$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa File: 21512194-aac9-3b75-b614-eb08260f717b.roa (raw, json) Hash identifier: Nvi6HgRiQiAYUSHykw7u79WCnvaKUo3FLpgSv9i+yco= Subject key identifier: D0:2F:AD:6D:82:3E:88:93:09:29:46:8D:9C:23:00:77:54:DB:DB:10 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD4F2C0E497394B6C920B8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4f:2c:0e:49:73:94:b6:c9:20:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e6be1c4a-a479-42ea-ae99-f2d3f5102c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:9d:bc:68:97:b7:a1:50:51:78:1d:13:d5: fa:f7:12:73:b9:21:50:38:cf:8a:ef:73:f2:a8:2a: 35:2b:48:72:c9:93:b2:59:a4:0a:7c:ac:15:8d:e1: 52:05:d9:a4:f5:e5:18:b3:20:10:e5:63:7b:f8:a1: 86:9f:64:68:35:94:e8:0c:50:10:2c:4b:46:a5:61: 65:54:31:11:a1:56:ce:cf:19:99:45:aa:d9:ac:fb: 2c:c0:51:2c:38:af:d9:37:e1:da:d2:84:52:72:28: c8:a2:68:ab:07:c1:21:46:7e:ba:60:29:f8:bf:10: cf:d2:07:f0:0a:03:7b:58:41:60:06:33:b9:2e:cc: db:ed:ac:fc:7b:99:32:8c:a2:66:2d:aa:8a:fe:a8: 10:b5:63:5f:e9:8c:96:1e:24:0e:cc:29:6e:0e:b3: 2c:61:f8:21:71:06:38:a2:92:09:0e:ac:89:75:27: e8:49:d8:2d:f4:e1:38:b6:d2:8b:8c:e4:e0:dd:f8: 4c:f3:de:d9:23:5a:4f:10:0d:0f:3c:63:df:17:ee: ad:e1:d2:ef:da:91:b9:ca:91:2d:e0:f4:de:f3:20: fd:c6:d7:78:a1:7d:f4:02:d5:cd:d5:69:0a:bc:9c: 24:03:e3:56:ff:2e:5d:13:62:87:45:6f:3a:35:4e: 0c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2F:AD:6D:82:3E:88:93:09:29:46:8D:9C:23:00:77:54:DB:DB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:a5:33:72:5c:03:c5:8b:09:dd:14:8b:31:0a:8f:cb:4d:b1: 29:41:4d:08:02:a4:c3:bc:14:9d:34:aa:80:a0:b4:b5:31:fa: 81:7f:43:9c:de:9e:f1:07:16:2f:ee:47:72:b4:81:7c:cb:a0: 9f:7b:3a:bc:39:8a:0d:73:1c:e5:87:60:24:1f:58:7a:0b:7f: 3c:77:05:2c:6d:ad:f6:c1:62:6c:d5:f3:a0:58:50:c5:fd:15: 37:33:12:cb:6a:94:51:7e:58:98:ea:c1:6d:73:3c:e7:e8:66: 51:76:e4:0c:09:3e:a7:f0:aa:dd:74:2d:b1:b9:48:f8:be:b5: 83:b5:20:4e:f1:22:7f:0c:ae:44:a8:a2:ad:bb:02:ff:a2:de: 4b:08:16:2d:0e:b5:b2:30:ab:e2:c1:05:a0:4c:4f:1c:94:3c: 6b:d5:0e:55:c5:36:8c:99:9f:59:da:f2:8f:0c:92:28:fc:08: 4a:1d:a9:04:07:69:84:eb:ee:50:50:e7:13:ed:d7:ff:ae:da: c7:9f:e9:fc:08:4f:f6:f4:60:65:06:c6:9b:4e:2d:2b:02:51: e3:11:4d:18:83:e9:47:83:0e:6d:78:9f:23:f8:ec:dd:14:b2: ac:d4:d0:5d:d7:a9:ef:a5:0e:13:1d:9a:74:05:da:8a:ed:f5: 57:5d:5a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzU8sDklzlLbJILgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTZiZTFjNGEtYTQ3OS00MmVhLWFlOTktZjJkM2Y1MTAyYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji+dvGiXt6FQUXgdE9X69xJzuSFQOM+K73Py qCo1K0hyyZOyWaQKfKwVjeFSBdmk9eUYsyAQ5WN7+KGGn2RoNZToDFAQLEtGpWFl VDERoVbOzxmZRarZrPsswFEsOK/ZN+Ha0oRScijIomirB8EhRn66YCn4vxDP0gfw CgN7WEFgBjO5Lszb7az8e5kyjKJmLaqK/qgQtWNf6YyWHiQOzCluDrMsYfghcQY4 opIJDqyJdSfoSdgt9OE4ttKLjOTg3fhM897ZI1pPEA0PPGPfF+6t4dLv2pG5ypEt 4PTe8yD9xtd4oX30AtXN1WkKvJwkA+NW/y5dE2KHRW86NU4M0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAvrW2CPoiTCSlGjZwjAHdU29sQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjE1MTIxOTQtYWFjOS0z Yjc1LWI2MTQtZWIwODI2MGY3MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+lM3JcA8WLCd0UizEKj8tNsSlBTQgCpMO8FJ00qoCgtLUx+oF/Q5ze nvEHFi/uR3K0gXzLoJ97Orw5ig1zHOWHYCQfWHoLfzx3BSxtrfbBYmzV86BYUMX9 FTczEstqlFF+WJjqwW1zPOfoZlF25AwJPqfwqt10LbG5SPi+tYO1IE7xIn8MrkSo oq27Av+i3ksIFi0OtbIwq+LBBaBMTxyUPGvVDlXFNoyZn1na8o8Mkij8CEodqQQH aYTr7lBQ5xPt1/+u2sef6fwIT/b0YGUGxptOLSsCUeMRTRiD6UeDDm14nyP47N0U sqzU0F3Xqe+lDhMdmnQF2ort9VddWjA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:19 2025 by rpki-client