$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa File: 5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa (raw, json) Hash identifier: tTLyrvHUufO/0X/idSBroXYOsnX6u1W2woXRaTOACVk= Subject key identifier: 76:14:95:AF:8B:96:BB:6A:FA:21:D9:8B:FD:83:EA:7B:A6:B3:4E:DB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE2B1B390FF3BD6AC83A70 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2b:1b:39:0f:f3:bd:6a:c8:3a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=34efb542-2df3-4ae7-8068-e998e00f276f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fd:c5:18:cd:64:54:ae:a4:52:07:e2:6e:9a: 3b:55:d8:38:71:4f:36:cf:97:9d:37:de:a4:2e:0d: 28:c5:d0:79:3b:3e:db:38:57:9f:89:35:9a:1c:d6: d8:6d:11:22:82:1f:92:89:5a:19:03:c8:83:83:14: 73:55:68:f1:bb:69:2e:a5:c7:80:b7:3f:15:72:cb: f6:20:52:a0:9b:f8:01:6c:13:c7:54:62:e6:42:90: cb:b2:d4:bc:2b:59:81:e6:18:d1:a0:67:59:c6:b7: b3:43:d1:9f:4d:60:aa:1a:cb:0e:f5:ca:23:c2:72: 26:57:a7:a8:4f:dd:0c:ec:db:0b:07:99:fd:a0:45: 35:5e:6b:45:a9:aa:51:b1:81:8c:0b:85:e9:94:f2: 75:54:6c:87:8e:fc:0f:3c:c2:92:e2:7c:98:62:ba: 78:0e:3d:ca:98:e1:2d:43:77:33:7d:13:67:63:f2: 57:e0:75:c3:2d:86:5e:4a:a4:b0:8d:00:29:26:dc: 9d:49:5a:85:c0:16:75:90:f5:0c:aa:5d:a5:8b:c7: 00:c8:c0:82:fa:fa:58:4d:55:23:c7:c4:fa:18:72: 29:82:bc:00:7e:31:df:fb:df:5a:77:09:d2:21:4a: f4:d7:af:7e:c6:c1:f7:5b:0b:7f:07:1e:2d:69:4e: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:14:95:AF:8B:96:BB:6A:FA:21:D9:8B:FD:83:EA:7B:A6:B3:4E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5d:a6:1b:24:4b:ff:fd:33:ff:73:c5:07:d3:26:4f:f3:28: d2:6a:3a:92:4e:44:c2:fe:1d:de:ef:49:17:5e:01:2c:d6:14: 9a:3b:0c:63:e3:35:e7:19:5f:c9:c4:4f:63:ad:ff:09:51:63: 5e:75:3b:51:4f:14:79:cf:a7:ff:cb:1f:37:fe:87:0f:aa:cc: f6:30:2c:bd:28:f3:5e:b6:f5:78:a7:8b:34:8b:51:a8:fe:ee: 89:87:21:ac:c5:1b:44:e1:07:59:4c:ff:c7:7d:c7:ee:08:84: e3:e2:6d:92:91:de:91:42:a6:9e:91:76:78:bc:c7:5f:f4:82: ee:69:7a:84:4a:9b:23:8c:02:50:67:21:30:ce:9a:89:26:8f: 7f:30:cc:e7:4b:55:92:34:a8:5f:ec:8c:cb:2b:a7:c8:b1:86: 3c:62:2c:cc:26:ad:af:2f:05:f9:0d:5c:46:aa:60:a2:4e:18: 0d:56:55:5c:53:02:62:f0:76:9b:07:03:8f:cd:f5:78:3c:76: 8b:fb:d6:f4:f0:28:1d:f2:8c:8c:f3:1f:1a:cd:67:5c:91:53: 1c:45:bf:44:7f:30:9a:70:f5:21:cc:7b:79:d1:5b:e0:e5:4e: 20:cc:02:58:bb:46:69:1c:6d:16:cc:3e:a7:7d:5d:3b:ff:97: f5:b3:99:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzisbOQ/zvWrIOnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzRlZmI1NDItMmRmMy00YWU3LTgwNjgtZTk5OGUwMGYyNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP3FGM1kVK6kUgfibpo7Vdg4cU82z5edN96k Lg0oxdB5Oz7bOFefiTWaHNbYbREigh+SiVoZA8iDgxRzVWjxu2kupceAtz8Vcsv2 IFKgm/gBbBPHVGLmQpDLstS8K1mB5hjRoGdZxrezQ9GfTWCqGssO9cojwnImV6eo T90M7NsLB5n9oEU1XmtFqapRsYGMC4XplPJ1VGyHjvwPPMKS4nyYYrp4Dj3KmOEt Q3czfRNnY/JX4HXDLYZeSqSwjQApJtydSVqFwBZ1kPUMql2li8cAyMCC+vpYTVUj x8T6GHIpgrwAfjHf+99adwnSIUr0169+xsH3Wwt/Bx4taU4BUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYUla+Llrtq+iHZi/2D6nums07bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWQ5YjVhNzctMjBhNC0z NWEyLTk1ZDgtNDM4MGRkNzRhMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpdphskS//9M/9zxQfTJk/zKNJqOpJORML+Hd7vSRdeASzWFJo7DGPj NecZX8nET2Ot/wlRY151O1FPFHnPp//LHzf+hw+qzPYwLL0o81629XinizSLUaj+ 7omHIazFG0ThB1lM/8d9x+4IhOPibZKR3pFCpp6Rdni8x1/0gu5peoRKmyOMAlBn ITDOmokmj38wzOdLVZI0qF/sjMsrp8ixhjxiLMwmra8vBfkNXEaqYKJOGA1WVVxT AmLwdpsHA4/N9Xg8dov71vTwKB3yjIzzHxrNZ1yRUxxFv0R/MJpw9SHMe3nRW+Dl TiDMAli7RmkcbRbMPqd9XTv/l/WzmSg= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:10 2025 by rpki-client