$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa File: b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa (raw, json) Hash identifier: 54flXbiYwxES9SchrrpaxtL+qKRI6V0kEzrZViviqJQ= Subject key identifier: 86:F8:35:84:46:41:88:AC:E9:F6:87:79:EE:0B:40:5B:8B:AF:F5:AE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBEE47753CCF8E4841000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.217.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:be:e4:77:53:cc:f8:e4:84:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=e77457dc-6b32-47c5-9950-c3912488d147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:7b:24:8c:56:58:fc:24:f6:f0:c5:6e:88: 17:05:9f:c9:d9:8b:94:0d:09:06:28:5b:b2:ca:83: 90:92:7d:92:d6:2f:8a:d4:73:49:34:16:22:df:92: c5:1b:75:67:27:19:73:fa:79:50:b0:34:eb:db:0e: b8:44:36:44:32:6e:76:6d:24:78:7e:41:b1:d5:cf: 70:cf:99:9e:74:70:c2:7a:2d:35:86:18:6f:9f:7a: a0:9b:f1:3d:ba:e6:8f:b9:2f:4a:80:b7:b4:aa:bc: 96:fd:f4:04:bb:3b:71:4c:21:0f:4b:10:5d:06:88: e9:d4:58:71:e0:5b:a9:f5:61:ee:12:d3:a2:a8:38: 3d:51:6e:45:b1:d0:02:ea:72:7a:b0:5d:37:14:e3: ed:06:c1:52:27:93:fd:bd:ed:ba:da:81:0d:61:a4: ce:53:b9:00:a1:30:9a:6b:9c:c3:8e:9a:1b:bc:1f: ba:8b:d0:20:58:6d:81:b8:93:cc:4a:d5:68:8d:d0: cd:dd:94:43:0f:47:c0:dc:c0:d6:e8:fc:c5:dd:b7: 2c:8e:46:40:ff:02:58:78:31:7e:ef:11:f2:ea:b3: 9f:9e:cc:89:37:ce:76:0f:29:f6:9b:45:cc:e8:79: 05:7f:25:30:d6:0e:5f:65:a0:cb:de:a6:c5:7f:e6: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F8:35:84:46:41:88:AC:E9:F6:87:79:EE:0B:40:5B:8B:AF:F5:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2d:ec:66:14:5a:eb:4c:2c:13:d0:5c:9c:d8:c3:66:de:e2: 60:14:71:6f:3a:3a:8d:32:93:e3:0b:09:58:46:79:bf:81:09: d5:0b:71:b4:aa:3d:db:54:a9:95:4a:df:93:96:a0:20:45:4e: d2:3a:c2:e7:52:e4:12:42:bb:16:c4:03:0d:54:39:d2:d3:94: de:e0:78:0b:77:59:04:c3:65:28:69:11:e3:7c:71:89:10:21: 4b:c7:06:d2:3f:ff:88:5f:47:2f:69:11:8e:d0:76:02:bf:09: 29:26:de:56:83:76:56:05:7f:8b:7b:1d:e1:30:c1:fc:c3:ef: 50:b0:da:ef:63:e2:d0:af:40:12:d9:a5:02:88:7d:3e:c5:1f: df:b9:e8:9d:78:e3:68:d7:7f:73:56:2a:c8:3f:03:ba:08:77: 6a:51:a6:c6:82:e3:ce:23:81:93:2e:16:e2:92:b2:97:bd:7e: a4:e9:6b:c2:59:60:58:2b:de:87:1c:1c:77:6d:8c:f3:70:64: 7d:9e:1e:9b:8c:3f:ce:8b:a4:90:11:80:72:28:84:41:b5:94: ca:0b:4a:94:27:93:ce:08:ca:a3:f7:62:f0:aa:d6:98:64:f5: c4:67:e1:1b:fd:fe:05:7b:e4:5f:8c:99:75:ab:74:8e:7f:e6: 1e:63:cd:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L7kd1PM+OSEEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZTc3NDU3ZGMtNmIzMi00N2M1LTk5NTAtYzM5MTI0ODhkMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjF7JIxWWPwk9vDFbogXBZ/J2YuUDQkGKFuy yoOQkn2S1i+K1HNJNBYi35LFG3VnJxlz+nlQsDTr2w64RDZEMm52bSR4fkGx1c9w z5medHDCei01hhhvn3qgm/E9uuaPuS9KgLe0qryW/fQEuztxTCEPSxBdBojp1Fhx 4Fup9WHuEtOiqDg9UW5FsdAC6nJ6sF03FOPtBsFSJ5P9ve262oENYaTOU7kAoTCa a5zDjpobvB+6i9AgWG2BuJPMStVojdDN3ZRDD0fA3MDW6PzF3bcsjkZA/wJYeDF+ 7xHy6rOfnsyJN852Dyn2m0XM6HkFfyUw1g5fZaDL3qbFf+bICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb4NYRGQYis6faHee4LQFuLr/WuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJhNmNlMzItMGRlNy0z YjUyLWI2YmItMjE2YTNkM2RiMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0t7GYUWutMLBPQXJzYw2be4mAUcW86Oo0yk+MLCVhGeb+BCdULcbSq PdtUqZVK35OWoCBFTtI6wudS5BJCuxbEAw1UOdLTlN7geAt3WQTDZShpEeN8cYkQ IUvHBtI//4hfRy9pEY7QdgK/CSkm3laDdlYFf4t7HeEwwfzD71Cw2u9j4tCvQBLZ pQKIfT7FH9+56J1442jXf3NWKsg/A7oId2pRpsaC484jgZMuFuKSspe9fqTpa8JZ YFgr3occHHdtjPNwZH2eHpuMP86LpJARgHIohEG1lMoLSpQnk84IyqP3YvCq1phk 9cRn4Rv9/gV75F+MmXWrdI5/5h5jzZ8= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:01 2025 by rpki-client