$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa File: 0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa (raw, json) Hash identifier: +l+j2qZsMuOAwzgi0BA433TREqP6zpIv7msAXhmTD6A= Subject key identifier: E5:5E:00:81:D6:4A:59:BD:15:55:7F:17:4B:C7:08:C3:60:23:36:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD62088D1315F79AF484A8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:62:08:8d:13:15:f7:9a:f4:84:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=6907b67c-566b-48b9-93a1-6a2f2a313ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f7:f7:ec:0d:b7:53:a1:3b:fe:06:c1:3b:83: 7f:1d:e0:cb:8a:25:2e:86:a9:4f:9e:4e:84:c2:ec: bf:93:ae:22:95:26:b5:38:a7:63:54:49:8a:6f:54: 13:3e:16:32:11:c3:c3:bc:c7:06:21:87:ca:e9:5f: 58:21:66:1b:2c:11:98:95:66:5a:a8:41:72:10:1e: 78:88:38:e1:d2:c6:3e:4f:fe:74:b6:6a:77:03:42: 41:f1:d1:01:83:64:9a:35:76:02:af:a2:6f:8d:65: 16:04:f2:84:16:03:1c:b7:49:89:f9:83:93:e8:07: 0a:02:a4:98:43:82:b6:f1:b5:69:ea:34:a8:bb:d3: 10:bc:81:6b:85:ea:69:6e:34:63:78:90:c0:c7:a5: b2:1f:bc:c7:d0:3e:4e:7c:06:2a:5b:9f:95:67:ef: 2c:cd:08:49:1d:30:2b:33:8e:d3:00:c5:ab:fa:4a: ce:7a:e0:37:16:15:80:ea:92:34:87:06:10:03:f3: 67:b9:ee:10:75:26:06:9f:b0:65:0c:f9:10:12:2f: 28:2f:2d:d9:43:ee:94:00:1d:e7:68:e0:4f:69:01: 6b:b1:3d:a6:8a:bb:fa:0d:6a:70:89:38:c1:e9:2d: 5c:5b:ea:a9:32:1e:60:6b:55:d6:fb:bd:c2:e7:9e: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5E:00:81:D6:4A:59:BD:15:55:7F:17:4B:C7:08:C3:60:23:36:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:57:33:59:87:16:2a:7b:01:0a:78:d0:07:e3:cf:1f:68:a4: 87:a1:3f:1b:95:44:86:33:bd:ca:58:c9:c9:85:d8:6a:8c:a9: d8:64:4c:c4:87:94:43:09:10:ce:ec:2c:c4:c1:5a:83:8c:e2: 83:9f:8d:76:86:4e:c8:a8:67:a2:8c:e6:aa:2a:a3:41:70:ec: 29:31:f5:72:65:9f:4a:3f:f7:fc:f2:de:64:af:e4:78:fb:6d: 4d:36:2a:40:d9:60:26:b7:41:2d:39:ad:dd:1a:19:12:22:46: fc:77:86:1f:c8:b4:f6:fb:0a:96:7e:fe:44:89:0b:dd:bf:4d: 28:ed:52:04:6c:08:c9:37:96:dc:ee:ab:a3:a6:85:a0:7d:31: 81:b6:a1:14:3e:bf:55:d7:ee:08:10:b2:c6:9d:56:2a:de:c5: 63:ed:e5:cd:aa:5c:90:2a:9e:fa:94:f0:ce:07:cb:47:7e:2a: 29:e1:af:04:69:06:a0:3c:2f:86:00:b0:3f:61:07:b2:18:8f: b9:46:1d:a8:0a:f3:82:8c:80:65:4d:22:4b:f0:3a:bd:a8:4c: 6e:9a:05:c3:25:47:57:65:14:b3:cf:f9:f6:c9:db:62:e9:e3: 0a:e6:3c:7d:62:22:aa:65:93:20:84:36:97:a5:49:8f:f5:a1: 69:e1:3c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWIIjRMV95r0hKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjkwN2I2N2MtNTY2Yi00OGI5LTkzYTEtNmEyZjJhMzEzYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/f37A23U6E7/gbBO4N/HeDLiiUuhqlPnk6E wuy/k64ilSa1OKdjVEmKb1QTPhYyEcPDvMcGIYfK6V9YIWYbLBGYlWZaqEFyEB54 iDjh0sY+T/50tmp3A0JB8dEBg2SaNXYCr6JvjWUWBPKEFgMct0mJ+YOT6AcKAqSY Q4K28bVp6jSou9MQvIFrheppbjRjeJDAx6WyH7zH0D5OfAYqW5+VZ+8szQhJHTAr M47TAMWr+krOeuA3FhWA6pI0hwYQA/Nnue4QdSYGn7BlDPkQEi8oLy3ZQ+6UAB3n aOBPaQFrsT2mirv6DWpwiTjB6S1cW+qpMh5ga1XW+73C555spwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVeAIHWSlm9FVV/F0vHCMNgIzZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGI0YTMxYjUtM2QyZi0z ZmY4LWE3YjgtZGI4OTU5NzJiZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtXM1mHFip7AQp40Afjzx9opIehPxuVRIYzvcpYycmF2GqMqdhkTMSH lEMJEM7sLMTBWoOM4oOfjXaGTsioZ6KM5qoqo0Fw7Ckx9XJln0o/9/zy3mSv5Hj7 bU02KkDZYCa3QS05rd0aGRIiRvx3hh/ItPb7CpZ+/kSJC92/TSjtUgRsCMk3ltzu q6OmhaB9MYG2oRQ+v1XX7ggQssadVirexWPt5c2qXJAqnvqU8M4Hy0d+KinhrwRp BqA8L4YAsD9hB7IYj7lGHagK84KMgGVNIkvwOr2oTG6aBcMlR1dlFLPP+fbJ22Lp 4wrmPH1iIqplkyCENpelSY/1oWnhPJE= -----END CERTIFICATE-----Generated at Fri Oct 17 10:44:34 2025 by rpki-client