$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa File: a061a393-c24b-3e7d-890c-891cf39b13c9.roa (raw, json) Hash identifier: OTGW1g6/qukcCQOsTgcKOezl8QaVGJ63J2Juky+d514= Subject key identifier: 94:8B:D7:5C:4D:AA:B4:A4:8C:06:B7:00:37:48:B7:A5:E9:8E:B8:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6293090C65A8707AD663F3C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.217.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:09:0c:65:a8:70:7a:d6:63:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=8730541e-8498-46ba-8017-38f3da58a1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:11:38:53:3f:12:ac:d7:3d:b7:ec:b6:84: 8a:67:50:bf:e7:49:1b:61:ee:ec:2c:f8:f5:98:9d: 5b:ad:d4:3e:75:bd:4f:3f:61:3f:cf:e0:24:91:84: 9c:d9:c5:5b:5d:ee:b5:31:fd:2f:ba:ed:57:26:df: 8a:02:e4:3a:38:f6:18:c2:7a:d5:21:9b:73:2a:d3: 20:7c:ac:88:7f:62:c1:66:43:a2:47:5e:30:a9:8f: e8:e8:d6:8d:7a:32:d2:40:cd:e2:c1:5c:35:5c:58: 4d:1a:31:98:bd:be:de:ff:81:dd:f6:e3:9f:60:fc: e8:f7:42:75:a2:24:66:f5:cf:7c:2b:e5:98:19:72: 46:27:e2:bc:84:b5:3c:e2:d1:8d:52:89:d5:1a:ef: bb:4d:bc:90:90:d2:4d:d4:18:0f:16:86:21:1f:99: e7:a5:0d:cf:eb:58:55:1b:df:d3:bd:f1:f0:02:7e: b5:b0:fe:1a:c7:9a:ab:87:d7:5b:f8:7b:89:75:b6: 60:a3:9e:01:10:ca:0d:b7:36:76:e9:60:da:49:e4: c7:e0:20:35:05:02:3b:74:9c:02:06:d3:c8:c6:f4: 3c:d8:65:72:b1:c8:53:17:9f:17:d5:7f:7a:aa:1e: b3:10:8d:59:4d:80:f3:cd:f6:f1:ec:c5:96:04:57: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8B:D7:5C:4D:AA:B4:A4:8C:06:B7:00:37:48:B7:A5:E9:8E:B8:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4f:5f:c6:85:db:30:94:af:d5:de:b1:b0:b6:36:99:f3:d5: 83:c7:4e:3f:51:8a:99:4c:c1:f4:40:01:0e:24:22:48:65:fd: 9d:2b:1f:14:69:e8:6e:bd:03:6a:07:97:77:fb:ba:1d:5a:63: 14:3d:f2:b8:1a:d7:16:6d:49:c2:5f:d5:20:b7:e6:1e:f2:2d: 56:bd:57:f4:ee:cd:76:a3:2b:fa:c2:3c:bc:34:3b:df:2b:1b: a8:27:e5:5c:37:1a:6d:2f:42:c7:3f:e7:ed:7e:df:1c:af:d2: 08:4b:56:95:e2:d1:bf:20:6f:42:47:23:64:85:a4:ec:9f:e2: 30:40:79:6c:ea:e7:8e:16:72:d7:15:06:3a:5d:18:f5:f0:ad: e0:f9:43:5a:ef:4d:7f:b6:8b:9d:5a:72:7b:63:55:e8:ea:81: f2:13:2f:1d:b6:2e:5b:14:5b:41:e5:4d:48:75:25:10:c8:17: 91:12:f0:29:e4:ac:e5:b1:bc:38:53:6e:14:ef:64:e5:c6:03: 9e:6c:ee:a1:45:11:65:f8:9e:a3:0e:8d:86:ec:c8:b9:c8:23: 58:fe:51:9e:19:ff:dd:e6:a6:e0:82:00:24:08:c6:c4:4d:88: 9e:f8:8d:6d:e5:5d:04:61:23:8e:ff:fd:6d:57:3f:c1:93:35: b3:ed:cc:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwkMZahwetZj88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ODczMDU0MWUtODQ5OC00NmJhLTgwMTctMzhmM2RhNThhMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/cROFM/EqzXPbfstoSKZ1C/50kbYe7sLPj1 mJ1brdQ+db1PP2E/z+AkkYSc2cVbXe61Mf0vuu1XJt+KAuQ6OPYYwnrVIZtzKtMg fKyIf2LBZkOiR14wqY/o6NaNejLSQM3iwVw1XFhNGjGYvb7e/4Hd9uOfYPzo90J1 oiRm9c98K+WYGXJGJ+K8hLU84tGNUonVGu+7TbyQkNJN1BgPFoYhH5nnpQ3P61hV G9/TvfHwAn61sP4ax5qrh9db+HuJdbZgo54BEMoNtzZ26WDaSeTH4CA1BQI7dJwC BtPIxvQ82GVyschTF58X1X96qh6zEI1ZTYDzzfbx7MWWBFfhVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSL11xNqrSkjAa3ADdIt6XpjrgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA2MWEzOTMtYzI0Yi0z ZTdkLTg5MGMtODkxY2YzOWIxM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFPX8aF2zCUr9XesbC2Npnz1YPHTj9RiplMwfRAAQ4kIkhl/Z0rHxRp 6G69A2oHl3f7uh1aYxQ98rga1xZtScJf1SC35h7yLVa9V/TuzXajK/rCPLw0O98r G6gn5Vw3Gm0vQsc/5+1+3xyv0ghLVpXi0b8gb0JHI2SFpOyf4jBAeWzq544WctcV BjpdGPXwreD5Q1rvTX+2i51acntjVejqgfITLx22LlsUW0HlTUh1JRDIF5ES8Cnk rOWxvDhTbhTvZOXGA55s7qFFEWX4nqMOjYbsyLnII1j+UZ4Z/93mpuCCACQIxsRN iJ74jW3lXQRhI47//W1XP8GTNbPtzCc= -----END CERTIFICATE-----Generated at Thu Nov 5 18:51:05 2026 by rpki-client