$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa File: 311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa (raw, json) Hash identifier: d/PRtTX0QQ7Nkqixo8tLRwBr+aqV2tYpjEkhO1LhTbg= Subject key identifier: A0:99:6F:FE:32:59:41:11:35:81:DC:D4:CB:84:1E:7F:77:19:55:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE11B90D58D40570783AA4 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:11:b9:0d:58:d4:05:70:78:3a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8db79b33-1512-42b3-afbe-faa3bac95a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:a6:7f:85:3b:27:db:fe:b1:5f:39:5c:c9: 59:88:9a:69:01:b5:35:5f:5c:cf:5d:e7:5c:d6:1c: 37:73:3f:38:7f:ab:69:52:d8:b3:d1:d6:71:92:4f: ae:09:31:9b:76:32:9d:07:bb:5e:18:78:8a:ff:b6: 5d:cb:77:f1:ce:9b:74:ef:dd:f3:1f:61:16:7f:e4: 38:1f:44:b0:fd:a2:79:f3:5f:95:9c:3b:2a:a6:73: 8e:b8:2b:f6:d9:8a:6a:eb:4e:e0:52:8e:ae:b4:eb: b6:bf:f1:10:ee:87:50:49:71:28:07:16:8b:e1:b7: 1c:27:97:e6:3a:c2:ba:81:28:38:1a:ed:a9:8a:0a: bc:a6:f6:54:1f:12:90:a9:05:34:eb:01:ef:52:7c: 32:26:2f:0b:83:ad:ea:63:0f:29:55:58:42:f3:ba: a4:8f:2c:d9:00:7a:4f:e1:19:47:8d:4a:92:50:3d: b7:8a:e1:9d:4a:d3:54:88:65:af:58:e3:4e:46:2f: e0:d3:8a:a9:26:b0:99:72:90:86:41:d3:16:f1:4d: 71:d6:73:5a:56:1f:33:6f:d6:0d:dc:5e:90:e2:6e: 34:c5:43:f6:8f:a2:d3:64:22:3a:db:db:cc:a1:18: 3b:78:23:c5:c5:4b:b9:9a:4b:b1:f7:f8:37:1f:0a: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:99:6F:FE:32:59:41:11:35:81:DC:D4:CB:84:1E:7F:77:19:55:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b1:c8:10:df:c2:cb:d3:d7:9b:bd:92:47:e8:ed:d9:89:35: f1:38:6f:2c:3f:be:93:f5:92:a1:dd:d0:c2:7d:e3:c8:9b:b5: d7:97:ff:ed:8d:fe:61:1e:30:83:f5:70:9f:e4:9b:97:41:a1: df:e0:34:d5:be:58:4e:1c:98:db:ae:b5:f1:c1:02:0c:89:b0: 9e:8a:58:09:ac:1f:1a:80:9a:80:4d:bf:8e:de:32:f6:59:20: aa:6e:72:57:c7:95:2d:77:fb:af:d6:4f:47:0e:e2:4e:e2:b2: d9:df:9d:af:09:ae:32:89:bc:f5:1f:53:d1:1f:35:e1:b9:ff: f8:2e:a8:1b:99:51:cc:71:05:3c:60:b0:e9:e6:f7:0d:58:f2: 80:ee:87:09:89:48:4b:4b:20:b7:6b:fc:44:ba:95:6b:cf:d2: 11:4f:ac:6b:ec:6a:06:7e:80:74:2b:6a:da:cf:6a:20:1e:a4: a7:dc:a2:81:17:e6:44:0c:75:62:fa:8b:46:b5:cd:2f:a0:c2: dd:72:cd:0a:c6:6b:8f:87:86:fe:b8:df:15:16:e6:65:5f:fc: 7e:59:03:a2:e7:da:ff:d3:4a:41:b2:4d:55:85:ed:ab:39:f6: 9f:44:d5:2a:4f:b4:32:15:ea:ab:fc:4e:8a:73:d7:1b:7e:fd: 56:b3:37:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhG5DVjUBXB4OqQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGRiNzliMzMtMTUxMi00MmIzLWFmYmUtZmFhM2JhYzk1YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOymf4U7J9v+sV85XMlZiJppAbU1X1zPXedc 1hw3cz84f6tpUtiz0dZxkk+uCTGbdjKdB7teGHiK/7Zdy3fxzpt0793zH2EWf+Q4 H0Sw/aJ581+VnDsqpnOOuCv22Ypq607gUo6utOu2v/EQ7odQSXEoBxaL4bccJ5fm OsK6gSg4Gu2pigq8pvZUHxKQqQU06wHvUnwyJi8Lg63qYw8pVVhC87qkjyzZAHpP 4RlHjUqSUD23iuGdStNUiGWvWONORi/g04qpJrCZcpCGQdMW8U1x1nNaVh8zb9YN 3F6Q4m40xUP2j6LTZCI629vMoRg7eCPFxUu5mkux9/g3Hwq7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCZb/4yWUERNYHc1MuEHn93GVXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzExZWRkMzQtYzIxZS0z NmE3LWE2Y2ItMmZlNGNiNjNkNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+xyBDfwsvT15u9kkfo7dmJNfE4byw/vpP1kqHd0MJ948ibtdeX/+2N /mEeMIP1cJ/km5dBod/gNNW+WE4cmNuutfHBAgyJsJ6KWAmsHxqAmoBNv47eMvZZ IKpuclfHlS13+6/WT0cO4k7istnfna8JrjKJvPUfU9EfNeG5//guqBuZUcxxBTxg sOnm9w1Y8oDuhwmJSEtLILdr/ES6lWvP0hFPrGvsagZ+gHQratrPaiAepKfcooEX 5kQMdWL6i0a1zS+gwt1yzQrGa4+Hhv643xUW5mVf/H5ZA6Ln2v/TSkGyTVWF7as5 9p9E1SpPtDIV6qv8Topz1xt+/VazN6o= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:07 2025 by rpki-client