$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa File: ade63972-a7fa-3aa6-9cdc-7f422468c453.roa (raw, json) Hash identifier: WFEgxLIOPjScdrbO8Rv0bQGmW9g19ARXnAuc5H3uTdg= Subject key identifier: 4A:25:A2:AA:37:3F:CE:F3:FC:6D:AA:8B:D8:2E:BD:3A:C6:62:16:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE0F2BD745C759B8062040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0f:2b:d7:45:c7:59:b8:06:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c7fe90dc-02ef-4f8f-a0a9-7d2cdeae7570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4b:90:d8:0d:ed:45:3f:95:ef:97:8b:c3:50: 45:94:bc:41:6b:f4:45:e4:2c:69:c7:33:5d:55:57: ac:10:e9:b7:88:21:1b:0a:f0:4b:11:91:cb:17:b2: 69:1e:2b:c6:91:b8:91:be:2d:73:1c:1c:2b:b9:f0: 9c:2c:63:91:8d:0b:d5:e6:d8:89:3f:6f:a6:d3:d1: d1:1d:31:76:ae:2d:ff:67:7b:48:eb:a5:57:c5:4d: 42:db:ef:89:eb:ce:e3:0e:45:4f:ce:06:2f:13:a8: 40:b5:56:fa:33:9b:38:ce:35:cb:38:d5:80:46:1d: 9d:67:45:0e:70:0a:5c:53:4b:a4:af:08:58:23:48: d2:8a:ae:c3:5e:fe:27:04:26:7c:c4:92:da:0c:76: 92:12:a2:c0:ad:70:70:44:14:47:56:f1:34:a4:7d: a8:53:10:0c:df:fd:5c:92:c2:12:4b:89:91:b6:86: 49:7e:e1:80:22:0f:7d:d1:db:6d:34:76:11:2e:5f: e9:fe:3b:a7:cf:9b:b8:fb:11:2d:6e:dd:de:90:6f: 4e:03:c6:d1:0b:93:5b:c4:0e:de:b4:76:66:e3:ad: 32:5d:e4:13:3c:bb:fc:89:36:c2:79:a0:4c:c6:cc: e3:86:bb:03:4e:cb:e4:7d:1b:3b:e7:27:90:fb:0f: f3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:25:A2:AA:37:3F:CE:F3:FC:6D:AA:8B:D8:2E:BD:3A:C6:62:16:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:25:4c:18:4c:c3:d1:df:cc:35:8c:53:d9:de:1e:ed:17:65: 8d:d6:06:d8:52:2c:c1:74:e2:57:c1:85:8d:75:5e:ac:ea:06: 85:9c:86:b9:c8:7b:90:f9:d6:43:b2:16:fa:15:59:13:37:4f: 46:1f:3c:2e:09:c9:ae:fb:51:48:c0:6f:f1:bf:34:b6:df:c8: 9e:12:f7:e3:84:81:7c:6a:91:1c:cb:2d:78:55:da:b2:fb:99: cf:52:3f:4a:1e:25:1d:89:05:c4:9f:7d:6c:79:30:86:96:e5: 48:5f:59:f8:17:35:5a:17:18:10:5c:17:95:e9:85:3a:c8:0e: d4:84:a1:08:62:84:79:bc:0a:8b:01:8a:37:9d:e2:af:ad:47: 66:46:4a:54:be:75:98:75:44:49:1d:e0:0e:6e:dc:ca:da:b4: 4a:01:69:e1:01:a0:21:1b:f7:80:03:45:89:ad:a5:3c:5f:0e: 44:52:38:e1:cf:15:bc:b9:ec:f7:fa:0f:52:ce:3d:bd:4c:19: 52:ad:5a:6a:24:cc:29:49:c4:19:77:8c:86:6b:4f:83:db:63: d2:3d:3e:b1:e8:eb:84:b2:2a:73:40:03:3f:e2:16:e6:9d:6f: c4:36:f3:2c:82:26:41:ed:1e:26:24:67:07:cc:23:ee:39:18: 9d:29:5c:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzg8r10XHWbgGIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzdmZTkwZGMtMDJlZi00ZjhmLWEwYTktN2QyY2RlYWU3NTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0uQ2A3tRT+V75eLw1BFlLxBa/RF5CxpxzNd VVesEOm3iCEbCvBLEZHLF7JpHivGkbiRvi1zHBwrufCcLGORjQvV5tiJP2+m09HR HTF2ri3/Z3tI66VXxU1C2++J687jDkVPzgYvE6hAtVb6M5s4zjXLONWARh2dZ0UO cApcU0ukrwhYI0jSiq7DXv4nBCZ8xJLaDHaSEqLArXBwRBRHVvE0pH2oUxAM3/1c ksISS4mRtoZJfuGAIg990dttNHYRLl/p/junz5u4+xEtbt3ekG9OA8bRC5NbxA7e tHZm460yXeQTPLv8iTbCeaBMxszjhrsDTsvkfRs75yeQ+w/ztQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoloqo3P87z/G2qi9guvTrGYhY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWRlNjM5NzItYTdmYS0z YWE2LTljZGMtN2Y0MjI0NjhjNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAlTBhMw9HfzDWMU9neHu0XZY3WBthSLMF04lfBhY11XqzqBoWchrnI e5D51kOyFvoVWRM3T0YfPC4Jya77UUjAb/G/NLbfyJ4S9+OEgXxqkRzLLXhV2rL7 mc9SP0oeJR2JBcSffWx5MIaW5UhfWfgXNVoXGBBcF5XphTrIDtSEoQhihHm8CosB ijed4q+tR2ZGSlS+dZh1REkd4A5u3MratEoBaeEBoCEb94ADRYmtpTxfDkRSOOHP Fby57Pf6D1LOPb1MGVKtWmokzClJxBl3jIZrT4PbY9I9PrHo64SyKnNAAz/iFuad b8Q28yyCJkHtHiYkZwfMI+45GJ0pXA4= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:42 2025 by rpki-client