$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa File: b803768f-6f65-3934-87a6-cba4dc1d2977.roa (raw, json) Hash identifier: bZwoeBCEc20t1ANS6gCJIcxnK4xqc7baCcpwrbrUjWg= Subject key identifier: A0:5B:EE:71:BA:D9:87:B6:A4:B0:6B:39:4D:63:75:97:43:3D:09:6B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD68E69B8126163AF7AF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:68:e6:9b:81:26:16:3a:f7:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4db3be79-3a72-4998-ac61-6765449084eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:02:8a:50:1f:ae:47:df:5e:d2:b1:4e:f9:9a: 41:ba:b8:52:4a:76:80:14:e9:7f:97:26:39:d8:4a: b3:14:b2:c3:47:8f:4c:1e:f6:51:97:6e:02:46:6d: e6:e2:33:67:40:1f:6b:f5:bf:f6:0d:65:91:02:b2: 22:9f:2b:d8:0b:92:1b:fb:08:17:68:61:0d:93:ff: 03:a0:22:1f:dc:52:ed:98:91:5a:7f:dd:38:f4:f7: 66:87:cd:00:e9:17:67:62:5d:ce:84:f6:f1:4a:87: ef:2b:7e:f1:ae:1a:aa:e6:25:9f:46:b5:b5:8b:64: be:86:8a:80:76:df:95:c4:6a:c4:91:b7:d8:14:d8: 29:72:20:14:69:db:3b:6c:02:e0:cb:bc:fc:b9:39: 92:9d:dc:d8:78:16:a2:d3:64:ef:38:5a:1d:2b:a0: cc:a9:31:8e:03:03:33:7f:2e:11:37:ac:6e:e7:ec: 23:f1:1b:c0:38:9b:d3:a8:0a:ed:16:e9:6b:74:94: f6:d6:a2:b5:dd:03:7a:5a:56:ad:54:3a:ac:97:d9: c9:15:28:e1:8b:94:54:2f:1b:95:8d:48:58:5f:dc: fa:06:c4:80:c5:c5:d2:5c:10:1e:3a:13:dd:0c:74: 82:5e:3d:63:7b:fd:a6:2b:be:e8:b4:94:9f:13:a7: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5B:EE:71:BA:D9:87:B6:A4:B0:6B:39:4D:63:75:97:43:3D:09:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d7:26:38:3c:3c:8b:4c:94:f3:c4:a5:68:0d:b1:0d:38:7b: e8:70:a0:16:d5:b0:48:13:68:97:8e:26:69:4a:fa:82:99:e3: 98:05:70:da:9c:8e:d8:92:dd:c5:32:79:10:54:28:cc:21:67: 76:4e:e9:ee:f0:5c:b2:5d:15:13:28:6c:86:ce:53:6f:3c:66: e5:d1:8b:4f:86:39:79:82:5f:bb:ea:00:4b:07:eb:57:8b:44: 73:ba:4b:ad:e2:c0:ac:e2:bb:b2:e2:29:af:96:8f:46:e2:cd: be:10:8f:9b:dc:f3:1b:06:e4:04:21:3f:30:0c:28:da:7c:4d: 14:78:b2:16:6c:73:bd:6b:ef:5a:53:92:6a:ac:dd:25:e5:00: 01:44:c7:7a:c7:42:d7:83:df:ea:82:a0:50:88:00:4e:5f:d2: e1:71:c3:6f:cf:5a:c2:71:88:78:ea:aa:00:7c:27:b4:b8:b7: 79:7e:31:de:9d:6a:70:0d:0c:cf:e4:0a:8d:2d:b3:9b:2c:5b: 61:b0:88:90:70:99:38:78:e4:3b:d3:1e:5d:c6:58:e7:d2:88: c9:67:f7:f4:92:10:a2:1f:b4:45:65:c4:7c:31:e1:76:18:f0: be:5f:da:dd:73:fb:da:aa:50:89:1f:c0:e7:c4:38:25:87:12: a2:2c:44:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWjmm4EmFjr3rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGRiM2JlNzktM2E3Mi00OTk4LWFjNjEtNjc2NTQ0OTA4NGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwKKUB+uR99e0rFO+ZpBurhSSnaAFOl/lyY5 2EqzFLLDR49MHvZRl24CRm3m4jNnQB9r9b/2DWWRArIinyvYC5Ib+wgXaGENk/8D oCIf3FLtmJFaf9049Pdmh80A6RdnYl3OhPbxSofvK37xrhqq5iWfRrW1i2S+hoqA dt+VxGrEkbfYFNgpciAUads7bALgy7z8uTmSndzYeBai02TvOFodK6DMqTGOAwMz fy4RN6xu5+wj8RvAOJvTqArtFulrdJT21qK13QN6WlatVDqsl9nJFSjhi5RULxuV jUhYX9z6BsSAxcXSXBAeOhPdDHSCXj1je/2mK77otJSfE6eHXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBb7nG62Ye2pLBrOU1jdZdDPQlrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjgwMzc2OGYtNmY2NS0z OTM0LTg3YTYtY2JhNGRjMWQyOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzXJjg8PItMlPPEpWgNsQ04e+hwoBbVsEgTaJeOJmlK+oKZ45gFcNqc jtiS3cUyeRBUKMwhZ3ZO6e7wXLJdFRMobIbOU288ZuXRi0+GOXmCX7vqAEsH61eL RHO6S63iwKziu7LiKa+Wj0bizb4Qj5vc8xsG5AQhPzAMKNp8TRR4shZsc71r71pT kmqs3SXlAAFEx3rHQteD3+qCoFCIAE5f0uFxw2/PWsJxiHjqqgB8J7S4t3l+Md6d anANDM/kCo0ts5ssW2GwiJBwmTh45DvTHl3GWOfSiMln9/SSEKIftEVlxHwx4XYY 8L5f2t1z+9qqUIkfwOfEOCWHEqIsRFI= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:04 2025 by rpki-client