$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa File: dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa (raw, json) Hash identifier: 670gSR/TaVR03GkcWm8reOr8JZp2QwgIRTdtLp3stRU= Subject key identifier: 7E:9A:28:19:E8:B3:BA:45:93:35:66:28:C5:A5:BA:AA:48:C7:10:68 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B52A75A240BF8F509B2FCBC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 15169 IP address blocks: 172.217.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5a:24:0b:f8:f5:09:b2:fc:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=b712b7e1-707a-441b-9a52-5df3ca171803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:f5:a9:90:dc:d5:1c:60:a2:f1:bf:a9:b4: 7e:2c:df:c8:15:92:f7:12:d2:ea:52:b2:bf:f2:cf: 02:1a:a8:4f:55:19:38:4c:fe:a5:d3:6b:1a:ce:32: ce:25:f8:c1:1c:65:aa:e6:d0:23:e1:cd:91:8d:69: 7e:3d:69:75:cb:7e:03:7c:9f:4c:7c:03:1c:a7:83: 00:d1:57:5d:7d:5b:22:a3:27:d7:18:c2:34:4e:cc: 0e:62:e1:81:79:d6:fe:ea:00:c7:e1:db:d6:86:9a: 45:a7:a8:39:dd:15:ad:49:13:62:40:61:82:4e:2c: 84:5f:c8:ac:ca:f6:c4:d7:9e:59:77:36:57:c0:aa: 15:7b:55:2c:be:27:a8:3a:83:7d:a6:de:27:61:4c: 9d:33:2f:b3:fc:d2:60:61:79:e2:08:3c:ce:4a:d6: a0:d3:59:95:c2:db:2e:75:94:14:eb:f6:25:ce:c4: 04:91:65:c1:b0:d3:4a:5b:4f:11:53:0c:27:cb:15: 31:e4:ae:cd:6f:a1:d1:f8:71:a6:66:b4:94:d9:e6: 8b:cf:87:28:c4:3c:b7:a4:c1:29:a8:75:eb:c3:b0: 39:26:50:8d:9c:21:d9:91:5c:42:a0:11:b9:c0:34: 80:53:53:37:91:98:54:dd:26:7f:ad:2f:16:53:db: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9A:28:19:E8:B3:BA:45:93:35:66:28:C5:A5:BA:AA:48:C7:10:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:98:72:9c:a0:3d:4b:05:d1:ba:62:a0:87:ca:93:22:3e:5d: bb:74:73:4d:ff:a6:b0:80:e2:3f:1a:5d:d8:eb:57:15:03:76: 51:e9:52:11:54:68:6f:65:42:fe:31:c7:b5:e0:fb:42:57:69: e0:78:91:8d:5f:b7:a3:f6:67:3f:c9:dc:e2:e9:e5:a7:63:4c: 59:6e:9f:94:81:74:07:3b:09:f8:8a:55:a6:87:eb:6f:43:38: a8:f6:41:b6:05:cc:8e:4a:ce:23:dc:67:f5:8f:ba:37:88:2b: 92:f6:e4:8f:50:ae:73:8b:33:17:f9:6a:ef:dc:6d:7e:14:71: 58:3f:61:b6:3b:b6:61:da:e5:86:9e:01:d6:f0:64:8a:2d:b2: 88:90:1a:e4:ae:27:29:d4:a8:23:fb:5c:9b:de:2a:f4:eb:70: 91:5c:0b:94:c3:a8:fd:28:2e:2f:2c:1e:92:fa:d4:1d:91:f8: 91:6f:5e:e3:68:72:12:12:03:04:b1:49:3a:5b:fd:2b:ec:b7: da:38:d1:e0:5f:3a:cd:a6:41:29:c9:f6:cc:09:f4:c1:c7:8c: d0:48:72:5e:03:9f:e8:11:17:e8:6e:e0:c3:7c:19:fb:7f:15: 7a:fd:ce:d1:5a:c9:19:ff:ff:b8:f9:ee:ff:8e:04:90:38:87: 62:1e:b5:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1okC/j1CbL8vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YjcxMmI3ZTEtNzA3YS00NDFiLTlhNTItNWRmM2NhMTcxODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpH1qZDc1RxgovG/qbR+LN/IFZL3EtLqUrK/ 8s8CGqhPVRk4TP6l02sazjLOJfjBHGWq5tAj4c2RjWl+PWl1y34DfJ9MfAMcp4MA 0VddfVsioyfXGMI0TswOYuGBedb+6gDH4dvWhppFp6g53RWtSRNiQGGCTiyEX8is yvbE155ZdzZXwKoVe1UsvieoOoN9pt4nYUydMy+z/NJgYXniCDzOStag01mVwtsu dZQU6/YlzsQEkWXBsNNKW08RUwwnyxUx5K7Nb6HR+HGmZrSU2eaLz4coxDy3pMEp qHXrw7A5JlCNnCHZkVxCoBG5wDSAU1M3kZhU3SZ/rS8WU9tLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6aKBnos7pFkzVmKMWluqpIxxBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZiOGM1ZmYtNDA0NS0z NzJmLWJiMzEtOTNmNTE2NTFjMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiYcpygPUsF0bpioIfKkyI+Xbt0c03/prCA4j8aXdjrVxUDdlHpUhFU aG9lQv4xx7Xg+0JXaeB4kY1ft6P2Zz/J3OLp5adjTFlun5SBdAc7CfiKVaaH629D OKj2QbYFzI5KziPcZ/WPujeIK5L25I9QrnOLMxf5au/cbX4UcVg/YbY7tmHa5Yae AdbwZIotsoiQGuSuJynUqCP7XJveKvTrcJFcC5TDqP0oLi8sHpL61B2R+JFvXuNo chISAwSxSTpb/Svst9o40eBfOs2mQSnJ9swJ9MHHjNBIcl4Dn+gRF+hu4MN8Gft/ FXr9ztFayRn//7j57v+OBJA4h2IetVw= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:12 2025 by rpki-client