$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e343912-2ef6-33f3-b305-23dfbe847126.roa File: 1e343912-2ef6-33f3-b305-23dfbe847126.roa (raw, json) Hash identifier: rjTrLdkwMg8XxXGnqrJzKgZhIquazQqBmAYtnN3Ax4I= Subject key identifier: D8:35:81:D1:5D:1A:7D:03:02:F8:B5:D4:6A:9A:1F:B2:EA:DB:C6:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD702DD3A0BFC98D776B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e343912-2ef6-33f3-b305-23dfbe847126.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:70:2d:d3:a0:bf:c9:8d:77:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=5120c52d-a306-41e8-bbcd-afd67a8ac3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:42:70:89:5f:4c:fd:d7:ae:2a:bb:51:6b: 82:45:58:4d:50:97:d7:88:74:fc:06:f2:9e:73:f0: 6a:78:96:32:7f:36:9b:67:ab:9e:e4:36:69:18:a2: 71:cb:0d:f1:1e:30:59:dc:9f:72:12:48:46:1a:7b: 75:f5:c2:dc:04:16:6e:f6:bd:d1:46:7a:cc:c8:13: 69:fd:52:29:39:93:95:3a:88:17:ef:e5:15:f0:d3: f0:36:24:78:71:da:3d:38:18:8f:52:f1:37:1c:1f: 4e:9f:e1:98:ef:9b:0d:3f:b9:c9:09:e0:eb:f0:09: b4:12:df:a3:4d:d3:20:73:8d:2e:bf:3f:3f:c4:18: f9:cb:03:cb:7d:97:2b:f0:68:12:64:55:8e:7c:4b: b2:c5:c2:f4:6c:39:a6:f4:3f:52:8d:c3:6a:75:2b: bc:3f:9d:f3:ef:8b:20:4b:34:fd:49:16:2c:ba:10: 51:3d:4e:91:3e:f3:ea:07:29:4c:11:98:60:ea:ce: 45:a8:1e:bb:d5:fa:ca:85:00:f6:8f:b4:c4:d9:d7: 95:70:1e:c0:a2:a2:a2:eb:61:80:78:b6:8d:f6:e1: 90:3a:6d:b6:fa:d3:74:2b:31:54:e4:38:c0:24:75: 00:b7:63:7c:44:31:1e:7c:8a:d1:c0:6d:54:ea:40: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:35:81:D1:5D:1A:7D:03:02:F8:B5:D4:6A:9A:1F:B2:EA:DB:C6:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e343912-2ef6-33f3-b305-23dfbe847126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:83:bc:bc:26:ba:76:ed:ea:3a:4d:fa:09:5d:1f:22:82:8b: 47:3e:58:54:3b:12:84:c1:a6:26:03:da:28:a9:a8:67:02:a5: b6:af:57:c1:07:19:e0:13:ad:85:22:e2:6b:10:e8:d7:cd:93: 24:dc:d0:dd:c3:fb:75:e8:6a:a2:09:ba:7b:f3:cc:44:6c:84: a2:c7:6b:d9:de:b0:2c:06:4f:70:24:7f:9a:17:73:dc:e7:17: 03:00:cc:20:38:f2:a7:bc:df:93:03:72:2f:48:aa:49:04:93: 75:c6:1b:6e:83:d9:1d:9d:43:22:58:f8:fe:a7:89:f3:01:d8: 67:47:a5:0e:19:f6:8b:ff:8f:90:fd:2e:7e:10:df:7d:a0:7c: 00:c0:63:db:b9:bf:64:fc:29:d1:a9:10:11:a6:ef:c9:79:0b: 3b:0c:2f:3f:65:12:26:2a:ee:7e:49:a3:75:5a:6f:96:0c:53: db:f5:97:83:a4:5d:64:38:8d:90:e6:15:85:a4:16:0e:3e:14: 9b:ba:27:f2:d7:e4:05:b5:bb:b9:e0:30:77:cf:62:9f:b7:44: 56:b6:c5:63:ae:ca:ab:d9:37:54:c9:c2:3e:e7:39:10:2e:bc: 93:43:e1:f2:cb:6f:fa:47:85:14:fa:e2:e9:ba:bd:84:7e:84: 70:87:e8:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXAt06C/yY13awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTEyMGM1MmQtYTMwNi00MWU4LWJiY2QtYWZkNjdhOGFjM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3hCcIlfTP3Xriq7UWuCRVhNUJfXiHT8BvKe c/BqeJYyfzabZ6ue5DZpGKJxyw3xHjBZ3J9yEkhGGnt19cLcBBZu9r3RRnrMyBNp /VIpOZOVOogX7+UV8NPwNiR4cdo9OBiPUvE3HB9On+GY75sNP7nJCeDr8Am0Et+j TdMgc40uvz8/xBj5ywPLfZcr8GgSZFWOfEuyxcL0bDmm9D9SjcNqdSu8P53z74sg SzT9SRYsuhBRPU6RPvPqBylMEZhg6s5FqB671frKhQD2j7TE2deVcB7AoqKi62GA eLaN9uGQOm22+tN0KzFU5DjAJHUAt2N8RDEefIrRwG1U6kC1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg1gdFdGn0DAvi11GqaH7Lq28bZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWUzNDM5MTItMmVmNi0z M2YzLWIzMDUtMjNkZmJlODQ3MTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeDvLwmunbt6jpN+gldHyKCi0c+WFQ7EoTBpiYD2iipqGcCpbavV8EH GeATrYUi4msQ6NfNkyTc0N3D+3XoaqIJunvzzERshKLHa9nesCwGT3Akf5oXc9zn FwMAzCA48qe835MDci9IqkkEk3XGG26D2R2dQyJY+P6nifMB2GdHpQ4Z9ov/j5D9 Ln4Q332gfADAY9u5v2T8KdGpEBGm78l5CzsMLz9lEiYq7n5Jo3Vab5YMU9v1l4Ok XWQ4jZDmFYWkFg4+FJu6J/LX5AW1u7ngMHfPYp+3RFa2xWOuyqvZN1TJwj7nORAu vJND4fLLb/pHhRT64um6vYR+hHCH6Hs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:21 2025 by rpki-client