$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5e2732f-5014-363b-829e-9372ca76347c.roa File: b5e2732f-5014-363b-829e-9372ca76347c.roa (raw, json) Hash identifier: aRYAQjystDiz57pB7us7Ur1iSTqNomCgD6/10wOo2v4= Subject key identifier: 0A:EF:C5:EC:7B:6A:67:9B:28:3F:4D:C2:DB:3B:8C:E5:CF:DB:4E:34 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584BBFA5B70F84B4D69D31533F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5e2732f-5014-363b-829e-9372ca76347c.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 15169 IP address blocks: 172.217.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b7:0f:84:b4:d6:9d:31:53:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=44b1b48f-1f9c-4192-8c8c-0da1e6bc02fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:04:aa:e1:fa:cb:52:57:40:a3:42:24:94:a0: 50:11:a7:2c:47:08:a9:63:be:9f:3b:96:62:43:18: 32:7f:62:11:45:84:9b:b3:88:fa:c4:ee:ba:12:3d: 87:e6:ef:33:ca:5e:de:eb:f5:6e:f3:4c:33:b0:df: af:01:ce:84:56:4a:6e:45:c9:3c:ad:d8:d6:9d:ba: 2d:c8:fc:c0:81:f5:65:b1:d3:e3:83:69:39:f9:ae: 01:d0:42:fc:cd:c7:19:02:61:d3:1a:36:0c:a6:13: 47:6a:f1:c2:88:29:c9:42:40:91:b1:d8:7d:1a:52: 51:8d:bc:d2:c5:82:a2:c4:90:4d:a3:52:b3:73:61: cb:ad:02:54:fb:ea:b6:25:ac:d9:88:a8:bf:af:47: 8f:21:b9:0a:c4:7c:44:34:ed:ee:e8:39:a4:b8:89: a1:8c:00:cb:04:5c:3d:fd:3b:d6:ca:a8:6f:d1:1c: 60:74:74:ee:9f:76:ee:ae:c2:36:56:1c:e6:1a:a4: 24:e4:77:80:2e:7d:16:cf:b5:e4:fe:9c:d4:c8:0d: 4c:90:c0:ae:8d:12:db:0f:a5:9a:6f:4b:1f:7b:7d: 69:98:d4:e4:57:61:53:e9:5a:a5:8b:5d:44:81:c8: 5a:88:96:dd:77:10:2b:e9:f5:dd:da:1d:d3:ac:ea: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EF:C5:EC:7B:6A:67:9B:28:3F:4D:C2:DB:3B:8C:E5:CF:DB:4E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5e2732f-5014-363b-829e-9372ca76347c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:26:c9:de:fa:6f:34:b2:4b:33:e5:f7:83:55:a8:0a:05:24: fe:11:4a:62:b4:ff:0d:38:f1:48:45:5f:d4:a5:dd:fa:a4:de: fe:98:04:19:5b:f5:a5:75:50:2b:cd:60:3d:55:17:08:6a:a8: 2f:67:f8:19:29:41:50:2b:d3:ef:fa:83:02:be:76:ab:a9:6d: eb:d1:0a:8e:3b:f0:00:a7:0e:ab:03:d7:b7:86:59:83:8f:c8: 7b:11:0f:c1:28:82:26:13:0e:b5:e7:f9:f2:f0:23:5d:68:b4: 6a:0d:6e:a3:30:0f:11:26:5e:71:73:42:8d:4d:78:6b:ce:ef: 7b:78:52:f0:47:82:2c:01:69:16:77:e9:07:62:ee:21:e0:fd: 33:1e:98:eb:3c:88:ee:10:29:76:33:c4:7e:64:b9:de:89:86: b2:44:b8:8f:24:3d:06:af:33:09:6b:3f:6c:3f:47:19:4e:d5: a9:f8:22:10:06:e4:93:dc:ce:7a:a5:58:e2:dc:a9:2f:67:05: 97:c0:12:82:27:71:b1:78:df:86:c5:08:cf:9d:67:7f:f0:10: 84:91:1d:4d:ca:7c:64:9f:bd:df:8e:be:64:14:79:8e:67:9a: 5b:b2:cb:c6:3c:f0:b4:52:0c:83:71:cb:a6:c8:67:77:23:bf: 7d:c6:88:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbcPhLTWnTFTP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NDRiMWI0OGYtMWY5Yy00MTkyLThjOGMtMGRhMWU2YmMwMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QSq4frLUldAo0IklKBQEacsRwipY76fO5Zi Qxgyf2IRRYSbs4j6xO66Ej2H5u8zyl7e6/Vu80wzsN+vAc6EVkpuRck8rdjWnbot yPzAgfVlsdPjg2k5+a4B0EL8zccZAmHTGjYMphNHavHCiCnJQkCRsdh9GlJRjbzS xYKixJBNo1Kzc2HLrQJU++q2JazZiKi/r0ePIbkKxHxENO3u6DmkuImhjADLBFw9 /TvWyqhv0RxgdHTun3bursI2VhzmGqQk5HeALn0Wz7Xk/pzUyA1MkMCujRLbD6Wa b0sfe31pmNTkV2FT6Vqli11EgchaiJbddxAr6fXd2h3TrOpJnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArvxex7amebKD9Nwts7jOXP2040MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjVlMjczMmYtNTAxNC0z NjNiLTgyOWUtOTM3MmNhNzYzNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAmyd76bzSySzPl94NVqAoFJP4RSmK0/w048UhFX9Sl3fqk3v6YBBlb 9aV1UCvNYD1VFwhqqC9n+BkpQVAr0+/6gwK+dqupbevRCo478ACnDqsD17eGWYOP yHsRD8EogiYTDrXn+fLwI11otGoNbqMwDxEmXnFzQo1NeGvO73t4UvBHgiwBaRZ3 6Qdi7iHg/TMemOs8iO4QKXYzxH5kud6JhrJEuI8kPQavMwlrP2w/RxlO1an4IhAG 5JPcznqlWOLcqS9nBZfAEoIncbF434bFCM+dZ3/wEISRHU3KfGSfvd+OvmQUeY5n mluyy8Y88LRSDINxy6bIZ3cjv33GiLc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:15 2025 by rpki-client