$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa File: 2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa (raw, json) Hash identifier: MmGBhrHJ4R0nOH8B+jUcHZmRPKJUcl/1VSsIOBowDc4= Subject key identifier: F8:EB:58:AE:73:9C:65:A9:58:BB:C4:EF:8D:AA:0A:60:A1:70:95:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B8A7CC97F8F85299220BCDF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 15169 IP address blocks: 172.217.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:c9:7f:8f:85:29:92:20:bc:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=e99293c5-8273-4b6d-b0b0-a83f6df80fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:64:5c:d8:f6:ea:b9:d0:92:e0:a4:98:90: d3:10:34:3c:cb:1a:b2:86:de:e1:2d:a3:eb:61:e8: b4:e8:fa:04:a0:fe:ab:99:e7:65:16:96:b6:f0:83: d4:86:d4:da:10:1a:ab:ed:28:ed:6d:59:f9:0e:b1: 37:a3:e7:60:cf:ea:c1:ab:61:39:d8:58:ab:f9:0b: 5f:2f:f5:b9:40:97:2f:f5:bd:09:87:2f:62:90:21: b8:d8:63:b8:99:06:9d:3f:03:0b:62:12:d4:a2:46: bd:75:9c:20:ed:7a:3a:0e:b1:0c:c1:9e:0b:3f:e2: 5d:bc:79:49:34:df:0c:0f:cb:c4:d9:bc:7b:38:ae: ad:44:86:7b:e8:8f:ca:a7:0e:74:cd:8b:ae:1f:1a: ea:5c:a6:bd:95:af:92:02:92:7b:42:a6:7e:11:89: 15:cb:97:94:a0:24:74:7d:b8:dc:60:08:24:19:6d: d4:8c:66:25:76:42:e5:b1:2b:d5:16:b6:28:e7:8a: 4a:21:c9:2c:6d:40:a0:cc:22:09:3e:eb:47:dd:5d: ae:ce:14:41:e3:b0:84:36:75:8f:6f:8c:76:17:b1: 37:67:d7:5e:a2:4d:00:b9:44:c1:4d:68:4e:76:57: 4e:3a:a9:cf:fa:5c:49:b5:02:bf:5d:e3:81:8c:bb: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EB:58:AE:73:9C:65:A9:58:BB:C4:EF:8D:AA:0A:60:A1:70:95:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e5:03:d8:27:13:27:16:48:63:e3:58:4c:0a:8a:66:e5:8c: 7f:af:41:b4:ff:5b:2a:6a:94:53:b0:0c:8d:fa:f2:5d:85:d5: 58:84:80:25:fb:b5:57:11:c3:fb:29:3a:25:ab:3c:6b:d2:82: 44:86:6d:14:af:65:e7:2b:9d:a3:0f:22:32:c3:36:56:41:d7: b5:2a:5d:a8:3e:6e:0e:02:eb:89:ab:03:84:48:21:e6:a4:8a: 26:da:68:34:28:49:59:a7:63:e7:c6:d6:ba:1e:08:db:30:50: 75:c6:5a:23:00:4b:62:62:22:cd:72:e3:76:0e:a0:0e:51:33: 76:64:52:5b:9e:ba:97:90:b8:b9:93:54:f0:36:91:a4:1c:cd: 77:f7:b2:a4:61:f2:2c:82:ac:21:86:6e:9e:c5:92:32:64:54: e7:ff:f9:c3:02:af:a4:cb:fc:c6:1b:ec:36:c0:83:fb:be:00: 3a:f5:67:89:c3:f6:28:b4:3e:55:f7:d5:92:4f:44:ed:8a:9b: 32:9d:9c:c6:d8:e7:f8:9b:cb:2f:a7:61:44:41:84:f0:7a:b7: 80:f5:60:49:8c:4a:cd:aa:8d:8a:51:1c:f3:5c:01:55:bd:b9: 31:90:01:ed:07:80:b6:34:cf:b1:cd:82:13:fe:32:59:5c:1f: dc:1c:c4:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfMl/j4UpkiC83wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk ZTk5MjkzYzUtODI3My00YjZkLWIwYjAtYTgzZjZkZjgwZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbJkXNj26rnQkuCkmJDTEDQ8yxqyht7hLaPr Yei06PoEoP6rmedlFpa28IPUhtTaEBqr7SjtbVn5DrE3o+dgz+rBq2E52Fir+Qtf L/W5QJcv9b0Jhy9ikCG42GO4mQadPwMLYhLUoka9dZwg7Xo6DrEMwZ4LP+JdvHlJ NN8MD8vE2bx7OK6tRIZ76I/Kpw50zYuuHxrqXKa9la+SApJ7QqZ+EYkVy5eUoCR0 fbjcYAgkGW3UjGYldkLlsSvVFrYo54pKIcksbUCgzCIJPutH3V2uzhRB47CENnWP b4x2F7E3Z9deok0AuUTBTWhOdldOOqnP+lxJtQK/XeOBjLs44QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjrWK5znGWpWLvE742qCmChcJVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmVlYTVlNDMtNGEyNy0z OTI4LTlhNmItZmJiNWNmMjMwODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/lA9gnEycWSGPjWEwKimbljH+vQbT/WypqlFOwDI368l2F1ViEgCX7 tVcRw/spOiWrPGvSgkSGbRSvZecrnaMPIjLDNlZB17UqXag+bg4C64mrA4RIIeak iibaaDQoSVmnY+fG1roeCNswUHXGWiMAS2JiIs1y43YOoA5RM3ZkUlueupeQuLmT VPA2kaQczXf3sqRh8iyCrCGGbp7FkjJkVOf/+cMCr6TL/MYb7DbAg/u+ADr1Z4nD 9ii0PlX31ZJPRO2KmzKdnMbY5/ibyy+nYURBhPB6t4D1YEmMSs2qjYpRHPNcAVW9 uTGQAe0HgLY0z7HNghP+MllcH9wcxBs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:29 2025 by rpki-client