$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa File: 3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa (raw, json) Hash identifier: sNl65ILFAnm3QSnuqQaOvOJlehGtmWoNYkeCyMwYJp8= Subject key identifier: CA:87:5E:FD:8A:BF:0C:8D:79:00:A5:5D:B4:B8:FB:BA:9B:AC:66:95 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB406F062678808D69B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.217.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b4:06:f0:62:67:88:08:d6:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=aaf148de-a796-4bf1-b791-8691fad5c5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:68:0d:aa:6c:8e:49:de:37:58:3f:aa:51:e1: eb:04:da:1d:8b:b8:5e:eb:6b:94:4f:71:b0:ba:71: 92:74:c4:67:42:d2:9e:e3:7c:f0:59:3f:20:ad:3a: 47:e0:2a:8e:fb:09:62:a7:40:ed:9e:4b:de:ff:f8: 72:27:87:13:0a:cc:1c:6a:27:82:0f:5e:4b:67:3d: 9e:d1:39:74:5e:cb:18:df:b3:e0:3d:5e:b0:a5:4b: 0f:1a:32:64:d7:ba:36:af:ad:19:70:8d:16:61:31: 04:96:8d:ed:c8:41:6a:90:72:cc:b8:af:91:13:93: 45:c4:b6:9e:8e:7f:77:6e:35:8a:89:d7:09:e1:85: 44:97:8c:d2:72:07:d1:ce:e2:88:56:a9:02:a1:43: 87:8c:31:51:4c:fb:37:e9:27:c2:26:30:ea:51:75: 0c:d9:82:1e:0a:2b:e1:e4:c5:e1:5f:23:dc:c7:0a: 56:6d:c4:f0:9b:a0:75:2c:76:e6:c7:66:58:f4:64: 97:0c:d5:8f:a2:05:d3:31:fb:3a:56:55:6e:9d:1f: fd:a6:10:67:57:a1:90:5b:de:50:93:c4:55:4b:20: d0:18:de:45:67:a6:53:3c:50:33:84:dc:c6:fb:01: 96:93:7d:be:6d:40:84:0c:9b:9b:26:41:20:7c:25: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:87:5E:FD:8A:BF:0C:8D:79:00:A5:5D:B4:B8:FB:BA:9B:AC:66:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c5:85:78:e4:62:e2:d1:1d:c3:21:22:b4:23:12:25:be:31: 8e:66:7f:6c:d1:25:a5:80:43:65:3c:6d:3b:14:73:d0:7f:97: 27:72:5d:f7:c6:04:8d:15:93:36:cb:81:50:b1:16:15:52:25: 2e:cb:0d:43:6e:63:66:78:e8:1c:d8:d6:9d:40:21:06:68:5b: 81:94:b3:73:b3:3a:8d:6c:8f:7f:de:83:3c:5d:9d:80:91:de: 91:f6:68:cc:46:a0:69:68:18:28:da:b2:38:8e:2e:f1:cd:26: 7a:db:fc:e9:ce:b9:0a:31:22:88:05:74:50:6f:58:cb:1b:2c: 34:e3:11:18:ce:9c:f8:ad:9a:41:d3:a6:62:99:8b:e2:ba:9e: d5:3c:3b:c9:b5:59:a5:ee:bf:ef:36:fc:83:e7:5a:88:3e:a7: 61:fb:a1:84:fb:9e:4f:c4:06:ac:70:54:de:76:a2:5b:fe:f6: 08:f8:26:82:72:1f:d7:0e:1d:8a:9a:00:7a:2a:78:8c:ad:c5: 2f:63:60:33:c7:b7:82:c6:6b:7c:fb:2a:5a:a2:98:91:29:94: 58:ff:85:9f:95:28:12:d2:2d:6f:93:9d:e1:10:cf:43:36:47: 70:db:7e:6f:eb:f4:25:fb:92:d6:d4:14:19:e3:04:12:70:89: 23:bc:4b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LQG8GJniAjWmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YWFmMTQ4ZGUtYTc5Ni00YmYxLWI3OTEtODY5MWZhZDVjNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2gNqmyOSd43WD+qUeHrBNodi7he62uUT3Gw unGSdMRnQtKe43zwWT8grTpH4CqO+wlip0Dtnkve//hyJ4cTCswcaieCD15LZz2e 0Tl0XssY37PgPV6wpUsPGjJk17o2r60ZcI0WYTEElo3tyEFqkHLMuK+RE5NFxLae jn93bjWKidcJ4YVEl4zScgfRzuKIVqkCoUOHjDFRTPs36SfCJjDqUXUM2YIeCivh 5MXhXyPcxwpWbcTwm6B1LHbmx2ZY9GSXDNWPogXTMfs6VlVunR/9phBnV6GQW95Q k8RVSyDQGN5FZ6ZTPFAzhNzG+wGWk32+bUCEDJubJkEgfCUWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqHXv2KvwyNeQClXbS4+7qbrGaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2RkYTlmYTgtYjY5Yi0z Y2I0LTliZjEtNTJhZGY5OGYxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvFhXjkYuLRHcMhIrQjEiW+MY5mf2zRJaWAQ2U8bTsUc9B/lydyXffG BI0VkzbLgVCxFhVSJS7LDUNuY2Z46BzY1p1AIQZoW4GUs3OzOo1sj3/egzxdnYCR 3pH2aMxGoGloGCjasjiOLvHNJnrb/OnOuQoxIogFdFBvWMsbLDTjERjOnPitmkHT pmKZi+K6ntU8O8m1WaXuv+82/IPnWog+p2H7oYT7nk/EBqxwVN52olv+9gj4JoJy H9cOHYqaAHoqeIytxS9jYDPHt4LGa3z7KlqimJEplFj/hZ+VKBLSLW+TneEQz0M2 R3Dbfm/r9CX7ktbUFBnjBBJwiSO8S6M= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:09 2025 by rpki-client