$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa File: 3abee81f-b508-3c4e-9dc5-859969e3d79e.roa (raw, json) Hash identifier: pzTDqYpfv2rbGPw47qETcUuumJzDvEILyFobDkcNiBw= Subject key identifier: 74:4E:A8:21:33:AC:55:0E:61:28:DE:E0:84:86:A1:42:4E:8F:39:F4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD700D44808A91744A00A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:70:0d:44:80:8a:91:74:4a:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=6950e514-2300-46aa-8264-62164a2b7966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:81:cc:24:db:f5:41:6d:e9:92:78:c3:23: 63:af:70:4c:04:0c:48:d8:8b:dc:e3:9c:e9:d9:31: 7f:db:5e:1c:8e:27:50:78:74:f7:a4:84:93:6a:60: aa:44:e9:34:e4:95:70:c0:bf:cd:cd:69:6f:54:1b: dc:bd:96:cf:91:4c:f0:00:7a:3d:d8:4c:f1:06:1b: ac:2e:37:6d:de:64:f2:f5:81:18:09:85:1a:62:42: 9a:ce:79:ca:f8:f7:c8:7f:00:75:61:ef:13:a4:89: aa:fa:89:f0:c2:02:72:c2:ef:c1:ee:da:f4:17:60: d6:b8:3f:da:c9:e1:fd:67:c1:82:64:bb:0a:9d:99: 54:21:8d:4e:02:1d:26:3a:9a:58:ed:aa:b5:27:2c: 24:7c:5e:70:e9:fa:fa:b6:e7:1f:1e:b8:75:b3:66: 62:c4:29:09:72:d8:df:7c:55:05:e2:31:94:55:5c: 89:79:6f:1e:7c:96:e4:39:ff:43:c1:47:3a:1a:bf: d0:38:18:3b:3d:d0:83:fd:c5:b7:3d:0b:eb:90:20: 84:81:4e:27:e5:5a:e6:6e:a5:20:b6:4a:65:21:48: e5:a8:8f:35:eb:95:9f:ff:70:67:5f:da:c4:f2:88: 69:fc:53:4d:ca:b2:b5:7d:8b:61:5e:cd:89:c7:e9: 46:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4E:A8:21:33:AC:55:0E:61:28:DE:E0:84:86:A1:42:4E:8F:39:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:bd:68:a1:38:fd:fe:f4:6e:bf:57:0f:da:67:7b:d6:ce:ee: a8:c5:93:34:2b:e0:4d:68:3a:40:a2:3b:95:9e:f2:9a:f9:33: 03:63:02:75:c2:fe:53:e6:50:64:7b:3c:fd:34:31:03:10:57: dd:d8:58:ae:cc:d9:85:52:56:7f:c0:e7:49:28:40:1b:23:b5: 74:96:3e:0f:4b:fb:4e:91:12:e4:76:55:57:83:c1:ac:33:cd: 2a:fd:d2:ac:61:de:a0:8e:11:77:bc:d1:98:7f:68:4b:ad:f6: bd:f0:c8:05:3f:b0:39:cd:53:f8:19:fa:5c:d7:f5:68:95:48: c7:9b:3d:ee:7a:32:eb:41:0c:61:1d:e2:fd:0e:ea:fe:c1:39: 48:e0:d5:5e:ff:e1:8d:36:5d:0f:49:25:af:a9:4e:88:08:74: 59:85:ea:35:ce:c9:e7:e7:17:42:28:d2:25:75:08:9f:e3:b9: 86:cc:70:26:ba:61:1f:77:31:cf:58:4c:09:c2:b0:08:d7:6a: 69:b4:32:86:49:b7:18:5f:67:6f:49:03:43:72:97:1f:2c:ff: 39:48:81:63:fa:47:fd:d7:1f:64:a9:43:02:f8:31:a3:c5:a5: 42:6b:24:98:63:57:96:a2:2b:18:ca:ee:42:b2:d3:16:73:ad: e8:14:5e:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXANRICKkXRKAKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Njk1MGU1MTQtMjMwMC00NmFhLTgyNjQtNjIxNjRhMmI3OTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8KBzCTb9UFt6ZJ4wyNjr3BMBAxI2Ivc45zp 2TF/214cjidQeHT3pISTamCqROk05JVwwL/NzWlvVBvcvZbPkUzwAHo92EzxBhus Ljdt3mTy9YEYCYUaYkKaznnK+PfIfwB1Ye8TpImq+onwwgJywu/B7tr0F2DWuD/a yeH9Z8GCZLsKnZlUIY1OAh0mOppY7aq1JywkfF5w6fr6tucfHrh1s2ZixCkJctjf fFUF4jGUVVyJeW8efJbkOf9DwUc6Gr/QOBg7PdCD/cW3PQvrkCCEgU4n5VrmbqUg tkplIUjlqI8165Wf/3BnX9rE8ohp/FNNyrK1fYthXs2Jx+lG+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHROqCEzrFUOYSje4ISGoUJOjzn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FiZWU4MWYtYjUwOC0z YzRlLTlkYzUtODU5OTY5ZTNkNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi9aKE4/f70br9XD9pne9bO7qjFkzQr4E1oOkCiO5We8pr5MwNjAnXC /lPmUGR7PP00MQMQV93YWK7M2YVSVn/A50koQBsjtXSWPg9L+06REuR2VVeDwawz zSr90qxh3qCOEXe80Zh/aEut9r3wyAU/sDnNU/gZ+lzX9WiVSMebPe56MutBDGEd 4v0O6v7BOUjg1V7/4Y02XQ9JJa+pTogIdFmF6jXOyefnF0Io0iV1CJ/juYbMcCa6 YR93Mc9YTAnCsAjXamm0MoZJtxhfZ29JA0Nylx8s/zlIgWP6R/3XH2SpQwL4MaPF pUJrJJhjV5aiKxjK7kKy0xZzregUXpY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:29 2025 by rpki-client