$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa File: bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa (raw, json) Hash identifier: FiAeOkw7XbqXkoS3CDAxCz1UnZwPrSC3dUGfGyytEEE= Subject key identifier: C9:DD:68:53:BE:2A:3A:BA:55:8A:D8:34:C6:A2:37:38:73:A2:15:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD4CE921552078CE95CA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4c:e9:21:55:20:78:ce:95:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e73f40c5-dc04-4d9f-a0c1-d02e7d6b420c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:42:0e:d0:01:7c:19:5d:92:b3:39:6d:3b: f3:60:38:91:dd:92:e4:b2:43:05:de:3d:95:72:62: e2:3b:d3:39:6c:f4:f0:22:ab:7f:78:0a:64:d7:1d: a5:23:55:bc:bd:42:58:1d:c6:6a:aa:d8:90:7c:39: 63:be:86:29:f1:96:ef:27:25:df:c9:12:e2:41:8b: a5:e3:a3:ae:23:3d:a2:fa:d0:c7:c6:fa:11:ab:e0: f7:fe:66:d2:2b:c1:f0:ef:a8:b5:33:56:07:5f:75: 1f:f0:20:78:4e:32:2a:64:7e:89:26:12:7e:eb:fd: d0:01:da:d2:35:61:d2:46:04:a7:19:11:d4:aa:17: bc:7b:8f:4f:37:93:9f:3b:44:da:eb:2c:8a:32:3a: ef:bd:a4:79:48:e9:7e:c5:4a:7b:82:7a:b1:0b:de: 5d:09:ad:42:11:4e:09:10:23:25:f9:bb:ae:77:6e: 93:8e:34:4a:b9:d8:8a:61:a7:cb:bb:13:1d:36:e3: 5f:66:03:12:65:87:8f:3f:00:8e:44:49:1f:8d:db: a0:0d:f5:cd:f9:b5:08:00:78:6b:65:46:3a:79:a9: 5f:35:53:0f:8b:3e:b9:ed:7a:fa:d1:5a:23:6e:2c: 71:62:16:bc:18:c1:9e:40:09:46:1b:34:8a:38:9c: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DD:68:53:BE:2A:3A:BA:55:8A:D8:34:C6:A2:37:38:73:A2:15:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f8:cc:b8:b4:00:ce:92:da:c3:f0:e2:db:f2:67:69:c1:29: bf:20:ba:e5:75:aa:e9:ae:86:fa:cd:e9:38:9f:13:a9:90:2f: 4c:04:8f:26:c8:13:a6:c7:77:f1:b8:98:92:ae:e8:f8:49:47: 8f:b2:76:ac:13:79:bb:d1:71:cd:fc:08:ad:3d:74:ef:bd:09: 68:0f:0b:2e:dc:0d:f4:6b:be:86:0c:2a:51:14:1a:c9:9c:71: 89:f6:ff:8c:5e:ce:11:e0:aa:1b:10:81:84:23:f6:46:d6:9d: ba:62:7b:2b:3b:96:20:5e:94:7a:28:a9:6e:64:8a:a5:6c:bd: 7f:06:bc:3d:48:60:7d:99:3a:b1:3b:88:ba:62:bc:1a:a6:f1: b4:96:3d:4c:de:b0:eb:ed:e2:09:24:ef:dd:6f:a2:08:d1:64: 80:e4:b3:f4:28:6e:c7:6e:f1:39:f1:fa:18:2c:8b:ee:1a:98: 03:b9:eb:69:8f:b6:52:ec:14:53:33:c2:b1:7f:c6:52:cf:f8: 42:e8:00:9f:7c:8f:b7:79:e4:7b:2a:08:f7:0c:2b:e6:ff:68: 05:25:12:53:fa:b2:2a:02:de:98:ba:cb:ab:43:3f:1b:27:cc: b8:ca:81:c9:ed:34:b9:7f:04:08:00:05:a4:3e:df:13:72:a4: ed:f3:98:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzUzpIVUgeM6VygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTczZjQwYzUtZGMwNC00ZDlmLWEwYzEtZDAyZTdkNmI0MjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAdCDtABfBldkrM5bTvzYDiR3ZLkskMF3j2V cmLiO9M5bPTwIqt/eApk1x2lI1W8vUJYHcZqqtiQfDljvoYp8ZbvJyXfyRLiQYul 46OuIz2i+tDHxvoRq+D3/mbSK8Hw76i1M1YHX3Uf8CB4TjIqZH6JJhJ+6/3QAdrS NWHSRgSnGRHUqhe8e49PN5OfO0Ta6yyKMjrvvaR5SOl+xUp7gnqxC95dCa1CEU4J ECMl+buud26TjjRKudiKYafLuxMdNuNfZgMSZYePPwCOREkfjdugDfXN+bUIAHhr ZUY6ealfNVMPiz657Xr60VojbixxYha8GMGeQAlGGzSKOJwbaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMndaFO+Kjq6VYrYNMaiNzhzohV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmI3ZTdlY2EtMGUzOC0z YjE3LWI3Y2MtNjZmOTdhNzQ2NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB34zLi0AM6S2sPw4tvyZ2nBKb8guuV1qumuhvrN6TifE6mQL0wEjybI E6bHd/G4mJKu6PhJR4+ydqwTebvRcc38CK09dO+9CWgPCy7cDfRrvoYMKlEUGsmc cYn2/4xezhHgqhsQgYQj9kbWnbpieys7liBelHooqW5kiqVsvX8GvD1IYH2ZOrE7 iLpivBqm8bSWPUzesOvt4gkk791vogjRZIDks/Qobsdu8Tnx+hgsi+4amAO562mP tlLsFFMzwrF/xlLP+ELoAJ98j7d55HsqCPcMK+b/aAUlElP6sioC3pi6y6tDPxsn zLjKgcntNLl/BAgABaQ+3xNypO3zmBk= -----END CERTIFICATE-----Generated at Fri Oct 17 08:39:55 2025 by rpki-client