$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa File: 4a004332-dbeb-38d1-8166-bb9de0e699b7.roa (raw, json) Hash identifier: mVyYd2c5lZVbffHOD/Iyadbp8A1zP5l4b/txZ2Y7MSM= Subject key identifier: 66:FB:FE:B4:1A:E3:95:3F:B2:AB:17:3A:3B:0C:29:30:FE:6D:33:69 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBB0B78279FDE44A97880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.217.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:bb:0b:78:27:9f:de:44:a9:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=911029ee-eb2a-46d5-8f34-3661c2c55d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e4:21:95:f3:94:43:fb:72:3f:71:6d:b0:21: cd:2f:d7:ee:8e:4f:53:12:a5:36:be:d5:ab:76:bc: 2d:27:13:72:58:e3:ef:50:97:96:0e:1b:e4:66:7a: 8e:69:5f:66:a3:81:0f:31:94:eb:f8:47:83:91:15: 26:95:e5:e4:63:65:88:16:94:9f:63:a4:44:a0:65: d0:c5:6f:75:f2:45:9a:10:09:09:79:84:bd:cf:cf: 5f:84:43:dd:00:9e:28:7d:ea:aa:d1:6d:6c:1c:92: 47:93:bf:8f:f3:91:6a:01:0f:5a:f6:c8:fe:b2:74: 8a:64:07:c5:1a:6b:8e:95:6d:fa:46:43:c1:ce:b2: a2:ee:6f:f5:ed:7c:57:4d:ab:7a:85:1e:2a:f6:d0: 65:81:15:59:f5:c5:cd:21:84:53:0a:6e:b5:6a:8e: 81:a4:fb:4b:af:79:fe:48:db:0a:7d:10:66:b9:4e: 71:b3:fc:44:10:74:ac:99:84:f2:50:17:e4:c7:84: bf:04:88:61:61:af:4a:69:d8:c5:7e:0f:53:05:ab: 74:4f:74:36:02:b8:1f:a2:a1:80:a6:ef:3b:8c:0f: f6:4a:f3:87:57:db:c6:a4:51:74:73:a3:ef:7c:11: 60:15:3a:65:73:7d:41:49:7b:dd:da:c9:c5:23:d2: e7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FB:FE:B4:1A:E3:95:3F:B2:AB:17:3A:3B:0C:29:30:FE:6D:33:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ac:0b:69:a0:3c:27:3c:64:48:b8:ea:b3:24:a7:35:cb:ba: 63:87:d1:1d:06:9e:21:b1:62:1d:bb:39:51:ad:7b:9d:03:3b: 85:bb:5c:57:bb:0e:e8:dc:00:18:e5:bc:2f:8e:63:fa:97:f4: 78:be:6e:f8:c5:dc:c5:35:5e:fe:46:a0:d0:c6:42:75:e8:60: df:8c:48:57:d4:db:b0:02:ed:77:d1:3f:2e:93:71:51:c9:2c: 63:b2:eb:86:5f:79:d9:4d:a9:86:68:15:b7:5c:21:58:a5:74: a6:ad:c9:f5:44:f0:a2:c6:9d:82:e3:14:fc:56:17:62:c8:5c: 2f:a1:10:9a:48:4d:cf:f4:84:53:eb:12:c6:15:11:2c:da:d0: af:79:a3:0c:ee:a2:47:f5:46:cb:bc:85:33:c1:c8:33:1d:cd: 55:5e:46:ca:5a:96:24:17:10:ed:9b:bf:d3:47:95:eb:7b:c8: bf:13:3e:48:f2:26:8a:87:4e:ee:0f:87:21:91:0e:e6:13:a9: aa:d3:67:40:f3:8c:b9:e4:6a:27:47:a7:5f:f1:1e:71:cd:95: e7:e2:9d:28:46:d0:ef:12:c9:d7:48:60:b8:8d:4b:7d:21:e2: 73:d3:ba:53:55:5b:55:b3:9c:48:5a:c3:4d:76:d3:21:80:3c: 9b:af:1e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LsLeCef3kSpeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk OTExMDI5ZWUtZWIyYS00NmQ1LThmMzQtMzY2MWMyYzU1ZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuQhlfOUQ/tyP3FtsCHNL9fujk9TEqU2vtWr drwtJxNyWOPvUJeWDhvkZnqOaV9mo4EPMZTr+EeDkRUmleXkY2WIFpSfY6REoGXQ xW918kWaEAkJeYS9z89fhEPdAJ4ofeqq0W1sHJJHk7+P85FqAQ9a9sj+snSKZAfF GmuOlW36RkPBzrKi7m/17XxXTat6hR4q9tBlgRVZ9cXNIYRTCm61ao6BpPtLr3n+ SNsKfRBmuU5xs/xEEHSsmYTyUBfkx4S/BIhhYa9KadjFfg9TBat0T3Q2ArgfoqGA pu87jA/2SvOHV9vGpFF0c6PvfBFgFTplc31BSXvd2snFI9LnIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb7/rQa45U/sqsXOjsMKTD+bTNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGEwMDQzMzItZGJlYi0z OGQxLTgxNjYtYmI5ZGUwZTY5OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHesC2mgPCc8ZEi46rMkpzXLumOH0R0GniGxYh27OVGte50DO4W7XFe7 DujcABjlvC+OY/qX9Hi+bvjF3MU1Xv5GoNDGQnXoYN+MSFfU27AC7XfRPy6TcVHJ LGOy64ZfedlNqYZoFbdcIVildKatyfVE8KLGnYLjFPxWF2LIXC+hEJpITc/0hFPr EsYVESza0K95owzuokf1Rsu8hTPByDMdzVVeRspaliQXEO2bv9NHlet7yL8TPkjy JoqHTu4PhyGRDuYTqarTZ0DzjLnkaidHp1/xHnHNlefinShG0O8SyddIYLiNS30h 4nPTulNVW1WznEhaw0120yGAPJuvHnk= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:11 2025 by rpki-client