$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1d37ad8-a7e8-37bb-959a-82e32375402d.roa File: b1d37ad8-a7e8-37bb-959a-82e32375402d.roa (raw, json) Hash identifier: zGwDrc0+9Ssy+ogxYU/RL2SUQoFdbC5GfS/gnSmsy1g= Subject key identifier: C2:1A:67:F8:25:34:15:1F:8B:BD:95:3F:0C:3A:44:2A:1B:CB:C9:F1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD5903C4982897692DEEC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1d37ad8-a7e8-37bb-959a-82e32375402d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:59:03:c4:98:28:97:69:2d:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a734d9f8-ef62-4115-b980-549ae0647f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:b0:2b:4a:f0:5b:0e:26:86:a5:ec:19:ae: 36:1a:5a:3d:eb:eb:f1:96:67:f7:a4:e5:e7:4b:01: 52:81:e1:90:fa:3d:1e:b8:76:51:73:ca:45:d1:8d: 2e:1a:be:7b:6e:30:56:73:fc:16:26:9f:c6:87:8a: ab:e6:f6:49:19:27:ca:05:25:4b:05:3b:b8:4f:67: 58:f4:ed:64:3a:02:03:f3:46:bf:4a:c8:a2:60:02: b7:60:ec:24:da:9a:81:81:5e:41:67:5a:97:02:07: e2:57:d0:c5:52:71:48:c0:cd:42:30:c7:7d:76:89: d2:f0:41:1b:24:5e:8a:23:46:4a:88:ec:ad:76:6a: 51:34:86:98:02:23:d1:7a:e3:8d:19:47:5a:3e:43: 44:ac:bc:30:14:07:5f:7e:8b:d3:ec:6b:ff:37:c8: 93:47:85:05:50:0f:0c:86:95:37:80:9b:a2:b0:52: 4d:79:d3:af:8e:78:1e:95:a5:85:af:5d:28:03:87: be:f7:28:10:cb:16:4e:ac:49:90:19:b3:aa:47:07: 44:14:74:23:4a:4d:bc:e5:4a:a2:34:ac:49:92:b4: d1:d9:db:cc:48:4b:a9:e3:37:27:ec:23:7f:91:fd: dc:f9:b0:9e:20:dd:8b:00:5b:74:1c:62:c5:6b:26: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1A:67:F8:25:34:15:1F:8B:BD:95:3F:0C:3A:44:2A:1B:CB:C9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1d37ad8-a7e8-37bb-959a-82e32375402d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:90:c6:70:e6:33:6e:15:54:6f:53:f5:87:9b:36:f8:fa:a8: c9:1b:ef:57:33:3f:5e:d4:15:ee:e2:eb:47:f1:2d:86:9f:e6: 2a:be:58:d0:93:23:5c:1b:46:ce:0e:b4:7c:dd:03:e1:01:c9: 7c:dd:bc:c3:e3:92:04:aa:96:a6:bd:5d:e1:5c:34:cc:9d:06: 2f:39:23:77:99:d6:22:e2:b4:7a:97:87:fc:a1:3f:41:03:07: 8f:9e:91:76:25:1e:ec:b1:0a:30:05:67:97:4c:14:3b:35:1b: cb:95:08:b2:8d:41:4b:46:d3:6a:f4:1d:aa:c0:e3:8f:d0:27: d5:b2:9f:47:2d:ce:40:57:93:bf:b1:cf:48:81:c5:66:f5:cc: 09:57:eb:74:a8:62:b5:25:c9:48:84:17:e2:af:83:a4:32:9b: bb:fc:21:e0:e3:5c:6a:91:65:73:0d:90:88:e6:e6:0d:bb:83: ae:e5:21:d4:e9:ba:2d:1e:b3:6c:68:bc:29:f1:3e:99:98:0f: 77:0a:0b:c4:56:ba:2e:06:ea:f7:bc:5f:26:4d:27:37:b9:f0: 80:21:9c:33:b4:01:98:a8:08:42:8a:b8:fb:49:3e:df:37:f3: 88:76:ec:65:13:5f:b7:3e:67:08:b4:7d:ef:93:d7:26:f6:0f: 63:80:13:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVkDxJgol2kt7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTczNGQ5ZjgtZWY2Mi00MTE1LWI5ODAtNTQ5YWUwNjQ3ZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNmwK0rwWw4mhqXsGa42Glo96+vxlmf3pOXn SwFSgeGQ+j0euHZRc8pF0Y0uGr57bjBWc/wWJp/Gh4qr5vZJGSfKBSVLBTu4T2dY 9O1kOgID80a/SsiiYAK3YOwk2pqBgV5BZ1qXAgfiV9DFUnFIwM1CMMd9donS8EEb JF6KI0ZKiOytdmpRNIaYAiPReuONGUdaPkNErLwwFAdffovT7Gv/N8iTR4UFUA8M hpU3gJuisFJNedOvjngelaWFr10oA4e+9ygQyxZOrEmQGbOqRwdEFHQjSk285Uqi NKxJkrTR2dvMSEup4zcn7CN/kf3c+bCeIN2LAFt0HGLFayaK7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIaZ/glNBUfi72VPww6RCoby8nxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjFkMzdhZDgtYTdlOC0z N2JiLTk1OWEtODJlMzIzNzU0MDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeQxnDmM24VVG9T9YebNvj6qMkb71czP17UFe7i60fxLYaf5iq+WNCT I1wbRs4OtHzdA+EByXzdvMPjkgSqlqa9XeFcNMydBi85I3eZ1iLitHqXh/yhP0ED B4+ekXYlHuyxCjAFZ5dMFDs1G8uVCLKNQUtG02r0HarA44/QJ9Wyn0ctzkBXk7+x z0iBxWb1zAlX63SoYrUlyUiEF+Kvg6Qym7v8IeDjXGqRZXMNkIjm5g27g67lIdTp ui0es2xovCnxPpmYD3cKC8RWui4G6ve8XyZNJze58IAhnDO0AZioCEKKuPtJPt83 84h27GUTX7c+Zwi0fe+T1yb2D2OAE2c= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:04 2025 by rpki-client