$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea1304f5-4179-3ea1-a6d2-8aed7a86bbf9.roa File: ea1304f5-4179-3ea1-a6d2-8aed7a86bbf9.roa (raw, json) Hash identifier: gUsWI8MFtozNGUP4FwEFECUqgXr3cA8uF2khL6OVAsY= Subject key identifier: B8:1E:0C:B2:84:53:4F:3E:57:BB:15:34:68:48:4D:4F:25:2E:8D:0F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6FDA571DD8B37A029600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea1304f5-4179-3ea1-a6d2-8aed7a86bbf9.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6f:da:57:1d:d8:b3:7a:02:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8e2dde66-2fa4-4bb7-97fb-9e05c0a66177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:78:e3:00:61:8c:00:f1:e1:bd:bb:ba:02: 2e:64:d7:d2:44:77:a8:9d:54:2b:e4:23:a7:9d:72: 19:e5:f0:43:a5:c6:5d:0b:35:7a:46:c9:2a:fd:d6: 13:fb:a1:5b:bd:85:d2:3a:46:ac:8e:47:a6:0d:71: 7d:56:aa:7b:b7:ea:62:4a:b5:0c:51:b7:e3:33:d3: 31:28:b3:1f:ce:5b:28:79:7b:dc:c7:d3:b5:92:57: c8:1b:4b:b2:ff:fa:17:52:82:80:d2:29:66:ad:8e: 1b:5d:d9:37:96:8f:37:7a:fc:8a:af:b7:05:74:67: 31:6a:78:98:cf:5f:21:dd:47:4f:1b:bb:5c:c7:fd: 8a:8d:b8:6d:5d:b1:c1:41:99:9a:b0:13:b9:fa:bf: 52:59:78:15:2a:8a:ba:04:31:0f:1e:aa:44:86:94: 22:19:ea:b6:13:4b:ce:30:26:00:04:4b:25:4b:27: 77:d1:27:d6:f8:27:5d:fd:05:ec:91:a6:92:a6:f0: 2f:3c:fb:53:70:f4:f2:8f:c8:94:a6:85:e8:bd:fd: 52:c7:c1:f4:8b:fb:fc:3f:6b:5d:dc:a4:66:64:a8: 06:c0:d0:5f:cb:c3:44:f2:fe:54:90:8f:09:63:75: b4:73:d6:ec:6d:5a:6d:2b:a3:1e:5c:5d:5d:0d:ae: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1E:0C:B2:84:53:4F:3E:57:BB:15:34:68:48:4D:4F:25:2E:8D:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea1304f5-4179-3ea1-a6d2-8aed7a86bbf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c7:95:f1:22:31:ca:6b:f1:56:2c:f7:d3:2f:84:e7:b6:bc: de:0f:3f:80:32:4b:46:76:74:fb:a2:df:06:f0:80:2f:9e:1a: f0:c9:ea:b1:ea:e7:eb:c3:7a:82:39:e4:d4:4d:c0:03:1e:09: b9:df:ee:42:83:bd:cf:fa:b0:ac:58:ea:6e:6d:88:9c:5c:ed: 18:51:b2:a7:2c:07:20:1a:00:37:31:21:a8:2c:7b:3b:b0:1f: f8:4b:d5:f2:e2:8b:6c:c3:ed:86:00:ae:7e:ea:ec:d0:2c:14: e8:97:27:c6:69:db:7a:68:b7:32:cf:c9:8a:82:d6:02:0d:08: fc:8a:7b:f4:f3:bf:61:29:11:c4:98:c6:ab:35:e9:20:e9:40: ed:d5:a7:77:7f:72:c4:f8:3c:ae:37:dd:70:66:4a:12:6f:ff: 04:e8:6a:27:9f:ce:9a:e3:6c:2b:db:85:90:a6:b2:a2:a9:fb: 8c:0c:f1:fd:f5:5d:66:35:45:8d:c9:7c:d5:8a:ff:46:f3:5d: d4:53:6d:76:91:93:40:1a:d8:d7:9f:60:54:b7:af:ba:61:34: 0a:b0:5c:80:ab:f8:78:c6:9c:c3:30:c7:7b:a8:d0:87:d5:c8: 70:d1:8e:a8:9c:39:36:b7:da:58:eb:26:f0:b9:e7:bd:dc:c9: 02:e8:d4:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzW/aVx3Ys3oClgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGUyZGRlNjYtMmZhNC00YmI3LTk3ZmItOWUwNWMwYTY2MTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8544wBhjADx4b27ugIuZNfSRHeonVQr5COn nXIZ5fBDpcZdCzV6Rskq/dYT+6FbvYXSOkasjkemDXF9Vqp7t+piSrUMUbfjM9Mx KLMfzlsoeXvcx9O1klfIG0uy//oXUoKA0ilmrY4bXdk3lo83evyKr7cFdGcxaniY z18h3UdPG7tcx/2KjbhtXbHBQZmasBO5+r9SWXgVKoq6BDEPHqpEhpQiGeq2E0vO MCYABEslSyd30SfW+Cdd/QXskaaSpvAvPPtTcPTyj8iUpoXovf1Sx8H0i/v8P2td 3KRmZKgGwNBfy8NE8v5UkI8JY3W0c9bsbVptK6MeXF1dDa6yrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgeDLKEU08+V7sVNGhITU8lLo0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWExMzA0ZjUtNDE3OS0z ZWExLWE2ZDItOGFlZDdhODZiYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7HlfEiMcpr8VYs99MvhOe2vN4PP4AyS0Z2dPui3wbwgC+eGvDJ6rHq 5+vDeoI55NRNwAMeCbnf7kKDvc/6sKxY6m5tiJxc7RhRsqcsByAaADcxIagsezuw H/hL1fLii2zD7YYArn7q7NAsFOiXJ8Zp23potzLPyYqC1gINCPyKe/Tzv2EpEcSY xqs16SDpQO3Vp3d/csT4PK433XBmShJv/wToaiefzprjbCvbhZCmsqKp+4wM8f31 XWY1RY3JfNWK/0bzXdRTbXaRk0Aa2NefYFS3r7phNAqwXICr+HjGnMMwx3uo0IfV yHDRjqicOTa32ljrJvC5573cyQLo1Jk= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:39 2025 by rpki-client