$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa File: d81db5f9-daca-3854-894b-06f15dcabb67.roa (raw, json) Hash identifier: wOhLRHNLqI+yhCNI0EHL1Czjp65BG75hcWaNi6ToRu4= Subject key identifier: 58:B4:03:25:F0:A3:01:93:95:1E:75:9C:45:E9:F6:19:9D:58:DA:FA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B95A95672A1FAABE7D1336380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 15169 IP address blocks: 172.217.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:56:72:a1:fa:ab:e7:d1:33:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b6a3e751-3f5b-4d85-bb9a-164cd402d2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:69:9a:28:8f:ce:95:c2:a6:ac:e1:f7:00: 21:d9:6e:32:0d:25:bd:e9:c8:d0:48:27:ae:13:f8: 45:77:56:c6:e2:73:57:d5:5f:2c:6e:32:d8:03:22: f9:b2:e5:0d:48:f3:71:3e:91:07:74:b3:34:5c:53: c6:c7:5e:12:e7:e4:5d:01:bf:f2:35:ed:ec:88:b0: 0a:a8:d8:77:a6:c3:83:9d:be:93:22:37:39:fb:3b: 08:35:fa:48:76:6c:39:31:15:91:63:a5:94:ad:12: e2:5e:c7:62:2f:3f:05:f5:c0:96:45:4b:07:7f:a8: 41:9b:11:ea:34:ee:44:33:92:98:ce:50:10:1c:d8: 79:fc:98:01:dc:1f:2d:b3:24:27:e9:34:05:e5:4f: 9f:15:f2:29:09:6c:6c:1a:23:22:74:5f:5f:53:72: 17:f6:97:d9:cc:00:f9:42:a2:9f:f1:6e:70:0b:e2: a0:e6:18:dd:a3:b4:06:e5:16:b1:91:c1:b3:da:53: 49:51:fe:b3:8b:fc:88:d7:a1:f7:fb:21:95:70:7e: 88:fe:04:c9:2c:d3:b8:4c:8e:ba:b4:f4:59:16:7d: 24:69:d3:b5:e0:a1:b3:46:75:c9:b7:15:b9:15:43: 3a:bd:d0:d1:03:1b:aa:9d:7b:70:9a:fe:78:d9:e9: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B4:03:25:F0:A3:01:93:95:1E:75:9C:45:E9:F6:19:9D:58:DA:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:cd:18:3c:5e:90:dd:ff:39:2e:0d:58:03:68:9a:37:5a:e8: 2e:cc:e4:12:71:b6:e6:6a:7e:1b:aa:8f:44:c8:99:71:35:ee: 4e:74:7e:67:b8:80:dc:a5:6f:c8:d6:e8:b6:1e:70:d2:19:54: 34:2e:f1:70:36:18:29:c5:97:8d:bf:b8:f3:51:bf:25:b7:87: dd:5c:a8:91:b1:05:c4:a8:2f:61:90:0c:ce:19:a9:e5:50:70: a5:95:1b:3c:9a:95:dd:98:0e:2d:e8:e3:d5:db:15:5a:fe:cb: 48:00:b3:66:99:0b:a6:3c:e2:c4:ed:b1:22:56:39:2c:db:4f: 74:ce:99:af:8e:56:d0:cc:35:94:e2:bb:77:4d:2b:9f:fd:9c: 0c:cf:91:5e:72:dc:db:b2:8b:e9:4c:fd:6c:54:1d:02:54:6c: 48:d3:4a:64:d6:c9:a5:a0:06:0e:51:48:ed:b8:df:76:82:4d: af:b7:54:99:64:59:29:6a:37:48:0b:cb:72:d4:36:0f:c4:b7: a0:de:f9:5a:23:4a:e2:d7:d4:95:0f:e3:f0:b3:63:cd:2e:23: 65:2d:e5:08:5f:5a:ed:16:b5:0c:a3:39:4a:9d:a7:bb:19:ef: aa:e5:fc:c1:7d:89:eb:bd:47:3b:89:80:99:1f:73:f9:29:16: 87:61:24:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqVZyofqr59EzY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjZhM2U3NTEtM2Y1Yi00ZDg1LWJiOWEtMTY0Y2Q0MDJkMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9JpmiiPzpXCpqzh9wAh2W4yDSW96cjQSCeu E/hFd1bG4nNX1V8sbjLYAyL5suUNSPNxPpEHdLM0XFPGx14S5+RdAb/yNe3siLAK qNh3psODnb6TIjc5+zsINfpIdmw5MRWRY6WUrRLiXsdiLz8F9cCWRUsHf6hBmxHq NO5EM5KYzlAQHNh5/JgB3B8tsyQn6TQF5U+fFfIpCWxsGiMidF9fU3IX9pfZzAD5 QqKf8W5wC+Kg5hjdo7QG5RaxkcGz2lNJUf6zi/yI16H3+yGVcH6I/gTJLNO4TI66 tPRZFn0kadO14KGzRnXJtxW5FUM6vdDRAxuqnXtwmv542emkaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFi0AyXwowGTlR51nEXp9hmdWNr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDgxZGI1ZjktZGFjYS0z ODU0LTg5NGItMDZmMTVkY2FiYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3NGDxekN3/OS4NWANomjda6C7M5BJxtuZqfhuqj0TImXE17k50fme4 gNylb8jW6LYecNIZVDQu8XA2GCnFl42/uPNRvyW3h91cqJGxBcSoL2GQDM4ZqeVQ cKWVGzyald2YDi3o49XbFVr+y0gAs2aZC6Y84sTtsSJWOSzbT3TOma+OVtDMNZTi u3dNK5/9nAzPkV5y3Nuyi+lM/WxUHQJUbEjTSmTWyaWgBg5RSO2433aCTa+3VJlk WSlqN0gLy3LUNg/Et6De+VojSuLX1JUP4/CzY80uI2Ut5QhfWu0WtQyjOUqdp7sZ 76rl/MF9ieu9RzuJgJkfc/kpFodhJIY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:41 2025 by rpki-client