$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aabaf016-6c40-39c3-922a-64b8f883741a.roa File: aabaf016-6c40-39c3-922a-64b8f883741a.roa (raw, json) Hash identifier: Y0YrtduIvHyWZFOvJKjw2FQqiAA8kS0gTsCQDGWASmk= Subject key identifier: 8A:A9:49:24:F2:6D:B7:80:91:7D:FD:F1:FF:41:E4:F9:E6:4D:34:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECC039FCB1AE96D31FCA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aabaf016-6c40-39c3-922a-64b8f883741a.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.217.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c0:39:fc:b1:ae:96:d3:1f:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=26fcab8c-4413-412c-823e-16b861990659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:93:56:2e:74:8b:58:12:b9:af:67:a2:80: 8e:c3:e5:23:e2:ec:00:6b:25:f2:6e:ae:5f:81:b0: 6f:89:ad:95:4e:4c:94:66:95:23:84:bc:05:7b:fd: 67:41:03:ad:0a:52:94:a1:2f:6a:c4:63:1d:0b:ed: 68:1e:26:2a:29:54:60:48:02:58:3c:91:b2:73:84: 47:db:52:39:54:90:d4:1e:f7:3f:6a:2b:cc:aa:e9: 20:89:7c:be:9c:c4:da:0a:a2:a5:5e:ad:88:5e:92: c1:bd:93:ac:2a:9a:a9:e7:aa:c7:cd:6e:d8:70:8f: b8:84:1f:c3:c0:6c:81:0f:1a:76:b5:1f:ed:1e:32: 5a:be:43:98:c9:bf:22:7e:67:fc:4e:78:a3:a4:64: fe:d6:2c:c8:06:ac:cd:5d:07:ac:73:6c:17:1d:5b: 52:12:8b:0f:90:d8:08:a1:2b:8e:89:55:63:9f:cb: 0b:87:0d:dc:da:9f:fc:fd:83:38:99:48:2d:f8:49: a6:61:f5:5a:77:43:2b:ee:1f:e8:10:90:33:65:ae: 66:35:6d:2d:3a:00:68:77:cc:14:ba:08:05:17:30: d7:c6:2d:bb:6e:6f:9a:9a:80:76:5d:87:26:ba:86: 01:7e:1f:04:ba:17:0d:7f:5c:c9:97:b4:d6:ff:eb: 6d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A9:49:24:F2:6D:B7:80:91:7D:FD:F1:FF:41:E4:F9:E6:4D:34:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aabaf016-6c40-39c3-922a-64b8f883741a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2c:34:0b:17:a5:17:c1:45:d0:ad:c5:13:1e:e6:e7:8f:92: 52:1e:31:4c:ba:14:9c:61:5f:52:d9:0b:4b:cd:fc:cd:47:4d: 85:4e:7c:a3:90:c0:26:60:7f:84:a4:e1:4a:e9:b2:a0:1b:88: f3:41:96:a1:75:ff:4b:02:0d:4f:97:47:3d:ce:d2:cd:4f:33: 0b:cd:6d:fd:d9:a5:20:2d:03:ab:38:18:30:ab:c2:2b:9d:2b: 6e:ea:8b:81:8b:10:47:f4:a9:16:d9:43:c9:21:9f:a2:ce:06: 33:8f:ba:1d:c4:09:84:87:17:4f:33:3f:66:c0:8c:2e:27:04: 20:a4:4d:a8:32:b7:69:9b:c5:f7:8e:7f:1f:67:1b:17:b7:51: 86:f8:24:23:72:5f:45:73:bf:be:4b:06:fd:48:d8:43:b6:a7: 25:02:5e:6b:c0:f3:e9:af:3a:26:0f:ba:d5:e2:11:13:7d:f0: 8d:1c:7f:9f:d2:f6:23:5c:50:29:1b:5f:8f:00:c8:57:24:e0: c8:48:8a:3d:dd:7b:7f:1f:27:68:26:1b:e6:1f:e8:d2:ba:88: 89:b0:53:ef:79:af:95:70:87:8a:ae:a0:7b:e3:16:59:29:cf: d1:ec:79:83:3b:d7:ad:31:99:f9:22:b3:aa:cf:b5:e9:a2:32: f9:14:1d:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MA5/LGultMfyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MjZmY2FiOGMtNDQxMy00MTJjLTgyM2UtMTZiODYxOTkwNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMOTVi50i1gSua9nooCOw+Uj4uwAayXybq5f gbBvia2VTkyUZpUjhLwFe/1nQQOtClKUoS9qxGMdC+1oHiYqKVRgSAJYPJGyc4RH 21I5VJDUHvc/aivMqukgiXy+nMTaCqKlXq2IXpLBvZOsKpqp56rHzW7YcI+4hB/D wGyBDxp2tR/tHjJavkOYyb8ifmf8TnijpGT+1izIBqzNXQesc2wXHVtSEosPkNgI oSuOiVVjn8sLhw3c2p/8/YM4mUgt+EmmYfVad0Mr7h/oEJAzZa5mNW0tOgBod8wU uggFFzDXxi27bm+amoB2XYcmuoYBfh8EuhcNf1zJl7TW/+ttfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqpSSTybbeAkX398f9B5PnmTTT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWFiYWYwMTYtNmM0MC0z OWMzLTkyMmEtNjRiOGY4ODM3NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8sNAsXpRfBRdCtxRMe5uePklIeMUy6FJxhX1LZC0vN/M1HTYVOfKOQ wCZgf4Sk4UrpsqAbiPNBlqF1/0sCDU+XRz3O0s1PMwvNbf3ZpSAtA6s4GDCrwiud K27qi4GLEEf0qRbZQ8khn6LOBjOPuh3ECYSHF08zP2bAjC4nBCCkTagyt2mbxfeO fx9nGxe3UYb4JCNyX0Vzv75LBv1I2EO2pyUCXmvA8+mvOiYPutXiERN98I0cf5/S 9iNcUCkbX48AyFck4MhIij3de38fJ2gmG+Yf6NK6iImwU+95r5Vwh4quoHvjFlkp z9HseYM7160xmfkis6rPtemiMvkUHdw= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:27 2025 by rpki-client