$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa File: 86147445-4d27-3a02-b65f-dcb48ef32850.roa (raw, json) Hash identifier: DSka3KDhMXGhhGYz70lpybojRO5MkKQ7SYKm5YpXQas= Subject key identifier: 84:AB:E2:F1:7A:AA:72:BB:D9:7D:9B:05:89:32:91:3C:C5:E5:35:FC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD5394BBF45C42B1459C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:53:94:bb:f4:5c:42:b1:45:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=25b6a257-f829-4336-825e-b1469d55cfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:9b:d7:5d:31:0d:3b:82:cf:f6:d1:0a:1c: 29:3b:a0:9d:c9:f2:33:b1:42:9a:97:47:84:e0:26: b8:ed:ff:cc:fb:0d:d1:ce:b2:f9:50:a2:ab:59:45: 4a:a4:12:51:b6:bc:cc:72:10:0e:43:4c:5c:70:01: ea:3c:cb:42:aa:76:8c:cd:68:0f:99:b4:b5:51:10: e0:d8:fd:a8:04:a6:8b:c7:37:11:bc:25:f4:57:93: 22:2e:7f:23:17:18:ab:38:5f:84:2b:3e:d2:e8:1a: bd:80:6b:6f:92:f6:23:d5:0d:2c:32:af:5b:9b:9b: 9c:ed:e5:59:8b:f3:08:27:28:31:99:6e:7c:86:07: ad:cd:a7:d1:6d:2f:3c:56:91:9a:a6:8d:29:b2:0c: 0b:9f:e2:16:f7:07:c8:16:05:4c:cd:cd:97:b7:0c: 34:97:2f:85:1c:69:52:f8:c8:b2:25:78:a7:84:a2: 3f:5c:18:a6:7d:3d:2b:e8:e4:f0:b2:a8:c0:ae:88: 2c:af:45:67:b9:fe:15:06:91:4e:06:7b:dd:fb:61: 38:bf:d0:06:d6:cb:83:0e:ef:fd:1c:2e:15:6f:61: 7f:6d:30:f1:c9:bb:07:83:45:a9:0a:e6:fc:e0:9c: ad:e1:b2:9d:c0:f5:0f:e2:2d:cf:90:6c:ce:de:2a: 35:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:E2:F1:7A:AA:72:BB:D9:7D:9B:05:89:32:91:3C:C5:E5:35:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:7e:28:9e:e9:1b:8b:a3:6b:84:45:65:c9:7a:f0:2c:9c:7b: e2:86:69:e6:d5:0c:87:09:8d:ca:d6:0c:dc:69:93:08:d3:c5: 68:09:26:f5:64:1c:47:0f:aa:90:dc:87:54:8c:8b:6a:43:9b: 51:94:ee:c0:54:49:92:99:32:20:c3:25:52:70:0f:e4:bc:48: 48:22:3f:5b:54:7d:ea:25:5e:fb:ec:bc:08:28:b5:94:b1:7f: 93:ba:cb:bb:92:27:ba:8b:41:87:af:74:30:64:60:2b:2e:42: 27:7d:2a:10:6b:d2:3c:82:16:ac:12:08:ea:de:ce:64:7c:06: 79:70:79:17:44:d1:d4:e0:06:bd:6e:c4:fb:d4:a5:c2:b5:66: 22:45:4c:16:26:af:84:15:4d:a5:b1:1a:f9:e3:ac:ae:33:ca: 47:90:d2:e5:63:fb:7d:0e:7d:1b:6f:ba:f1:25:0d:93:3c:f9: 5f:3a:9c:58:81:cc:75:72:9e:bd:e3:40:37:4e:62:7c:b3:ab: 59:12:5d:88:47:d0:58:8a:80:bd:0d:da:90:a0:03:7f:7c:ce: 66:fd:d3:8c:73:db:8b:27:79:11:bf:c6:a0:44:ea:7c:40:82: 27:a4:eb:02:9e:a5:69:92:86:65:0a:e6:71:43:b8:bc:30:ca: ff:80:88:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVOUu/RcQrFFnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjViNmEyNTctZjgyOS00MzM2LTgyNWUtYjE0NjlkNTVjZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMGb110xDTuCz/bRChwpO6CdyfIzsUKal0eE 4Ca47f/M+w3RzrL5UKKrWUVKpBJRtrzMchAOQ0xccAHqPMtCqnaMzWgPmbS1URDg 2P2oBKaLxzcRvCX0V5MiLn8jFxirOF+EKz7S6Bq9gGtvkvYj1Q0sMq9bm5uc7eVZ i/MIJygxmW58hgetzafRbS88VpGapo0psgwLn+IW9wfIFgVMzc2Xtww0ly+FHGlS +MiyJXinhKI/XBimfT0r6OTwsqjArogsr0Vnuf4VBpFOBnvd+2E4v9AG1suDDu/9 HC4Vb2F/bTDxybsHg0WpCub84Jyt4bKdwPUP4i3PkGzO3io1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISr4vF6qnK72X2bBYkykTzF5TX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODYxNDc0NDUtNGQyNy0z YTAyLWI2NWYtZGNiNDhlZjMyODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt+KJ7pG4uja4RFZcl68Cyce+KGaebVDIcJjcrWDNxpkwjTxWgJJvVk HEcPqpDch1SMi2pDm1GU7sBUSZKZMiDDJVJwD+S8SEgiP1tUfeolXvvsvAgotZSx f5O6y7uSJ7qLQYevdDBkYCsuQid9KhBr0jyCFqwSCOrezmR8BnlweRdE0dTgBr1u xPvUpcK1ZiJFTBYmr4QVTaWxGvnjrK4zykeQ0uVj+30OfRtvuvElDZM8+V86nFiB zHVynr3jQDdOYnyzq1kSXYhH0FiKgL0N2pCgA398zmb904xz24sneRG/xqBE6nxA giek6wKepWmShmUK5nFDuLwwyv+AiLs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:06 2025 by rpki-client