$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2e6255a8-38f5-302d-9082-237e58ecb46c.roa File: 2e6255a8-38f5-302d-9082-237e58ecb46c.roa (raw, json) Hash identifier: okgvAUU+C1tNguOVkO+QYM6945lfaCBVf1qRGbgvUzQ= Subject key identifier: 7E:EC:F2:D6:20:F1:A8:AA:A0:40:D0:2C:2A:51:7D:90:5B:EB:ED:2A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B3DB898851E5C216B18864640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2e6255a8-38f5-302d-9082-237e58ecb46c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 172.217.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:98:85:1e:5c:21:6b:18:86:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=cb77db1d-9b74-467c-b444-ca7b774c8708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:62:d3:a0:da:6b:b5:b3:51:62:7b:82:42: 7b:8c:86:ce:e5:93:86:0f:33:0f:a3:20:39:1e:d1: fb:e9:6e:9e:2f:62:20:25:5c:9c:39:2f:53:e0:34: 53:b6:3e:1b:c4:42:51:6f:66:88:3f:6b:4a:57:cc: e5:1f:b9:89:5a:bc:30:fb:b5:5c:af:3a:75:d9:e1: d3:9e:d3:eb:29:6a:5c:9e:af:35:fb:c2:23:c6:41: fc:f7:38:0e:fd:1e:2b:2b:a0:c5:b0:c3:03:c3:7d: 65:5b:b4:43:2e:67:d2:ca:7c:94:8d:75:12:75:a5: 9e:87:e2:8c:7e:38:7f:89:c5:76:69:59:7d:84:3e: 81:b0:21:e4:f1:2c:73:a1:9f:a9:72:c9:b0:e9:fc: c4:72:ef:d1:60:a4:16:b3:8a:45:19:d8:de:24:39: 08:c7:66:50:96:db:5b:16:03:4f:a4:10:63:63:a6: 9d:cc:cb:cf:d4:bb:14:80:b6:c8:c9:ea:0b:96:79: de:7f:28:0a:63:fd:f4:20:6e:fd:0b:9d:6b:6d:e3: 3a:74:c5:84:fc:5c:bc:c9:8e:ba:68:12:5c:e0:72: 59:c0:15:aa:00:2d:f3:0e:70:2d:48:56:5f:af:7a: 67:fc:01:b0:12:ea:a9:35:b8:08:e7:6f:45:f5:79: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EC:F2:D6:20:F1:A8:AA:A0:40:D0:2C:2A:51:7D:90:5B:EB:ED:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2e6255a8-38f5-302d-9082-237e58ecb46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3d:2a:4c:b8:13:56:c8:92:dd:e0:b4:41:80:68:94:1a:0c: b1:e3:d1:fb:ef:02:83:8c:2a:d3:3d:2b:3e:fb:15:3c:4b:5c: 21:24:ef:90:32:5c:22:70:5c:37:13:00:7f:ca:1e:73:a5:9e: 20:1e:80:a7:ba:55:be:5f:e5:76:f3:58:4a:39:e7:f6:26:b1: 2a:71:e4:c6:7d:4f:e4:c5:a1:01:71:8e:7a:48:5d:bd:8a:5e: 5a:1a:80:ae:5c:1a:7f:27:6e:5c:6e:80:cf:72:08:c3:76:74: 80:7f:e1:99:86:2e:ef:71:1c:ee:f7:b1:60:e9:2c:3d:fa:21: 13:cc:0a:fa:ed:34:4f:13:d0:e9:e0:96:f6:ee:8e:fb:d0:b7: a2:e9:b4:a4:d6:1c:b3:c3:62:1d:85:57:e9:50:16:54:c5:fb: 7c:4e:a4:ca:f7:a4:ab:7a:64:92:fe:4c:8f:17:28:b4:3d:46: d1:63:ef:d5:17:a9:71:40:83:6b:69:dd:fc:f5:1f:2b:bd:b8: be:ab:09:27:d6:28:14:6a:18:44:1d:f3:b7:89:b9:39:db:ce: c0:ba:b4:de:b5:9e:24:99:59:25:17:84:32:a2:5a:1a:ea:62: 47:ca:94:5f:10:e8:b9:3d:75:08:74:61:d3:10:65:29:23:a1: f9:2d:7b:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uJiFHlwhaxiGRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Y2I3N2RiMWQtOWI3NC00NjdjLWI0NDQtY2E3Yjc3NGM4NzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDJi06Daa7WzUWJ7gkJ7jIbO5ZOGDzMPoyA5 HtH76W6eL2IgJVycOS9T4DRTtj4bxEJRb2aIP2tKV8zlH7mJWrww+7Vcrzp12eHT ntPrKWpcnq81+8IjxkH89zgO/R4rK6DFsMMDw31lW7RDLmfSynyUjXUSdaWeh+KM fjh/icV2aVl9hD6BsCHk8SxzoZ+pcsmw6fzEcu/RYKQWs4pFGdjeJDkIx2ZQlttb FgNPpBBjY6adzMvP1LsUgLbIyeoLlnnefygKY/30IG79C51rbeM6dMWE/Fy8yY66 aBJc4HJZwBWqAC3zDnAtSFZfr3pn/AGwEuqpNbgI529F9XmJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7s8tYg8aiqoEDQLCpRfZBb6+0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmU2MjU1YTgtMzhmNS0z MDJkLTkwODItMjM3ZTU4ZWNiNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM9Kky4E1bIkt3gtEGAaJQaDLHj0fvvAoOMKtM9Kz77FTxLXCEk75Ay XCJwXDcTAH/KHnOlniAegKe6Vb5f5XbzWEo55/YmsSpx5MZ9T+TFoQFxjnpIXb2K XloagK5cGn8nblxugM9yCMN2dIB/4ZmGLu9xHO73sWDpLD36IRPMCvrtNE8T0Ong lvbujvvQt6LptKTWHLPDYh2FV+lQFlTF+3xOpMr3pKt6ZJL+TI8XKLQ9RtFj79UX qXFAg2tp3fz1Hyu9uL6rCSfWKBRqGEQd87eJuTnbzsC6tN61niSZWSUXhDKiWhrq YkfKlF8Q6Lk9dQh0YdMQZSkjofkteyU= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:30 2025 by rpki-client