$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa File: a67282dc-ef4b-3424-b14a-d7cc85f54925.roa (raw, json) Hash identifier: m1kF4enuAqlbU+bcXtfujjCcqqQqfuuUJIUhA27vlKw= Subject key identifier: 79:64:6B:41:53:FD:15:60:B7:BF:CB:51:44:BB:D8:41:8E:2F:EC:00 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD68C61857D91802AD3F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:68:c6:18:57:d9:18:02:ad:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8ff08838-4076-4684-9750-2547bdfe6fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:aa:5a:9e:c1:1c:73:57:03:6b:ba:31:2c:b3: b3:23:88:7f:22:d7:bf:01:0a:0e:a3:bd:2c:a4:d8: a7:a9:c3:e9:95:93:6f:dc:ed:62:06:31:cf:ea:26: 9e:c6:db:1b:5a:b0:ea:35:59:05:a6:08:4a:63:22: 56:a0:e1:dc:62:40:b2:7f:ab:8d:84:8e:d6:06:47: ae:1e:0b:fa:01:e5:5f:7d:85:35:09:9b:67:ef:3f: 5b:9e:b9:27:69:e0:ac:ca:c1:26:cf:a4:6b:b7:5a: 4e:57:e0:03:4d:68:35:52:98:de:25:2a:79:5f:e8: 4b:45:c0:ad:5f:1f:79:be:77:90:0f:de:40:0b:de: 93:c5:03:9f:e3:c1:16:6b:6c:e2:ea:0a:b4:d3:7b: 23:92:15:52:12:88:f6:a5:ef:53:38:7b:85:e0:ef: 29:5f:ba:dc:37:c1:e0:29:da:57:e7:3b:4f:08:e3: d8:42:03:8b:61:50:5d:36:d4:71:14:3b:5f:16:33: f5:c5:cf:97:ba:2e:b6:85:dc:cc:4b:e6:b0:53:e4: 06:d1:f7:48:4e:83:17:ae:d9:1b:c6:c9:3a:ea:0a: 44:fb:eb:6a:60:e0:22:3d:84:b5:41:21:f6:d9:7b: 41:cf:98:98:39:2e:d5:3a:e4:71:d9:e5:70:99:45: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:64:6B:41:53:FD:15:60:B7:BF:CB:51:44:BB:D8:41:8E:2F:EC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ae:0b:eb:28:27:e1:a6:06:91:81:40:45:ab:e5:5d:58:81: 44:d6:a2:1a:d7:05:9b:45:b2:2b:26:19:ab:bd:65:3b:ef:61: b3:94:60:2a:c4:f2:f0:48:da:6c:13:df:9c:03:9f:31:29:5e: a1:cb:6c:34:3c:53:ac:5c:9c:b6:fa:c8:19:b4:ac:6c:d7:17: 12:71:f4:9a:a9:63:e6:47:11:dc:0e:0d:c7:b4:6e:58:f5:c4: 04:84:b5:59:68:7e:06:57:0e:e0:b7:73:15:71:31:33:bc:90: b3:26:66:45:c6:92:e2:a0:fe:1b:ec:5f:e9:0c:8b:5c:aa:d9: ff:80:e4:6d:6f:b8:fd:84:be:de:ed:2a:fa:f5:b5:a8:e7:d9: 32:25:11:76:00:00:f6:e6:c9:a4:ce:1b:26:7c:9a:fe:4d:d3: e3:91:6c:74:50:4c:66:79:84:bf:71:09:db:ad:aa:3a:96:f2: 6f:7d:18:36:b1:ef:ae:67:77:1b:9c:35:25:79:75:c7:29:7f: d6:8d:10:84:66:1c:85:09:38:0e:61:84:1a:cc:5f:73:d7:b1: 4f:54:f3:29:c2:af:a2:b2:b1:52:38:6b:62:21:72:c7:e8:dd: 58:2c:8c:91:87:7a:4a:38:c4:02:3c:55:d3:5b:83:02:fd:55: 71:ab:b5:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWjGGFfZGAKtPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGZmMDg4MzgtNDA3Ni00Njg0LTk3NTAtMjU0N2JkZmU2ZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmapansEcc1cDa7oxLLOzI4h/Ite/AQoOo70s pNinqcPplZNv3O1iBjHP6iaextsbWrDqNVkFpghKYyJWoOHcYkCyf6uNhI7WBkeu Hgv6AeVffYU1CZtn7z9bnrknaeCsysEmz6Rrt1pOV+ADTWg1UpjeJSp5X+hLRcCt Xx95vneQD95AC96TxQOf48EWa2zi6gq003sjkhVSEoj2pe9TOHuF4O8pX7rcN8Hg KdpX5ztPCOPYQgOLYVBdNtRxFDtfFjP1xc+Xui62hdzMS+awU+QG0fdIToMXrtkb xsk66gpE++tqYOAiPYS1QSH22XtBz5iYOS7VOuRx2eVwmUVQ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlka0FT/RVgt7/LUUS72EGOL+wAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTY3MjgyZGMtZWY0Yi0z NDI0LWIxNGEtZDdjYzg1ZjU0OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADauC+soJ+GmBpGBQEWr5V1YgUTWohrXBZtFsismGau9ZTvvYbOUYCrE 8vBI2mwT35wDnzEpXqHLbDQ8U6xcnLb6yBm0rGzXFxJx9JqpY+ZHEdwODce0blj1 xASEtVlofgZXDuC3cxVxMTO8kLMmZkXGkuKg/hvsX+kMi1yq2f+A5G1vuP2Evt7t Kvr1tajn2TIlEXYAAPbmyaTOGyZ8mv5N0+ORbHRQTGZ5hL9xCdutqjqW8m99GDax 765ndxucNSV5dccpf9aNEIRmHIUJOA5hhBrMX3PXsU9U8ynCr6KysVI4a2Ihcsfo 3VgsjJGHeko4xAI8VdNbgwL9VXGrtbU= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:11 2025 by rpki-client