$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e96f7c76-b74f-3f81-892f-a6f75f5b0dda.roa File: e96f7c76-b74f-3f81-892f-a6f75f5b0dda.roa (raw, json) Hash identifier: k3HZPjOFZpK+vPACL2ryxatiR4VJFu0Fl0UI2kwfxj0= Subject key identifier: B8:AA:51:28:8F:D8:D2:E0:2A:E7:B3:8F:8B:A3:1B:6A:A7:EA:B1:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7B2200444A5989F01258BD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e96f7c76-b74f-3f81-892f-a6f75f5b0dda.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.217.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:00:44:4a:59:89:f0:12:58:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=8ad8bca1-6780-4446-9ab1-43122e6b4965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e8:c3:81:fe:f7:7b:36:cf:6a:6a:ec:30:96: cf:aa:77:71:2c:97:89:0d:96:1f:e5:90:29:0b:85: 4c:81:dc:94:f0:c2:e9:11:73:60:8e:40:93:57:d4: 1c:21:bd:12:a4:fb:70:61:4c:b4:88:8a:9b:bf:77: 6e:71:85:06:b4:09:ca:2f:38:16:d9:cb:df:c0:f9: 42:1c:e9:2e:ad:10:e9:2d:68:8e:b1:0f:71:1d:33: ed:18:93:45:d9:6a:1b:f6:b5:01:79:d7:8c:43:b7: 22:bc:89:09:e3:d9:0a:cf:7b:3b:d9:13:7f:27:cc: 05:f8:de:c9:10:9b:f5:18:df:03:dd:13:0c:6e:1b: 4f:05:fc:f5:ee:05:69:58:8f:01:2c:ce:b7:cc:e6: 18:8e:e0:e0:58:7c:90:6a:8c:d4:0a:73:9e:54:ce: 80:2e:0e:32:6f:fa:d1:65:f2:2a:30:e0:23:69:5a: 7c:f0:46:f5:bf:e1:f2:19:56:b9:5d:ee:17:d2:c8: ae:11:74:f3:9a:c7:19:7b:48:d4:f5:26:45:69:65: 9f:ff:a3:e8:bc:47:60:e8:96:f0:7a:f0:1f:0c:02: 39:61:04:00:88:b7:da:38:ba:78:46:d9:7b:87:cf: 1e:e2:a0:0e:4d:df:6a:66:35:64:d9:6b:a1:53:c0: 4b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:51:28:8F:D8:D2:E0:2A:E7:B3:8F:8B:A3:1B:6A:A7:EA:B1:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e96f7c76-b74f-3f81-892f-a6f75f5b0dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2c:03:9a:0c:b8:23:dd:43:59:68:70:01:12:d1:a7:af:dc: 98:8b:98:69:d5:c9:db:5e:d8:51:a0:ec:cf:92:e6:14:84:41: 25:d9:74:66:cc:64:7b:fd:5d:ac:b5:64:ec:5a:98:46:61:f6: 8d:45:36:24:83:a9:3d:72:e9:0f:92:52:41:3c:02:98:63:4a: a5:60:ca:3a:2e:b7:37:af:b1:e2:2e:85:21:84:16:4b:ae:09: 7d:7b:ae:a0:6d:6e:c2:a8:29:1f:52:a3:76:bc:49:3f:6f:0b: 34:f6:07:ae:6f:c3:3a:63:b5:07:29:b5:f7:f3:25:ca:fc:3c: 9c:52:22:bb:0e:6f:ac:92:03:08:86:20:2a:31:6d:a2:9c:96: 3d:70:10:bb:be:0b:2d:3d:04:90:2a:c2:64:8c:9b:d6:86:6f: 0f:c7:32:16:03:4d:3e:a9:23:7a:82:b9:3e:8a:1d:20:cf:07: 27:83:80:00:40:ec:5d:2b:06:89:62:aa:f9:52:2f:46:2d:5b: b4:58:9a:21:d1:6e:64:ba:29:d6:1c:45:cc:9b:82:69:9b:37: 14:86:0a:45:f3:2c:07:38:2f:83:c6:4f:e8:6b:77:ac:b8:0c: 3a:f8:6f:0d:06:7f:d3:59:1a:85:94:31:eb:35:13:4f:bf:4c: 9c:02:df:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgBESlmJ8BJYvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk OGFkOGJjYTEtNjc4MC00NDQ2LTlhYjEtNDMxMjJlNmI0OTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OjDgf73ezbPamrsMJbPqndxLJeJDZYf5ZAp C4VMgdyU8MLpEXNgjkCTV9QcIb0SpPtwYUy0iIqbv3ducYUGtAnKLzgW2cvfwPlC HOkurRDpLWiOsQ9xHTPtGJNF2Wob9rUBedeMQ7civIkJ49kKz3s72RN/J8wF+N7J EJv1GN8D3RMMbhtPBfz17gVpWI8BLM63zOYYjuDgWHyQaozUCnOeVM6ALg4yb/rR ZfIqMOAjaVp88Eb1v+HyGVa5Xe4X0siuEXTzmscZe0jU9SZFaWWf/6PovEdg6Jbw evAfDAI5YQQAiLfaOLp4Rtl7h88e4qAOTd9qZjVk2WuhU8BLAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiqUSiP2NLgKuezj4ujG2qn6rEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTk2ZjdjNzYtYjc0Zi0z ZjgxLTg5MmYtYTZmNzVmNWIwZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMsA5oMuCPdQ1locAES0aev3JiLmGnVydte2FGg7M+S5hSEQSXZdGbM ZHv9Xay1ZOxamEZh9o1FNiSDqT1y6Q+SUkE8AphjSqVgyjoutzevseIuhSGEFkuu CX17rqBtbsKoKR9So3a8ST9vCzT2B65vwzpjtQcptffzJcr8PJxSIrsOb6ySAwiG ICoxbaKclj1wELu+Cy09BJAqwmSMm9aGbw/HMhYDTT6pI3qCuT6KHSDPByeDgABA 7F0rBoliqvlSL0YtW7RYmiHRbmS6KdYcRcybgmmbNxSGCkXzLAc4L4PGT+hrd6y4 DDr4bw0Gf9NZGoWUMes1E0+/TJwC308= -----END CERTIFICATE-----Generated at Fri Oct 17 12:43:51 2025 by rpki-client