$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa File: 8684240a-b3e2-3586-b1f0-1953cb883e6c.roa (raw, json) Hash identifier: a44XiAwt+Pi7OaMMiRDxR7vT5KEXOMiXNBA6ji2dGYo= Subject key identifier: 16:5E:3D:74:47:E2:9D:09:2C:1B:F8:26:2E:04:DC:DB:8E:8D:B9:EA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE163C4A44CAB660C82D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:16:3c:4a:44:ca:b6:60:c8:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=dcad0a4c-7658-49c9-b232-66b3c299199e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:74:5a:f3:b3:9e:cf:fa:9b:d7:f9:b1:85: dc:26:02:78:79:9d:0b:7b:49:2b:4c:7e:73:8c:75: ee:aa:29:5d:08:c2:f3:c9:0c:01:30:99:d3:a4:41: b4:81:d2:77:23:ce:c2:55:c7:c9:30:90:35:48:83: db:8a:5c:9c:92:ba:72:d5:b6:ec:69:7b:a6:0b:5e: bc:8a:d3:9e:df:20:1e:e0:e4:97:04:1b:87:f9:a5: 36:34:79:92:11:ee:62:21:63:f3:eb:b9:17:83:6c: 18:44:af:bd:19:35:d8:8b:72:3f:eb:05:bc:05:46: 00:1b:ee:8b:3a:d3:fa:0f:f8:81:6c:8c:b6:6e:4d: 17:af:d2:9c:c5:e5:59:f1:78:f7:e4:ff:14:cc:5e: 00:b2:c4:86:24:16:c8:5f:fc:21:8d:8b:76:88:40: 58:80:02:28:dd:6d:9c:9e:9b:1a:8e:d6:bb:e7:b7: f6:9e:00:cf:6a:6a:30:7d:ac:12:a2:5e:5b:2d:12: 9f:17:c9:66:30:2f:b3:31:ca:08:bd:af:6b:cb:be: d5:14:06:05:75:50:d2:d5:5d:e0:d7:fe:98:2d:0f: ff:63:59:d9:98:71:b8:91:71:52:b5:8a:c7:de:f4: 81:95:fc:44:a9:73:80:fd:83:fd:4c:a2:97:70:61: 7f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5E:3D:74:47:E2:9D:09:2C:1B:F8:26:2E:04:DC:DB:8E:8D:B9:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6c:2a:dc:b2:5b:4b:67:18:67:49:e5:5a:e6:23:99:81:ba: 53:ef:0c:fe:f9:c4:81:0b:d8:30:65:d3:84:9b:72:fa:85:0f: ac:2e:4c:6b:f3:41:8b:e1:99:a3:14:b5:42:99:ab:05:cf:3c: ef:42:ff:91:72:86:7e:b2:6a:e9:92:df:e1:d9:34:08:ac:13: ca:9c:1a:d9:2f:53:43:d5:c9:bc:fb:a6:55:b0:83:0b:1d:89: 90:59:af:ea:15:c5:f0:91:05:0e:d3:4d:c3:6b:bd:c0:83:27: 34:22:cf:69:f4:7d:9c:d9:ab:8f:76:2e:71:81:4b:f6:ef:c0: 12:d0:2b:70:84:ee:3b:e5:31:08:2c:ff:d2:42:18:8b:bd:3e: 2e:62:2e:17:16:6d:b0:19:dd:9f:09:3e:e8:84:18:fb:56:4a: 5b:ed:c5:22:55:2d:03:81:b3:78:e4:9d:5e:e5:b4:7b:e9:f6: 73:4b:85:21:06:9f:46:9b:dc:46:bf:af:04:89:2b:01:ad:e7: 66:c9:34:9e:5a:00:c0:0a:95:a2:2d:96:71:1b:0e:8d:e3:61: bf:1a:5f:40:08:ef:d7:5d:13:2b:ed:6d:25:23:23:4c:ed:a4: 44:c8:31:3d:18:7c:6b:72:a8:fa:63:02:5b:b7:b3:48:b3:93: 31:25:69:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhY8SkTKtmDILYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGNhZDBhNGMtNzY1OC00OWM5LWIyMzItNjZiM2MyOTkxOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom50WvOzns/6m9f5sYXcJgJ4eZ0Le0krTH5z jHXuqildCMLzyQwBMJnTpEG0gdJ3I87CVcfJMJA1SIPbilyckrpy1bbsaXumC168 itOe3yAe4OSXBBuH+aU2NHmSEe5iIWPz67kXg2wYRK+9GTXYi3I/6wW8BUYAG+6L OtP6D/iBbIy2bk0Xr9KcxeVZ8Xj35P8UzF4AssSGJBbIX/whjYt2iEBYgAIo3W2c npsajta757f2ngDPamowfawSol5bLRKfF8lmMC+zMcoIva9ry77VFAYFdVDS1V3g 1/6YLQ//Y1nZmHG4kXFStYrH3vSBlfxEqXOA/YP9TKKXcGF/bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZePXRH4p0JLBv4Ji4E3NuOjbnqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY4NDI0MGEtYjNlMi0z NTg2LWIxZjAtMTk1M2NiODgzZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERsKtyyW0tnGGdJ5VrmI5mBulPvDP75xIEL2DBl04SbcvqFD6wuTGvz QYvhmaMUtUKZqwXPPO9C/5Fyhn6yaumS3+HZNAisE8qcGtkvU0PVybz7plWwgwsd iZBZr+oVxfCRBQ7TTcNrvcCDJzQiz2n0fZzZq492LnGBS/bvwBLQK3CE7jvlMQgs /9JCGIu9Pi5iLhcWbbAZ3Z8JPuiEGPtWSlvtxSJVLQOBs3jknV7ltHvp9nNLhSEG n0ab3Ea/rwSJKwGt52bJNJ5aAMAKlaItlnEbDo3jYb8aX0AI79ddEyvtbSUjI0zt pETIMT0YfGtyqPpjAlu3s0izkzEladw= -----END CERTIFICATE-----Generated at Wed Nov 5 16:21:43 2025 by rpki-client