$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa File: e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa (raw, json) Hash identifier: wp8ABh7TuBMm5sKTz1VoHaAZVw3bzv2Vzi2DKPAj4Z0= Subject key identifier: F1:6E:D1:3A:3E:94:4F:0D:4B:13:E4:0F:D4:FF:8E:A4:3B:C5:1A:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB7F62796494145C1B2C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.217.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b7:f6:27:96:49:41:45:c1:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=e66cc339-a33b-443b-b527-18c4c128496b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:56:96:44:a6:61:10:70:32:16:3f:72:47: ac:84:6b:b8:4f:04:13:89:d0:52:78:47:b3:d0:bc: 13:c4:87:de:43:51:7e:48:a1:b9:31:1f:c7:bb:89: aa:f6:fa:73:c0:f9:cd:16:c5:f2:03:fc:b8:6f:23: d2:01:c0:52:75:43:08:56:37:81:b3:2e:b0:4c:30: 38:d4:a8:47:f6:c0:ca:10:2b:4f:82:91:82:c0:d4: 4a:e3:bf:14:70:fe:89:e7:5f:c6:ea:9b:ce:cb:a9: c6:bd:89:34:f9:98:d7:1f:42:df:ec:a0:82:23:62: e4:36:28:97:d6:9f:3b:c1:c3:d7:b0:9f:74:bf:25: 2a:d2:7e:d6:23:ed:d8:f2:9c:81:6d:26:5f:fd:bf: 49:5c:fb:03:01:2b:b6:fe:59:b2:ba:a9:6a:d6:6b: 7f:26:27:55:a9:64:4f:f8:19:95:34:d4:4e:eb:83: ae:fc:70:4e:45:e5:5e:d4:95:81:b6:a2:bc:85:18: 3d:32:17:0b:b8:47:5c:1f:62:e4:02:14:03:72:99: 17:58:1d:bd:86:66:73:38:2e:f7:52:40:e5:6a:39: 57:8b:13:bc:15:68:e5:39:e7:df:89:58:12:a8:30: 8e:3d:b9:06:e2:2c:6a:74:5f:1d:35:a2:cf:7c:45: 8b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6E:D1:3A:3E:94:4F:0D:4B:13:E4:0F:D4:FF:8E:A4:3B:C5:1A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:37:ac:34:8f:75:86:c9:8a:fc:cd:37:a9:51:82:1b:cf:b1: bd:cf:28:e8:3d:c6:10:2e:6d:77:72:67:d5:f8:eb:a9:71:94: 2f:27:44:05:61:10:0b:47:58:71:be:c2:9c:9c:2c:b6:f3:57: 44:aa:35:8b:6d:ca:a2:e0:7f:26:76:42:30:e8:17:f5:05:82: b5:fe:00:9a:6f:a6:6d:da:14:e8:5b:40:11:49:c5:2a:32:f7: 6e:6e:6a:21:54:eb:37:e0:d5:30:b1:f1:05:5b:ee:95:7e:8a: 1d:56:9b:cf:39:18:16:2e:df:bf:49:92:d7:76:d8:ed:d1:b6: 40:8a:5f:5c:6d:08:d9:51:56:6c:d9:94:d3:11:dd:bc:35:01: e4:81:5d:49:84:0c:b0:e3:14:f5:13:dd:f3:fe:68:6e:ea:ea: 31:3b:fb:fa:6a:8f:c9:56:8d:b6:0f:b4:e6:47:00:07:51:8b: 28:44:7c:5a:83:34:50:00:8a:81:4a:a1:bb:ba:3b:47:a3:42: c9:e9:44:2d:66:9a:fc:79:34:93:1e:cf:e1:6a:48:1a:99:78: f4:f9:d1:e0:5a:3d:f9:ba:79:fb:d4:bc:52:0d:21:9e:32:1d: 76:c6:ef:ec:fa:b1:02:66:8b:07:a4:5f:c6:2b:61:71:6a:7b: 16:c2:37:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97Lf2J5ZJQUXBssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZTY2Y2MzMzktYTMzYi00NDNiLWI1MjctMThjNGMxMjg0OTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdNWlkSmYRBwMhY/ckeshGu4TwQTidBSeEez 0LwTxIfeQ1F+SKG5MR/Hu4mq9vpzwPnNFsXyA/y4byPSAcBSdUMIVjeBsy6wTDA4 1KhH9sDKECtPgpGCwNRK478UcP6J51/G6pvOy6nGvYk0+ZjXH0Lf7KCCI2LkNiiX 1p87wcPXsJ90vyUq0n7WI+3Y8pyBbSZf/b9JXPsDASu2/lmyuqlq1mt/JidVqWRP +BmVNNRO64Ou/HBOReVe1JWBtqK8hRg9MhcLuEdcH2LkAhQDcpkXWB29hmZzOC73 UkDlajlXixO8FWjlOeffiVgSqDCOPbkG4ixqdF8dNaLPfEWLYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFu0To+lE8NSxPkD9T/jqQ7xRojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTUzYzNmNzItMGE3Mi0z NmQ2LWJmNzgtYzY3ZTk0YjgxZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII3rDSPdYbJivzNN6lRghvPsb3PKOg9xhAubXdyZ9X466lxlC8nRAVh EAtHWHG+wpycLLbzV0SqNYttyqLgfyZ2QjDoF/UFgrX+AJpvpm3aFOhbQBFJxSoy 925uaiFU6zfg1TCx8QVb7pV+ih1Wm885GBYu379Jktd22O3RtkCKX1xtCNlRVmzZ lNMR3bw1AeSBXUmEDLDjFPUT3fP+aG7q6jE7+/pqj8lWjbYPtOZHAAdRiyhEfFqD NFAAioFKobu6O0ejQsnpRC1mmvx5NJMez+FqSBqZePT50eBaPfm6efvUvFINIZ4y HXbG7+z6sQJmiwekX8YrYXFqexbCNyQ= -----END CERTIFICATE-----Generated at Fri Oct 17 10:46:26 2025 by rpki-client