$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa File: 1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa (raw, json) Hash identifier: NztxIzz/3YQO4mGqQgWrJUPViy2+u4K0tM10yDzrVmQ= Subject key identifier: 39:5B:73:1D:E2:46:06:63:2B:89:1F:37:BD:F5:98:52:FC:55:BB:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6C2F650F53D44992CF80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6c:2f:65:0f:53:d4:49:92:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a1f1e013-27b7-4cde-a495-844c5de8c911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d7:fa:e6:a2:ee:0c:bd:13:91:d4:e0:8c:47: f7:2b:40:bd:d1:66:61:bb:aa:20:02:f8:04:0f:76: 69:da:29:79:02:0b:84:72:b1:8e:03:d7:1b:67:8a: 99:dd:93:94:dd:b1:7c:c6:6e:37:d9:51:66:04:43: 83:88:02:e8:2d:99:e9:e6:af:7a:57:90:e9:b9:9f: da:10:ab:a5:5e:47:5b:a4:75:01:3e:d1:3c:12:61: 60:93:08:1c:de:50:22:fc:4e:b1:ed:d3:85:fc:74: f2:fc:ad:71:46:05:c2:94:01:74:ef:fb:cd:06:4d: 00:e4:c6:46:0e:cc:19:f4:16:bb:71:0e:66:21:68: 68:cc:1a:35:27:d3:6e:3d:0e:f8:a7:81:e9:b6:a8: 15:9a:d2:93:11:09:ee:a7:a4:51:1f:16:97:8b:77: 7b:39:3c:8d:67:5f:e7:b0:46:14:ec:6d:a5:24:1f: 3b:02:63:5e:35:cd:ea:99:bd:b9:b5:0b:0b:65:8e: 21:bd:34:a1:bb:82:70:76:db:ed:12:fc:63:fb:f0: d2:6b:2c:1d:29:9f:64:85:ca:dd:24:1e:cc:5b:ee: 7f:9a:bd:39:94:89:cb:90:b5:6c:de:0e:38:21:7e: 24:ea:a0:48:55:84:a7:db:11:33:22:24:cc:4d:f2: a3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5B:73:1D:E2:46:06:63:2B:89:1F:37:BD:F5:98:52:FC:55:BB:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2e:ec:cc:09:8d:33:1b:89:88:75:e8:4c:d8:ba:33:5a:da: 71:a2:bd:c2:7d:87:85:df:f8:c3:94:e0:1e:9e:3e:ae:58:b0: e7:23:20:36:c1:28:cf:69:23:b2:53:7b:24:79:54:7c:89:a6: d3:ef:4c:0c:cb:ec:fb:58:65:c2:04:4a:11:6c:ca:e8:03:3c: 74:4b:cd:57:6f:f7:9e:53:39:31:6a:8f:ed:86:2c:67:2a:ee: 1d:27:da:ec:ca:60:2a:53:7e:40:9c:77:6e:43:04:1d:0f:b0: 01:5b:88:f4:31:1b:27:7b:15:fd:f0:82:87:69:f9:37:5a:2e: 0f:06:55:3c:a3:d3:e0:a2:12:6f:ca:06:72:4a:b8:48:0f:0f: b5:11:f1:c6:67:18:77:4a:6d:62:21:fb:95:af:b6:72:07:9c: 78:c6:f1:a9:25:3c:d9:ec:74:a6:85:e4:cd:f0:13:58:48:25: 95:cf:2a:31:38:01:54:0c:96:f9:e3:76:3b:56:91:72:87:86: 25:2b:19:f7:1d:3b:38:50:cb:72:0b:37:df:0f:23:c0:6b:f5: ec:57:0f:1f:79:b5:5a:b1:c2:9a:d4:6a:6f:ff:2f:e4:15:c4: 34:15:fd:16:09:56:8f:2d:52:e0:96:33:45:cc:08:2f:a9:de: 5e:10:80:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWwvZQ9T1EmSz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTFmMWUwMTMtMjdiNy00Y2RlLWE0OTUtODQ0YzVkZThjOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNf65qLuDL0TkdTgjEf3K0C90WZhu6ogAvgE D3Zp2il5AguEcrGOA9cbZ4qZ3ZOU3bF8xm432VFmBEODiALoLZnp5q96V5DpuZ/a EKulXkdbpHUBPtE8EmFgkwgc3lAi/E6x7dOF/HTy/K1xRgXClAF07/vNBk0A5MZG DswZ9Ba7cQ5mIWhozBo1J9NuPQ74p4HptqgVmtKTEQnup6RRHxaXi3d7OTyNZ1/n sEYU7G2lJB87AmNeNc3qmb25tQsLZY4hvTShu4JwdtvtEvxj+/DSaywdKZ9khcrd JB7MW+5/mr05lInLkLVs3g44IX4k6qBIVYSn2xEzIiTMTfKj0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlbcx3iRgZjK4kfN731mFL8VbsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTA5NWU0OGUtYWZhOC0z M2YyLWIwZTYtZmNhNmRmM2FjODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAu7MwJjTMbiYh16EzYujNa2nGivcJ9h4Xf+MOU4B6ePq5YsOcjIDbB KM9pI7JTeyR5VHyJptPvTAzL7PtYZcIEShFsyugDPHRLzVdv955TOTFqj+2GLGcq 7h0n2uzKYCpTfkCcd25DBB0PsAFbiPQxGyd7Ff3wgodp+TdaLg8GVTyj0+CiEm/K BnJKuEgPD7UR8cZnGHdKbWIh+5WvtnIHnHjG8aklPNnsdKaF5M3wE1hIJZXPKjE4 AVQMlvnjdjtWkXKHhiUrGfcdOzhQy3ILN98PI8Br9exXDx95tVqxwprUam//L+QV xDQV/RYJVo8tUuCWM0XMCC+p3l4QgPQ= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:42 2025 by rpki-client