$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa File: 42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa (raw, json) Hash identifier: c7eO8VwLVjhLAZ+kTe93LTCDb5JQ0OpdX2tkjki06z4= Subject key identifier: 49:B4:7D:F5:03:F5:2F:B1:DC:9C:28:68:DE:55:E4:0A:FD:0F:5B:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBF716C6E63ED6E4D9100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.217.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:bf:71:6c:6e:63:ed:6e:4d:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=c25f054f-8836-4bb4-9bcc-b98d93f8ea38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ba:46:ec:aa:57:1c:6e:73:7b:b3:2d:09:73: 9f:fb:68:97:07:68:46:95:9d:50:1e:74:5f:06:04: 3c:a4:95:10:c3:63:3a:1e:94:c0:bc:e1:eb:1a:5f: c8:9d:f2:19:12:34:73:c3:48:83:bb:20:af:7a:38: b5:08:fd:18:a7:12:a2:89:6b:4c:e9:ee:9d:14:fe: 3a:d4:90:71:fc:d2:12:4e:3a:34:76:d8:a8:c1:0c: 46:0d:ff:23:34:50:e8:4b:08:cf:ab:cc:6a:7c:1b: cc:25:0d:b5:87:2d:8a:e1:58:65:d4:c6:dc:ff:38: d0:25:00:90:ce:b4:f0:f0:73:73:07:82:76:8f:7b: 62:e1:c8:7b:63:1e:c1:05:ab:cf:0a:3d:26:b5:2f: 9f:d2:c2:05:88:af:68:30:7a:84:dd:24:31:12:ce: bf:a0:41:e6:4a:5c:e6:97:fa:5d:ee:1d:de:e5:80: 2c:0a:1a:b2:9a:d4:7c:28:c8:74:ab:9b:18:89:81: 6d:08:15:76:90:9a:3f:5a:2b:48:30:75:b4:b4:aa: 63:fb:16:d9:5f:ed:82:dc:91:a9:f8:46:1f:c8:17: f1:41:68:97:03:33:13:f2:b5:74:28:3e:05:59:0f: 19:8d:f0:9e:d1:5a:7f:32:78:36:41:04:da:dc:e8: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B4:7D:F5:03:F5:2F:B1:DC:9C:28:68:DE:55:E4:0A:FD:0F:5B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7a:e9:78:45:de:af:ae:5e:50:5b:2c:6a:85:26:84:b5:ff: ad:8b:30:a7:fb:3e:1a:2d:34:80:b3:f8:68:60:3a:aa:e2:8a: 38:f9:82:d9:c9:90:3c:45:5f:11:64:45:dc:d2:68:2b:18:4f: 71:f8:25:3d:d4:9d:3e:9b:f6:b1:f7:d7:22:50:a4:43:ff:37: fa:48:51:c3:ca:92:c6:98:dd:27:26:ea:9d:d0:0b:cd:00:fb: a5:26:5f:6a:b8:73:fc:5b:da:54:83:0d:86:44:2f:b6:8c:a4: db:75:3b:8e:9c:30:e2:95:dc:c9:4a:b9:1e:54:7f:49:8c:3f: 3c:b0:c7:5a:09:83:49:56:4c:51:f6:51:47:e5:4e:2c:df:80: d4:d2:a5:54:fd:1a:63:36:00:a9:c1:bb:a0:81:f8:cd:0d:d1: aa:9b:e0:95:97:fc:57:cb:32:14:8d:46:1e:f1:8a:40:54:3e: cf:b9:fd:a1:f6:08:84:7b:ce:9b:40:88:e3:21:d0:92:84:0b: e2:4f:3c:0a:60:70:49:8f:68:9f:4e:c0:8e:5d:95:4f:a5:02: 3a:f3:2b:51:9e:8a:ac:2a:b6:b0:6f:11:5a:69:f7:8c:dc:4b: e1:11:da:61:04:95:44:88:9a:26:4b:45:46:78:de:eb:c6:78: 7a:32:16:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L9xbG5j7W5NkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YzI1ZjA1NGYtODgzNi00YmI0LTliY2MtYjk4ZDkzZjhlYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLpG7KpXHG5ze7MtCXOf+2iXB2hGlZ1QHnRf BgQ8pJUQw2M6HpTAvOHrGl/InfIZEjRzw0iDuyCveji1CP0YpxKiiWtM6e6dFP46 1JBx/NISTjo0dtiowQxGDf8jNFDoSwjPq8xqfBvMJQ21hy2K4Vhl1Mbc/zjQJQCQ zrTw8HNzB4J2j3ti4ch7Yx7BBavPCj0mtS+f0sIFiK9oMHqE3SQxEs6/oEHmSlzm l/pd7h3e5YAsChqymtR8KMh0q5sYiYFtCBV2kJo/WitIMHW0tKpj+xbZX+2C3JGp +EYfyBfxQWiXAzMT8rV0KD4FWQ8ZjfCe0Vp/Mng2QQTa3OgzswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm0ffUD9S+x3JwoaN5V5Ar9D1uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDJhZmNlYmItMTVkYy0z OGE5LWE2MGEtMjc2YTllYmYxZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd66XhF3q+uXlBbLGqFJoS1/62LMKf7PhotNICz+GhgOqriijj5gtnJ kDxFXxFkRdzSaCsYT3H4JT3UnT6b9rH31yJQpEP/N/pIUcPKksaY3Scm6p3QC80A +6UmX2q4c/xb2lSDDYZEL7aMpNt1O46cMOKV3MlKuR5Uf0mMPzywx1oJg0lWTFH2 UUflTizfgNTSpVT9GmM2AKnBu6CB+M0N0aqb4JWX/FfLMhSNRh7xikBUPs+5/aH2 CIR7zptAiOMh0JKEC+JPPApgcEmPaJ9OwI5dlU+lAjrzK1GeiqwqtrBvEVpp94zc S+ER2mEElUSImiZLRUZ43uvGeHoyFrY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:03 2025 by rpki-client