$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa File: 353aa361-816d-338e-89e8-88e5fd85eccc.roa (raw, json) Hash identifier: sBKn01HBSYTRkBD4qQHFs7pzUZeZNr2S1w02BxBzL40= Subject key identifier: EE:43:0B:17:8A:C4:46:44:40:1B:87:DE:9B:CA:8C:86:24:54:6E:4D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE1C9721A123CD20E0A8C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:1c:97:21:a1:23:cd:20:e0:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2a6e01c9-2f7b-45bc-aa72-8566e1352090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:ba:7a:a5:b5:c3:aa:bf:39:26:01:24:da: 71:6b:b2:ff:b9:0f:29:f5:f1:78:f4:bf:71:c9:e9: 37:f7:cd:d5:e0:6f:82:fd:08:27:9e:d3:1a:5d:28: b6:49:1e:61:f7:73:77:30:3c:81:35:2d:69:58:94: 6f:11:d0:bb:14:93:bd:c5:48:81:ab:a0:02:8a:9d: 2e:58:0e:95:19:70:99:4d:55:44:69:9d:87:e1:e3: f7:d0:fb:6f:c6:43:5b:89:32:1f:09:04:d4:76:86: 92:29:21:70:b2:5e:8c:ab:2d:a7:b6:19:d0:ca:fc: 09:c7:99:e9:26:8f:75:f2:f3:d6:b7:e2:cf:9d:36: a9:79:43:00:59:9d:31:32:27:94:79:92:16:a3:bb: 05:54:e5:ac:0f:0f:53:1e:8c:98:cf:41:3e:32:b1: 3b:9b:df:cf:71:62:96:26:b5:0f:f4:2f:2a:c3:bc: 86:2c:cb:a0:a9:64:10:e8:a9:32:bd:a8:8b:fc:6e: 9e:84:44:52:f1:b7:f5:71:81:9a:15:8f:bb:84:a4: 79:1b:b8:fe:50:43:fb:19:93:f2:4c:b6:34:eb:e3: f6:e3:09:cb:97:d0:65:8e:ae:d5:d3:ef:1b:79:b3: 4c:9a:26:cb:22:91:a7:f5:88:c2:44:09:ef:3c:fa: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:43:0B:17:8A:C4:46:44:40:1B:87:DE:9B:CA:8C:86:24:54:6E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a6:40:6f:6e:5a:ab:a8:5e:3b:00:b2:e0:b0:04:ee:ef:e9: 50:b3:3b:c3:7f:ad:37:ba:df:d2:e9:27:bb:da:39:01:ae:2e: 9e:66:6c:40:3d:40:aa:b0:af:df:75:3f:8b:ba:5d:3b:8e:62: 88:40:cb:97:ce:18:02:ac:64:9b:a7:fb:9a:1a:a0:5c:8e:e0: 90:b1:2a:94:c8:25:b2:75:40:30:da:35:32:9c:10:07:12:b0: bb:54:8d:6e:69:ea:ea:e4:cd:7b:07:c5:95:84:78:5a:87:be: f8:69:9b:86:b1:43:b8:91:95:cc:cf:d2:e1:ed:15:28:b4:83: 2b:32:33:ba:9b:25:72:59:f3:99:d2:94:d1:be:b0:0e:f4:0f: ee:13:d9:9b:b0:58:1e:c1:88:3e:a3:58:13:2b:fc:b8:0a:4e: 64:71:85:29:25:2c:e6:6a:96:10:b7:f4:3e:66:39:4d:6f:b3: ba:91:78:03:a4:d9:9e:bd:75:27:7a:84:31:14:ff:0b:d5:ed: e2:3d:43:6c:43:dc:41:a6:81:b0:46:c0:df:1d:61:f6:49:c0: 91:f5:21:7e:d2:cb:63:ea:ed:b0:18:7f:00:cf:65:56:0e:2b: 65:cf:40:d5:b7:6d:ee:e9:dc:a1:ef:0a:2a:20:cd:8e:6d:d2: e8:81:9d:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhyXIaEjzSDgqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmE2ZTAxYzktMmY3Yi00NWJjLWFhNzItODU2NmUxMzUyMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumS6eqW1w6q/OSYBJNpxa7L/uQ8p9fF49L9x yek3983V4G+C/QgnntMaXSi2SR5h93N3MDyBNS1pWJRvEdC7FJO9xUiBq6ACip0u WA6VGXCZTVVEaZ2H4eP30PtvxkNbiTIfCQTUdoaSKSFwsl6Mqy2nthnQyvwJx5np Jo918vPWt+LPnTapeUMAWZ0xMieUeZIWo7sFVOWsDw9THoyYz0E+MrE7m9/PcWKW JrUP9C8qw7yGLMugqWQQ6KkyvaiL/G6ehERS8bf1cYGaFY+7hKR5G7j+UEP7GZPy TLY06+P24wnLl9Bljq7V0+8bebNMmibLIpGn9YjCRAnvPPq06wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5DCxeKxEZEQBuH3pvKjIYkVG5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzUzYWEzNjEtODE2ZC0z MzhlLTg5ZTgtODhlNWZkODVlY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+mQG9uWquoXjsAsuCwBO7v6VCzO8N/rTe639LpJ7vaOQGuLp5mbEA9 QKqwr991P4u6XTuOYohAy5fOGAKsZJun+5oaoFyO4JCxKpTIJbJ1QDDaNTKcEAcS sLtUjW5p6urkzXsHxZWEeFqHvvhpm4axQ7iRlczP0uHtFSi0gysyM7qbJXJZ85nS lNG+sA70D+4T2ZuwWB7BiD6jWBMr/LgKTmRxhSklLOZqlhC39D5mOU1vs7qReAOk 2Z69dSd6hDEU/wvV7eI9Q2xD3EGmgbBGwN8dYfZJwJH1IX7Sy2Pq7bAYfwDPZVYO K2XPQNW3be7p3KHvCiogzY5t0uiBnTg= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:46 2025 by rpki-client