaa/BOp3+w+e9bCZZTlBfhbU9jf7fCFJRp92F1+MO2P JptbDtWDHNgnbKvr/Ter58GHjf72bQ0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:01 2025 by rpki-client