$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa File: 65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa (raw, json) Hash identifier: a4ImN11g3E9N5PPI132xTLVBJaQfoNINdOOXwtxE1Ao= Subject key identifier: 50:08:B4:83:C4:84:AB:B7:BF:54:2A:42:5A:91:A3:B9:10:6A:32:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD579DF8F0E4DA453A9300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:57:9d:f8:f0:e4:da:45:3a:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=081ed3eb-4ba7-4a2f-8989-859f7d932ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e0:e6:25:c9:3e:fa:df:0f:3c:43:2b:d9:25: ff:45:96:6d:79:57:75:5c:fa:ba:05:45:18:12:9b: df:da:e7:3c:22:8f:22:3b:78:b9:52:74:7c:5a:19: bd:b4:bf:f6:95:54:b7:3c:a9:80:42:20:9a:96:62: 56:4a:cd:f7:d7:4f:db:e5:f0:39:da:73:88:4f:57: 2a:5b:ac:81:37:ba:c4:4c:11:8a:b6:c3:8a:98:cb: 32:1e:85:76:d8:5b:e1:c5:6e:9c:91:c4:29:f7:f4: 2c:09:20:97:a7:e4:82:2c:ce:17:b9:13:a5:73:a5: 5b:6d:e9:9d:70:5b:58:a0:bf:89:ee:d0:97:0a:96: 52:be:b3:1f:25:f2:7f:aa:00:e2:c3:02:83:4b:63: 86:69:0c:af:06:08:63:e6:1d:8d:e0:e5:f0:27:57: 25:ba:ce:b6:47:cf:8f:17:f7:2f:ff:8e:83:79:19: b2:ae:07:f8:f4:81:3c:56:55:e9:5b:d7:1c:06:2c: 86:c9:23:95:62:f9:a1:e1:28:36:8b:c2:aa:34:43: 31:4f:79:2c:23:cd:97:8a:f3:6d:d0:d7:e5:d6:67: 30:0a:29:86:fb:ae:27:23:68:88:a3:1e:62:1f:9c: 01:39:4e:24:d4:0b:34:f3:24:32:11:ae:85:66:cd: cc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:08:B4:83:C4:84:AB:B7:BF:54:2A:42:5A:91:A3:B9:10:6A:32:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:36:8c:cd:94:bf:87:04:90:bb:83:b1:4e:5f:84:25:e4:f5: 92:80:58:22:39:b2:84:09:32:e2:13:22:d1:8b:3b:c3:22:a3: e0:ae:ea:3e:aa:0f:30:8e:21:60:3d:b3:9d:fe:2b:81:f6:07: a7:a9:28:3b:ce:f4:7f:65:e2:fd:2a:f6:70:eb:f7:e6:2a:e1: 87:2a:a4:8f:00:05:ad:7e:df:c9:d6:89:b7:a7:20:a1:2a:47: e1:15:93:bd:33:c9:11:ae:b8:19:a4:73:25:79:7d:5d:af:aa: 21:e1:3d:e3:cf:2a:73:ed:61:49:4d:13:0f:f0:76:2d:ca:00: 59:4d:10:e4:ac:34:b4:2f:f6:b5:33:8c:28:f2:d3:6e:32:d0: 7b:5f:b4:8d:ae:5b:e5:34:19:d5:bb:df:a1:47:b9:0f:b8:ad: 62:fc:33:14:b1:92:f5:a4:2b:0e:16:58:e6:6c:a7:d1:73:5f: d7:0d:d7:20:30:f6:a8:88:9e:7e:b5:19:5e:4f:c5:d7:8c:05: b8:0a:02:c0:61:26:82:f5:44:57:54:19:65:e4:97:73:07:99: be:d9:b5:10:4c:61:3b:a7:ed:4b:ac:ce:db:98:40:10:6b:64: ad:d3:de:96:0a:ac:e5:45:09:84:30:5e:c9:75:43:91:5e:e6: aa:f5:6a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVed+PDk2kU6kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDgxZWQzZWItNGJhNy00YTJmLTg5ODktODU5ZjdkOTMyYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+DmJck++t8PPEMr2SX/RZZteVd1XPq6BUUY Epvf2uc8Io8iO3i5UnR8Whm9tL/2lVS3PKmAQiCalmJWSs3310/b5fA52nOIT1cq W6yBN7rETBGKtsOKmMsyHoV22FvhxW6ckcQp9/QsCSCXp+SCLM4XuROlc6Vbbemd cFtYoL+J7tCXCpZSvrMfJfJ/qgDiwwKDS2OGaQyvBghj5h2N4OXwJ1clus62R8+P F/cv/46DeRmyrgf49IE8VlXpW9ccBiyGySOVYvmh4Sg2i8KqNEMxT3ksI82XivNt 0Nfl1mcwCimG+64nI2iIox5iH5wBOU4k1As08yQyEa6FZs3MaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAItIPEhKu3v1QqQlqRo7kQajIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjVhNmU1YmEtYzA1NC0z YTA0LThjM2YtMmQ0ZGUxMWU5NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA42jM2Uv4cEkLuDsU5fhCXk9ZKAWCI5soQJMuITItGLO8Mio+Cu6j6q DzCOIWA9s53+K4H2B6epKDvO9H9l4v0q9nDr9+Yq4YcqpI8ABa1+38nWibenIKEq R+EVk70zyRGuuBmkcyV5fV2vqiHhPePPKnPtYUlNEw/wdi3KAFlNEOSsNLQv9rUz jCjy024y0HtftI2uW+U0GdW736FHuQ+4rWL8MxSxkvWkKw4WWOZsp9FzX9cN1yAw 9qiInn61GV5PxdeMBbgKAsBhJoL1RFdUGWXkl3MHmb7ZtRBMYTun7UusztuYQBBr ZK3T3pYKrOVFCYQwXsl1Q5Fe5qr1ajw= -----END CERTIFICATE-----Generated at Fri Oct 17 10:49:07 2025 by rpki-client