$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa File: bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa (raw, json) Hash identifier: 3o7hHaDg7H2oF6dJY/GVbuaa+6co+thJNngn3P6ZFhg= Subject key identifier: 27:6F:6C:C2:52:3A:77:24:15:B5:32:92:0A:CE:3B:34:A9:41:FD:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6FC6CE5B149DDA935640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6f:c6:ce:5b:14:9d:da:93:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=54c05c15-0088-497d-bf4c-0af554c63a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ad:40:13:01:bb:c6:0d:7d:a0:81:69:f8:47: f8:2e:a8:b9:e2:b2:30:4b:76:12:85:ab:bb:78:b7: 3d:5f:4a:98:94:89:a9:b9:00:2c:ad:7c:c5:69:9a: c3:5c:33:ab:87:cf:e5:dd:cf:bb:1c:49:5e:b3:33: 21:b3:e3:d3:62:aa:f0:f5:82:52:47:28:24:14:be: 21:40:78:de:76:9c:53:bd:62:23:24:3e:94:74:8d: 8c:e4:5f:91:10:1c:c0:72:57:57:13:9a:47:05:63: ef:4c:00:33:ea:92:c7:27:50:ff:9b:4a:a5:ab:2e: 26:12:79:83:5b:f9:b2:09:36:84:8e:06:bd:0b:5a: 0e:8c:f1:e2:68:5b:66:21:1c:9d:03:b6:02:3d:91: 2e:89:d1:17:77:cf:3a:11:a4:97:2d:b6:4c:10:8b: 17:f2:82:bb:ba:0e:ab:8c:7a:ff:5d:8d:64:bc:8c: 6e:e5:53:4c:ad:40:07:38:39:2e:10:0d:29:dd:dc: 31:d6:88:8d:45:ae:fd:ee:b4:99:f5:c8:be:4f:e2: 09:51:08:af:0f:f6:d8:36:e3:dd:93:f7:e0:b1:f3: 08:2f:b6:08:4a:7f:c1:23:db:0c:a5:0d:3c:ad:54: 42:01:33:b8:54:79:05:5b:1c:29:48:86:a8:95:b2: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6F:6C:C2:52:3A:77:24:15:B5:32:92:0A:CE:3B:34:A9:41:FD:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c6:18:99:99:75:53:1e:e2:9b:39:d4:da:6d:73:80:27:77: fa:76:26:8b:9c:38:6d:50:fb:35:9a:21:f7:c4:2f:37:c5:01: f2:db:f6:38:8c:77:32:12:fe:5c:d2:20:b4:1a:ed:0b:2c:c0: c4:df:86:f2:53:da:18:61:0c:8d:3d:c5:63:60:d1:ce:f9:12: 51:cf:42:7d:4b:8e:d0:8f:54:05:37:05:62:dd:57:41:b7:c5: fd:c7:f0:09:ec:d8:91:9a:b7:28:a3:43:e0:f1:47:91:8a:a6: 46:fd:e7:3c:d0:6b:f1:71:5d:83:f2:1b:b8:9f:90:1d:a2:9f: fa:e3:39:8f:5c:5f:e3:68:80:2c:92:fb:17:92:c6:7c:b6:6f: 93:5e:6d:94:22:cc:2e:d8:b3:0c:91:88:a6:ba:74:76:74:3c: 68:4e:f9:72:a5:98:36:4d:e9:2a:83:0b:a0:36:19:6f:62:37: 2d:de:e1:a4:f0:a0:0d:76:55:86:6f:1f:12:c9:1b:26:d2:bf: 0b:c6:49:ee:31:dd:63:df:9f:17:2f:ce:05:a7:c6:45:3a:f4: a8:cc:e7:e6:47:35:e5:46:b0:8b:32:66:a3:c5:d8:b0:05:c8: 33:78:7b:8b:83:6f:7d:01:35:41:a4:e2:45:80:25:c2:b8:08: 94:19:5c:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzW/GzlsUndqTVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTRjMDVjMTUtMDA4OC00OTdkLWJmNGMtMGFmNTU0YzYzYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq1AEwG7xg19oIFp+Ef4Lqi54rIwS3YShau7 eLc9X0qYlImpuQAsrXzFaZrDXDOrh8/l3c+7HEleszMhs+PTYqrw9YJSRygkFL4h QHjedpxTvWIjJD6UdI2M5F+REBzAcldXE5pHBWPvTAAz6pLHJ1D/m0qlqy4mEnmD W/myCTaEjga9C1oOjPHiaFtmIRydA7YCPZEuidEXd886EaSXLbZMEIsX8oK7ug6r jHr/XY1kvIxu5VNMrUAHODkuEA0p3dwx1oiNRa797rSZ9ci+T+IJUQivD/bYNuPd k/fgsfMIL7YISn/BI9sMpQ08rVRCATO4VHkFWxwpSIaolbLWPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdvbMJSOnckFbUykgrOOzSpQf2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmRjMjlhMDItZGZjOC0z NGFiLThlZTktZTEzMTE3OTQzN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDGGJmZdVMe4ps51Nptc4And/p2JoucOG1Q+zWaIffELzfFAfLb9jiM dzIS/lzSILQa7QsswMTfhvJT2hhhDI09xWNg0c75ElHPQn1LjtCPVAU3BWLdV0G3 xf3H8Ans2JGatyijQ+DxR5GKpkb95zzQa/FxXYPyG7ifkB2in/rjOY9cX+NogCyS +xeSxny2b5NebZQizC7YswyRiKa6dHZ0PGhO+XKlmDZN6SqDC6A2GW9iNy3e4aTw oA12VYZvHxLJGybSvwvGSe4x3WPfnxcvzgWnxkU69KjM5+ZHNeVGsIsyZqPF2LAF yDN4e4uDb30BNUGk4kWAJcK4CJQZXPs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:25 2025 by rpki-client