$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa File: 640ab488-921d-3ed3-a072-3005686e58b7.roa (raw, json) Hash identifier: JgYQvsgKqDEjT2P7LrgccGakXZw9C5MPb55FWNWaOtc= Subject key identifier: 35:F2:7D:5A:DC:A7:AE:50:BB:E6:1D:86:FC:D6:FC:C4:DB:9C:1A:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD637C7AABB8BBE2789480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:63:7c:7a:ab:b8:bb:e2:78:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=382027a6-3cf1-4ca7-a682-5b1081dfd286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d3:d1:1a:8e:f4:91:f1:85:9e:f9:c8:43:5b: 68:b5:c7:54:0b:84:d3:80:87:71:40:5e:be:4b:58: ba:26:53:03:d7:35:49:d5:f4:6a:9e:21:1e:03:2f: 7d:0b:33:fc:76:e2:f7:5b:76:d4:b6:36:7d:01:62: 30:6d:ed:bc:72:63:05:14:79:01:43:1c:e1:77:86: 7e:10:18:b6:8b:80:9e:2a:1a:ff:37:95:f9:5d:5a: 48:8b:ef:67:c7:f1:15:05:b2:75:14:f6:94:6c:e6: 8e:09:14:4e:dc:e4:f3:30:45:e4:a3:04:7f:db:1a: 36:18:1d:26:a6:32:08:9f:7b:8c:ee:c8:80:89:de: 0a:14:30:94:09:6b:0e:a7:1d:f5:73:13:21:77:fb: 92:c3:cd:f2:56:ed:29:12:ba:5d:94:01:ab:fe:39: 5c:72:be:48:3e:87:aa:09:80:0e:d7:f9:49:78:f8: 47:34:3d:50:2c:9a:11:61:ef:89:8b:b7:20:1d:bb: 83:da:44:e3:49:9c:b2:cf:a0:ab:87:de:bf:84:3e: a4:ed:68:4e:41:9f:03:ff:55:63:83:21:db:e6:e5: c6:27:b2:bd:bc:11:04:02:ce:2e:3a:60:5a:b0:20: 86:2c:3d:ec:a3:7c:25:32:ee:84:72:fa:1a:a7:13: 18:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F2:7D:5A:DC:A7:AE:50:BB:E6:1D:86:FC:D6:FC:C4:DB:9C:1A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:26:fc:a0:75:13:c0:19:e0:bf:66:dc:5a:2a:6e:c0:09:d6: 06:fe:26:37:e2:e7:0f:87:66:0c:5a:27:2e:0c:c0:c6:e3:c2: 96:51:cd:40:46:5c:4d:e3:f8:e4:07:06:27:e8:e8:99:0f:89: 0e:33:0e:d9:fb:09:72:9f:39:b6:1d:af:9b:d2:67:2e:88:63: 1f:fc:3d:4a:68:6f:ab:eb:15:1a:74:45:15:a4:23:09:82:0e: 6d:fe:b2:58:51:6a:a9:fa:44:58:9c:ca:94:9a:1a:d0:d0:ea: 96:5c:97:88:8e:6a:46:39:cb:34:2a:8a:7b:ae:21:1a:21:35: fe:3c:6b:98:b1:b9:48:b8:f6:43:6b:19:46:b0:76:33:43:b5: f3:8c:9e:66:62:28:0b:54:17:19:52:9f:72:8e:1d:20:92:62: a6:d9:64:ad:25:0e:0d:1f:8e:8f:6b:67:75:7b:af:d9:02:a0: 92:31:b4:87:a0:bc:6a:e6:75:12:e8:33:5a:56:28:45:22:c4: 1e:5e:f9:58:8f:30:f2:82:b1:87:48:3e:95:ef:f1:7a:3a:d0: 98:a2:75:09:05:6f:66:52:75:26:40:9d:0a:be:dd:03:b3:90: 49:db:67:45:65:c9:0b:98:ab:3f:c5:9e:0e:75:4f:db:11:cf: 8b:ec:40:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWN8equ4u+J4lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzgyMDI3YTYtM2NmMS00Y2E3LWE2ODItNWIxMDgxZGZkMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotPRGo70kfGFnvnIQ1totcdUC4TTgIdxQF6+ S1i6JlMD1zVJ1fRqniEeAy99CzP8duL3W3bUtjZ9AWIwbe28cmMFFHkBQxzhd4Z+ EBi2i4CeKhr/N5X5XVpIi+9nx/EVBbJ1FPaUbOaOCRRO3OTzMEXkowR/2xo2GB0m pjIIn3uM7siAid4KFDCUCWsOpx31cxMhd/uSw83yVu0pErpdlAGr/jlccr5IPoeq CYAO1/lJePhHND1QLJoRYe+Ji7cgHbuD2kTjSZyyz6Crh96/hD6k7WhOQZ8D/1Vj gyHb5uXGJ7K9vBEEAs4uOmBasCCGLD3so3wlMu6EcvoapxMYgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXyfVrcp65Qu+YdhvzW/MTbnBp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQwYWI0ODgtOTIxZC0z ZWQzLWEwNzItMzAwNTY4NmU1OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFom/KB1E8AZ4L9m3FoqbsAJ1gb+Jjfi5w+HZgxaJy4MwMbjwpZRzUBG XE3j+OQHBifo6JkPiQ4zDtn7CXKfObYdr5vSZy6IYx/8PUpob6vrFRp0RRWkIwmC Dm3+slhRaqn6RFicypSaGtDQ6pZcl4iOakY5yzQqinuuIRohNf48a5ixuUi49kNr GUawdjNDtfOMnmZiKAtUFxlSn3KOHSCSYqbZZK0lDg0fjo9rZ3V7r9kCoJIxtIeg vGrmdRLoM1pWKEUixB5e+ViPMPKCsYdIPpXv8Xo60JiidQkFb2ZSdSZAnQq+3QOz kEnbZ0VlyQuYqz/Fng51T9sRz4vsQH8= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:22 2025 by rpki-client