$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa File: b8e4ffb5-04fb-3989-bac1-011a62674a35.roa (raw, json) Hash identifier: 5EH3jF77d4EJQxuyoMQtfK+67SKav43TVPUL/+H9/wg= Subject key identifier: 62:AC:E6:77:50:C8:BB:47:7A:E8:BC:1F:68:1F:38:8D:73:42:63:54 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB39B0F0A69140C707B20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.217.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b3:9b:0f:0a:69:14:0c:70:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=e2627c7b-19f3-4572-8980-73a1b62ee9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:0a:0a:d9:64:39:db:88:22:82:7f:60:4d: 71:f5:3f:ea:2b:cd:1a:01:ab:93:74:1f:c9:e6:a4: 5f:0d:e1:54:19:65:69:a8:74:d9:c3:09:e8:da:fb: 6f:1b:bb:55:c5:28:ee:73:a3:10:f1:57:83:9b:a0: 66:3a:47:c1:49:cb:ab:e3:e4:b5:de:14:39:f1:b3: 7a:91:57:dd:92:db:9c:5d:7d:8c:69:ad:2f:34:4a: f0:ec:95:8b:01:05:c6:1d:18:6a:56:14:e5:bb:42: 8f:61:15:12:7b:fb:c6:fe:1d:bf:c4:7d:54:fc:72: 42:af:75:c7:d4:24:10:13:5c:13:13:ac:6f:29:68: f5:d0:33:21:4c:a3:86:2b:41:22:bd:49:f2:f3:7a: df:6f:67:dd:73:d8:f2:e5:c2:3a:ed:bd:e5:28:38: be:1c:8c:e4:30:e6:ae:15:52:f3:81:03:a3:a7:33: 25:f2:ee:b9:91:ff:fb:b9:b0:57:e6:65:35:1f:98: 0f:0e:64:56:f9:4b:79:b9:8b:6b:53:91:e9:38:33: 8e:43:4a:9e:7d:81:ba:26:aa:c2:96:fb:fd:4b:59: f3:a5:a5:bd:66:2f:9b:1d:27:3b:36:b1:89:77:ac: ef:d4:49:37:12:e0:ad:64:fb:fe:3e:04:f2:ea:f8: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AC:E6:77:50:C8:BB:47:7A:E8:BC:1F:68:1F:38:8D:73:42:63:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2b:5d:5f:aa:cd:e3:e9:46:1e:33:f3:e3:8d:7d:34:c9:2d: 40:7b:50:7d:17:ef:1d:bc:00:11:eb:ca:14:d4:de:29:5b:4e: c9:2f:4d:bc:e6:bb:78:92:19:ff:50:ed:b0:6c:10:cb:fe:85: 18:8a:de:3e:01:dc:91:c8:f7:ef:37:83:aa:62:58:37:2c:25: 97:df:83:ee:5d:6c:dc:78:e1:62:b5:ad:44:fc:ad:eb:8d:39: 1d:85:0b:14:d4:7b:fb:f5:dc:6a:48:29:2d:4a:2f:f8:23:f4: 94:6a:c6:d0:3c:5c:fb:f7:af:20:e4:fb:b5:95:0a:ff:ce:0f: 97:d8:55:52:62:0b:b4:54:fa:cb:ec:0e:76:3c:46:29:e3:3b: f9:cd:df:15:c8:3d:97:f0:26:fb:dc:eb:6b:2d:27:09:1d:d7: 0a:0e:ba:82:c4:40:f8:f7:8f:4a:72:60:6a:b6:43:c1:b5:78: a9:4b:8c:99:e5:58:cd:93:00:84:0a:b4:1a:b6:64:58:d5:c3: b3:22:63:a5:89:a3:13:f4:e8:bd:66:93:a4:eb:84:fd:fc:67: d8:6c:f4:7b:ca:72:01:94:e9:c4:9a:f1:ab:11:2d:a4:a6:84: 5a:ce:34:7b:18:f0:8e:c8:cd:70:c5:15:2b:90:c6:48:80:42: 7a:8f:92:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LObDwppFAxweyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZTI2MjdjN2ItMTlmMy00NTcyLTg5ODAtNzNhMWI2MmVlOWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW4KCtlkOduIIoJ/YE1x9T/qK80aAauTdB/J 5qRfDeFUGWVpqHTZwwno2vtvG7tVxSjuc6MQ8VeDm6BmOkfBScur4+S13hQ58bN6 kVfdktucXX2Maa0vNErw7JWLAQXGHRhqVhTlu0KPYRUSe/vG/h2/xH1U/HJCr3XH 1CQQE1wTE6xvKWj10DMhTKOGK0EivUny83rfb2fdc9jy5cI67b3lKDi+HIzkMOau FVLzgQOjpzMl8u65kf/7ubBX5mU1H5gPDmRW+Ut5uYtrU5HpODOOQ0qefYG6JqrC lvv9S1nzpaW9Zi+bHSc7NrGJd6zv1Ek3EuCtZPv+PgTy6vgX4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKs5ndQyLtHeui8H2gfOI1zQmNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjhlNGZmYjUtMDRmYi0z OTg5LWJhYzEtMDExYTYyNjc0YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMrXV+qzePpRh4z8+ONfTTJLUB7UH0X7x28ABHryhTU3ilbTskvTbzm u3iSGf9Q7bBsEMv+hRiK3j4B3JHI9+83g6piWDcsJZffg+5dbNx44WK1rUT8reuN OR2FCxTUe/v13GpIKS1KL/gj9JRqxtA8XPv3ryDk+7WVCv/OD5fYVVJiC7RU+svs DnY8RinjO/nN3xXIPZfwJvvc62stJwkd1woOuoLEQPj3j0pyYGq2Q8G1eKlLjJnl WM2TAIQKtBq2ZFjVw7MiY6WJoxP06L1mk6TrhP38Z9hs9HvKcgGU6cSa8asRLaSm hFrONHsY8I7IzXDFFSuQxkiAQnqPkjc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:40 2025 by rpki-client