$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa File: 7c4bfe71-a264-378d-8208-efb0eb90221e.roa (raw, json) Hash identifier: u4OxjjzSu5vdUGO0goFTo8BpQtodW9zVsAfdSn18zZ8= Subject key identifier: BD:49:D1:6C:99:A9:D0:22:4A:56:CD:EE:C0:4A:DA:5B:4B:6D:8B:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE20E6DB493DD1ACC70FC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:20:e6:db:49:3d:d1:ac:c7:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=38f3585e-6a75-40f3-83b4-3ed5348d91bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:e8:05:ab:ba:e2:f1:ed:a2:33:12:13:de: 04:0d:fb:1e:64:bc:78:00:fd:fd:5f:1c:07:a9:a4: 5f:1d:87:ad:74:05:c2:05:43:90:11:4f:f7:c1:d4: b4:60:36:1e:bd:d5:e0:f9:fa:5d:4b:61:cb:07:0f: 79:0b:f4:bb:d5:2c:34:7e:eb:ad:cc:66:b8:3c:4b: 7c:d8:a7:cd:18:95:30:35:97:08:b0:76:59:05:0a: 9b:b1:2e:41:fe:53:f7:9e:53:c8:4e:75:2c:3e:4a: fd:85:a7:db:09:2e:30:03:ea:8c:af:39:62:bb:fd: 56:73:96:86:f9:02:64:d4:b1:b1:1c:92:23:7f:25: d7:e4:0c:77:de:1a:a3:38:a7:0e:2a:75:85:b9:18: ab:00:0f:85:6b:ba:09:e8:3b:5e:b3:dd:08:4a:7a: 78:8c:23:9e:54:f0:e2:ba:b7:c1:d1:04:90:04:b1: 32:1f:b0:9d:94:4e:b5:fd:26:83:4d:ad:56:a4:5b: 30:1e:f4:18:23:ac:f1:fb:9f:d2:e0:2b:34:c1:ab: 57:f6:cb:e4:77:09:77:90:c1:90:a2:5b:5c:71:a5: e4:4f:0f:52:fd:f9:6d:9d:fb:58:d4:01:07:35:e2: af:4e:a2:bb:ff:14:8c:0f:e7:db:5b:bc:2a:4a:b1: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:49:D1:6C:99:A9:D0:22:4A:56:CD:EE:C0:4A:DA:5B:4B:6D:8B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:e5:0e:ec:c9:d9:76:61:e6:19:e7:20:b2:5a:cd:6a:19:44: 80:dc:b1:bd:41:e8:06:c5:09:b9:c5:47:3d:26:25:59:d2:08: 24:56:a2:e9:7b:37:c0:70:2a:7e:61:4b:ec:95:93:24:90:a0: d8:43:95:0c:4b:22:91:8d:29:82:48:a4:e8:0d:f1:eb:d9:db: 42:92:64:88:10:ff:d3:ae:4a:5c:de:b4:fe:3d:6a:5d:e4:17: 8f:b2:7d:f2:d9:96:e4:e3:75:1c:3e:6c:2e:56:bf:ac:b0:2a: 88:b0:a3:51:47:a5:83:fe:56:46:e4:72:39:a5:a4:54:9e:2b: bb:f7:9d:6f:56:da:4c:45:78:02:65:25:94:d6:83:a5:a7:66: 48:6a:ce:94:2d:70:1c:a8:1a:55:0a:d7:ae:b8:c8:50:3a:a7: 67:1c:0c:75:b8:cf:62:02:2d:46:18:e1:b3:0c:12:1a:3f:0e: 12:89:b8:e0:b6:08:01:57:07:69:d9:8d:44:3b:94:41:e4:38: 5b:da:40:90:6c:cb:33:da:1d:51:4a:a4:13:dc:fd:05:62:04: c7:cc:0e:a8:92:10:ed:82:7a:ca:1e:b5:21:df:f3:7a:17:79: c0:00:69:7f:ff:c0:a0:3f:1b:30:88:5a:79:97:45:95:0c:8d: d8:47:8d:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziDm20k90azHD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzhmMzU4NWUtNmE3NS00MGYzLTgzYjQtM2VkNTM0OGQ5MWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqufoBau64vHtojMSE94EDfseZLx4AP39XxwH qaRfHYetdAXCBUOQEU/3wdS0YDYevdXg+fpdS2HLBw95C/S71Sw0fuutzGa4PEt8 2KfNGJUwNZcIsHZZBQqbsS5B/lP3nlPITnUsPkr9hafbCS4wA+qMrzliu/1Wc5aG +QJk1LGxHJIjfyXX5Ax33hqjOKcOKnWFuRirAA+Fa7oJ6Dtes90ISnp4jCOeVPDi urfB0QSQBLEyH7CdlE61/SaDTa1WpFswHvQYI6zx+5/S4Cs0watX9svkdwl3kMGQ oltccaXkTw9S/fltnftY1AEHNeKvTqK7/xSMD+fbW7wqSrGt4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1J0WyZqdAiSlbN7sBK2ltLbYsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2M0YmZlNzEtYTI2NC0z NzhkLTgyMDgtZWZiMGViOTAyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALflDuzJ2XZh5hnnILJazWoZRIDcsb1B6AbFCbnFRz0mJVnSCCRWoul7 N8BwKn5hS+yVkySQoNhDlQxLIpGNKYJIpOgN8evZ20KSZIgQ/9OuSlzetP49al3k F4+yffLZluTjdRw+bC5Wv6ywKoiwo1FHpYP+VkbkcjmlpFSeK7v3nW9W2kxFeAJl JZTWg6WnZkhqzpQtcByoGlUK1664yFA6p2ccDHW4z2ICLUYY4bMMEho/DhKJuOC2 CAFXB2nZjUQ7lEHkOFvaQJBsyzPaHVFKpBPc/QViBMfMDqiSEO2CesoetSHf83oX ecAAaX//wKA/GzCIWnmXRZUMjdhHjTU= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:21 2025 by rpki-client