$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99a1f6e0-9850-3d93-92e5-5ca182743881.roa File: 99a1f6e0-9850-3d93-92e5-5ca182743881.roa (raw, json) Hash identifier: crgYt/Ds3uPWzEuMB9CcP2CrYtiAd/64M0h1Zxw8lKw= Subject key identifier: A1:24:07:09:F4:AB:51:E6:29:51:B1:14:E5:97:C0:1A:1F:28:8E:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE08D9215A458D3D9E1780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99a1f6e0-9850-3d93-92e5-5ca182743881.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:08:d9:21:5a:45:8d:3d:9e:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8d3cc7bb-cd7f-4bfc-8515-fd44a2b12105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:45:79:90:3f:61:e3:df:aa:53:7f:19:73: 1b:51:cc:e6:db:9e:6f:61:1f:d4:09:35:d9:68:39: 28:3f:16:c0:a9:37:ac:74:f5:d2:51:2d:96:8e:9a: d0:96:02:d5:3e:e9:fe:08:91:cf:e1:8c:f5:3a:84: 81:c5:db:63:df:03:d9:73:8c:32:07:ba:15:74:12: 8c:6c:09:fd:51:27:7d:1c:f5:6e:b7:c6:ba:ef:7a: 60:a8:79:a9:6b:94:eb:31:d5:83:75:0f:f2:2f:64: 81:ca:f8:46:1e:a4:2d:4c:6f:75:80:70:ae:b6:93: ba:0c:09:1a:45:88:17:a9:64:34:f5:5f:5b:96:cd: 49:24:8f:7d:45:93:29:d6:c7:59:43:4d:d3:0d:4e: ed:3b:5c:24:55:17:50:a2:62:44:0d:61:81:ba:f8: 37:ef:75:cb:8b:26:dd:0d:81:36:c1:50:76:ad:36: 99:11:8b:a2:6a:4e:a1:fd:f6:1f:35:b9:e7:e6:5f: 19:a7:21:5a:f3:01:9f:a2:94:24:1d:a9:29:bd:dc: 96:2c:34:4d:01:83:50:4d:a3:75:51:54:a6:26:67: 93:6b:f4:93:5b:79:bc:bb:8e:85:f9:72:31:cb:c1: 81:18:fc:99:b5:dc:63:a7:bb:65:2e:5a:1e:0a:d8: e7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:24:07:09:F4:AB:51:E6:29:51:B1:14:E5:97:C0:1A:1F:28:8E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99a1f6e0-9850-3d93-92e5-5ca182743881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:61:d1:b3:f4:3d:bb:bd:4e:73:15:ce:b7:7e:29:7e:83:97: e5:25:8b:1f:35:b7:aa:aa:2a:a5:9f:20:28:21:3e:f3:04:a5: 08:fd:02:0e:98:9e:68:18:e5:ec:47:c1:02:3f:64:ae:85:be: 69:01:b9:80:2e:57:66:0d:c8:fd:84:22:3a:3f:b8:6f:44:30: 1b:bd:dc:90:e8:2d:58:f2:62:a5:36:3b:63:af:9e:77:4f:f1: f7:1c:50:58:5d:6b:5e:81:a4:3f:2a:a2:de:5a:cc:56:20:08: a2:db:5c:88:40:76:48:27:00:35:a9:93:54:8b:8c:02:c9:62: db:a9:72:c1:51:a7:db:ca:eb:86:29:59:d0:ac:5b:bf:69:87: a6:16:06:73:8e:77:bc:c5:82:dc:00:be:13:55:79:87:05:a8: 4d:dc:bd:79:b6:50:6c:44:03:e2:ec:55:13:ed:7e:ec:98:ca: 85:b8:aa:01:be:66:b9:e7:19:f4:6f:16:19:d8:c5:d6:c5:2d: f6:f7:7a:2c:2a:6c:fa:ee:ca:67:67:06:3b:1c:8c:01:7d:f4: 8e:6d:1f:cb:1b:cc:3e:96:04:85:ae:0a:17:fa:2c:ad:ac:52: 16:ff:29:f0:83:e5:e5:73:bc:85:2a:ec:39:ad:40:8d:5f:53: 3c:b6:d9:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgjZIVpFjT2eF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGQzY2M3YmItY2Q3Zi00YmZjLTg1MTUtZmQ0NGEyYjEyMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zVFeZA/YePfqlN/GXMbUczm255vYR/UCTXZ aDkoPxbAqTesdPXSUS2WjprQlgLVPun+CJHP4Yz1OoSBxdtj3wPZc4wyB7oVdBKM bAn9USd9HPVut8a673pgqHmpa5TrMdWDdQ/yL2SByvhGHqQtTG91gHCutpO6DAka RYgXqWQ09V9bls1JJI99RZMp1sdZQ03TDU7tO1wkVRdQomJEDWGBuvg373XLiybd DYE2wVB2rTaZEYuiak6h/fYfNbnn5l8ZpyFa8wGfopQkHakpvdyWLDRNAYNQTaN1 UVSmJmeTa/STW3m8u46F+XIxy8GBGPyZtdxjp7tlLloeCtjnLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEkBwn0q1HmKVGxFOWXwBofKI5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTlhMWY2ZTAtOTg1MC0z ZDkzLTkyZTUtNWNhMTgyNzQzODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrNmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9h0bP0Pbu9TnMVzrd+KX6Dl+Ulix81t6qqKqWfICghPvMEpQj9Ag6Y nmgY5exHwQI/ZK6FvmkBuYAuV2YNyP2EIjo/uG9EMBu93JDoLVjyYqU2O2OvnndP 8fccUFhda16BpD8qot5azFYgCKLbXIhAdkgnADWpk1SLjALJYtupcsFRp9vK64Yp WdCsW79ph6YWBnOOd7zFgtwAvhNVeYcFqE3cvXm2UGxEA+LsVRPtfuyYyoW4qgG+ ZrnnGfRvFhnYxdbFLfb3eiwqbPruymdnBjscjAF99I5tH8sbzD6WBIWuChf6LK2s Uhb/KfCD5eVzvIUq7DmtQI1fUzy22To= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:03 2025 by rpki-client