$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa File: 839e5923-d592-30e5-ba37-9fbbbf065f7a.roa (raw, json) Hash identifier: wDw8U5EgMk4IWnNWxosaHi+4SGyqOLJ/EEWhNbaR7xM= Subject key identifier: 79:A2:CC:E9:6F:F8:01:A6:4C:13:20:DA:33:5D:B5:AC:5D:E8:EA:DF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD4D2A289811D7CA8E7FE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4d:2a:28:98:11:d7:ca:8e:7f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=613f769e-1f0e-48ec-85bb-726e9f9cef7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2d:2b:d7:24:05:c6:fa:20:e9:08:67:a3:f7: 81:2c:11:0f:50:32:da:00:7e:a9:8f:7a:b0:f0:64: 18:9c:7d:24:86:d6:b5:4c:88:f6:32:0a:25:c9:54: 0d:96:50:69:d5:68:0e:49:b6:11:d1:bb:7a:fc:46: 8a:77:4e:84:f3:8d:50:22:8a:84:47:4e:12:04:53: 5e:e1:45:1c:45:bd:8e:5e:83:92:31:55:94:25:ac: c5:4c:d1:c0:87:a7:73:d4:a5:74:f8:d0:4c:c3:a0: 44:1e:5f:d4:3d:41:9e:c8:2b:cf:fc:71:90:42:8e: 18:53:ab:2a:d6:ad:f0:cf:67:6a:99:9f:ea:4c:03: ba:2b:52:a0:e9:89:1b:69:b4:8f:7e:40:cc:52:79: bd:a9:23:f4:12:92:83:81:cd:aa:d8:87:71:31:de: 0b:62:21:8b:7c:df:65:cd:b1:08:89:8e:4e:d4:b1: 0c:11:92:d3:74:88:58:70:36:a2:6c:32:20:12:8a: 74:4c:22:d7:d3:a3:04:b0:e7:6d:84:35:e6:a1:b1: cb:87:38:a6:95:06:26:52:3f:87:5b:d1:7b:7b:a4: 85:1f:78:c4:7b:06:56:38:6c:1e:2a:30:17:53:28: 4a:0e:a2:07:73:58:ce:71:64:69:b3:95:80:49:06: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A2:CC:E9:6F:F8:01:A6:4C:13:20:DA:33:5D:B5:AC:5D:E8:EA:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d2:0f:a8:ec:3f:02:23:53:03:fe:ef:ae:23:d8:5a:ac:c4: 90:6c:e5:40:3b:dc:87:e6:03:f0:c6:f0:9a:c8:04:85:53:8b: 71:fc:01:d6:79:07:3e:bd:83:cb:90:c7:ab:44:a9:c1:08:b1: 06:a3:bc:0d:ef:eb:fb:7f:65:fb:49:9d:cb:d0:b7:85:63:a3: e6:4a:4b:52:e2:14:e3:ea:2c:8d:4a:71:52:42:b5:3b:bc:a1: 34:8e:13:74:42:a0:39:d0:07:de:3c:61:1e:f6:d9:3e:3d:ed: 62:7c:ca:e5:8e:e0:14:23:9a:4a:c1:b1:e5:54:7e:46:06:fe: dd:ca:6f:ba:9d:6b:a8:1f:6d:2e:64:7d:a1:a9:f5:1b:3b:9d: ac:5d:48:22:de:b8:7d:4c:fd:c0:92:54:79:14:78:eb:8e:4d: 30:41:39:10:e1:ed:9f:b1:e1:00:d8:5d:57:62:6e:3e:6b:00: 65:ef:e4:11:32:52:0c:97:c6:e0:0e:1c:8b:6f:6f:b1:b2:64: f6:1f:92:94:02:be:60:be:7c:ad:b7:99:91:5d:83:ef:7c:57: f7:c4:25:63:c5:14:3c:8c:b7:57:ea:15:9e:66:d2:72:fe:50: 1b:5c:ec:30:9c:41:8e:5a:44:78:b5:77:69:26:56:5d:21:6c: bf:c8:e9:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzU0qKJgR18qOf+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjEzZjc2OWUtMWYwZS00OGVjLTg1YmItNzI2ZTlmOWNlZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS0r1yQFxvog6Qhno/eBLBEPUDLaAH6pj3qw 8GQYnH0khta1TIj2MgolyVQNllBp1WgOSbYR0bt6/EaKd06E841QIoqER04SBFNe 4UUcRb2OXoOSMVWUJazFTNHAh6dz1KV0+NBMw6BEHl/UPUGeyCvP/HGQQo4YU6sq 1q3wz2dqmZ/qTAO6K1Kg6YkbabSPfkDMUnm9qSP0EpKDgc2q2IdxMd4LYiGLfN9l zbEIiY5O1LEMEZLTdIhYcDaibDIgEop0TCLX06MEsOdthDXmobHLhzimlQYmUj+H W9F7e6SFH3jEewZWOGweKjAXUyhKDqIHc1jOcWRps5WASQb8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmizOlv+AGmTBMg2jNdtaxd6OrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODM5ZTU5MjMtZDU5Mi0z MGU1LWJhMzctOWZiYmJmMDY1ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrSD6jsPwIjUwP+764j2FqsxJBs5UA73IfmA/DG8JrIBIVTi3H8AdZ5 Bz69g8uQx6tEqcEIsQajvA3v6/t/ZftJncvQt4Vjo+ZKS1LiFOPqLI1KcVJCtTu8 oTSOE3RCoDnQB948YR722T497WJ8yuWO4BQjmkrBseVUfkYG/t3Kb7qda6gfbS5k faGp9Rs7naxdSCLeuH1M/cCSVHkUeOuOTTBBORDh7Z+x4QDYXVdibj5rAGXv5BEy UgyXxuAOHItvb7GyZPYfkpQCvmC+fK23mZFdg+98V/fEJWPFFDyMt1fqFZ5m0nL+ UBtc7DCcQY5aRHi1d2kmVl0hbL/I6Tw= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:01 2025 by rpki-client