$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa File: 52ab951c-a52a-33ca-832a-3433fe906f80.roa (raw, json) Hash identifier: Xt9as/OWkpC7VeeuCjV2khzYRFQPLdZe2cnqV21UP7k= Subject key identifier: F9:CF:84:00:0C:7F:4A:08:1D:07:2F:60:39:57:4E:19:1C:33:28:F7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B52A76034A39B4C0530F67400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 15169 IP address blocks: 172.217.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:60:34:a3:9b:4c:05:30:f6:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=5debc16d-242b-4682-9466-86657a44be65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:48:c6:2b:dc:97:5d:69:79:64:d3:4b:91: ce:63:c1:9e:84:bc:a2:c9:83:0f:b9:ae:b6:22:cf: 36:fe:37:82:b5:7e:14:a6:25:f4:08:06:44:c5:5e: bf:82:36:47:9c:ef:1b:54:9f:d3:ac:22:18:4e:ff: 71:e1:fe:bb:ce:48:30:dd:4b:ea:e5:75:98:8b:e8: a2:47:e2:59:a7:16:6a:f7:c4:27:e9:2d:ca:6f:86: 08:39:24:5b:fa:42:91:ba:9e:1e:be:b2:7e:b6:19: ba:05:bc:48:6a:f5:8a:8a:31:1a:57:bc:de:d4:c2: 1e:17:a5:e4:36:01:27:8f:fb:2d:a6:d3:ce:56:e8: 49:4d:20:bf:82:d8:8c:cb:5b:0f:cb:e9:62:f8:04: cd:e9:d1:b1:7b:fd:8d:04:5c:8e:3f:b2:f3:ef:da: 03:37:94:c9:d0:f5:81:5a:5d:63:84:54:0e:4c:a7: 19:be:22:2e:8f:e6:12:6c:86:db:fb:8b:b6:c1:d5: 9a:3a:98:38:ee:91:3b:a8:c9:65:6b:56:4f:d7:c6: 89:13:73:9d:4a:08:1d:ba:04:f8:9a:3c:a4:1b:6d: 06:a5:2a:e9:8e:b0:cf:a7:d2:36:be:9d:0f:cf:10: ff:a0:ac:5f:26:0a:c9:fb:50:e8:7d:98:1a:dc:49: 23:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:84:00:0C:7F:4A:08:1D:07:2F:60:39:57:4E:19:1C:33:28:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7a:59:15:98:59:d0:17:3f:f0:87:a4:16:65:66:6d:39:a4: d0:35:ea:28:9f:df:79:b5:9d:6c:fd:60:32:bd:e9:64:bf:60: 69:2b:54:27:26:cd:a6:1b:5c:2f:f2:13:76:0a:c6:f4:42:8c: 8c:00:d8:46:97:c7:6c:98:c8:e1:8d:25:2c:50:51:a4:02:5d: be:ff:02:04:ff:9f:5a:f3:b7:ad:8c:11:76:06:3e:78:0c:86: 93:74:37:23:76:16:29:45:8c:1b:e8:74:e2:a0:31:66:6a:49: c7:f7:8d:d6:b2:87:38:a2:cc:8e:0d:7c:75:1b:c5:be:f8:c3: 24:f3:05:f6:c2:62:23:40:3c:cf:06:c9:4d:be:23:2b:b4:1f: c1:84:4e:18:0a:08:94:ab:3a:06:e7:52:ec:45:aa:71:88:25: 3c:e1:8b:6f:71:28:db:0a:10:6d:79:6a:57:79:b3:dd:6a:52: 37:82:6e:4d:dc:4d:b3:57:bf:d3:50:f2:00:d3:5f:aa:cb:06: 7b:3d:17:d2:d1:6d:de:40:24:5a:ef:6d:6d:db:56:9e:3b:92: 49:86:ba:a5:c2:08:5c:c4:7e:88:44:c3:a2:2e:9c:df:be:84: 63:d8:6f:9f:e3:bc:b1:5a:bf:a1:a0:fc:5a:d9:62:75:65:60: 2d:a5:40:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2A0o5tMBTD2dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NWRlYmMxNmQtMjQyYi00NjgyLTk0NjYtODY2NTdhNDRiZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1dIxivcl11peWTTS5HOY8GehLyiyYMPua62 Is82/jeCtX4UpiX0CAZExV6/gjZHnO8bVJ/TrCIYTv9x4f67zkgw3Uvq5XWYi+ii R+JZpxZq98Qn6S3Kb4YIOSRb+kKRup4evrJ+thm6BbxIavWKijEaV7ze1MIeF6Xk NgEnj/stptPOVuhJTSC/gtiMy1sPy+li+ATN6dGxe/2NBFyOP7Lz79oDN5TJ0PWB Wl1jhFQOTKcZviIuj+YSbIbb+4u2wdWaOpg47pE7qMlla1ZP18aJE3OdSggdugT4 mjykG20GpSrpjrDPp9I2vp0PzxD/oKxfJgrJ+1DofZga3EkjHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnPhAAMf0oIHQcvYDlXThkcMyj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTJhYjk1MWMtYTUyYS0z M2NhLTgzMmEtMzQzM2ZlOTA2ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG96WRWYWdAXP/CHpBZlZm05pNA16iif33m1nWz9YDK96WS/YGkrVCcm zaYbXC/yE3YKxvRCjIwA2EaXx2yYyOGNJSxQUaQCXb7/AgT/n1rzt62MEXYGPngM hpN0NyN2FilFjBvodOKgMWZqScf3jdayhziizI4NfHUbxb74wyTzBfbCYiNAPM8G yU2+Iyu0H8GEThgKCJSrOgbnUuxFqnGIJTzhi29xKNsKEG15ald5s91qUjeCbk3c TbNXv9NQ8gDTX6rLBns9F9LRbd5AJFrvbW3bVp47kkmGuqXCCFzEfohEw6IunN++ hGPYb5/jvLFav6Gg/FrZYnVlYC2lQLw= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:20 2025 by rpki-client