$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa File: eccc049d-f39e-3a01-8af3-e167539adf3d.roa (raw, json) Hash identifier: ZP1/C+9QhLELSKun4EpcEas4WePp7UcYaj2p2yde03k= Subject key identifier: E7:1C:60:27:B2:5B:A5:A7:99:15:B8:55:31:66:ED:D2:90:72:87:A8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB4C652C1D00E4C0DCA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.217.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b4:c6:52:c1:d0:0e:4c:0d:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=2bae1e07-0c93-48a0-afef-6d6ae66c1d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:a5:c7:5f:d2:94:94:ce:27:6a:8c:6e:1f: 96:ad:99:7f:51:ab:82:15:fa:85:c0:8c:7a:c0:50: 54:f2:7f:cd:4f:37:78:36:53:fa:c3:03:6c:da:75: 82:84:db:d0:f6:cd:35:97:09:d9:a9:2b:7c:f9:a5: af:cc:b2:43:8d:b8:a5:f4:07:89:46:3b:62:b6:09: 84:7b:21:5c:aa:5f:62:d2:12:89:ca:ce:cc:94:8f: aa:b6:0c:46:76:f5:da:af:df:bf:8d:6f:12:9c:21: c6:ea:3c:d0:ed:ad:12:55:68:92:d7:7c:65:3e:96: 2c:63:02:49:94:c1:3b:75:fe:b2:7c:bf:eb:39:a6: 87:bd:46:93:12:d4:30:bd:e0:6b:0f:c3:e7:a0:07: 70:2a:f5:45:50:dd:3b:af:45:c5:52:75:69:39:c4: f1:3c:0f:a6:2b:34:2b:cc:1d:11:be:91:21:67:43: f8:1e:29:18:b0:d9:22:b9:a1:3e:b9:2b:19:e9:8f: e1:3d:1c:1f:d7:c9:4c:7f:19:1b:da:ae:c6:1a:9d: e6:83:01:ea:ec:fe:cb:e4:c3:d4:e9:c3:2d:ae:74: cc:fd:27:24:fb:a5:35:83:5f:59:c8:cf:08:4d:4f: db:fc:f9:9e:49:88:55:95:34:36:7d:c4:c2:85:03: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1C:60:27:B2:5B:A5:A7:99:15:B8:55:31:66:ED:D2:90:72:87:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ab:c8:16:e6:07:7b:b5:d2:cb:49:62:f7:e5:83:e9:cd:5d: 98:88:0c:56:52:b4:8e:cc:50:ae:2a:9c:99:9e:f6:e4:49:be: e9:fd:dc:66:f8:51:df:79:66:c1:b3:6f:24:f7:91:b7:57:7f: e8:02:3b:fd:a8:85:e8:77:89:4c:ed:e8:f9:26:94:44:84:b9: 40:07:14:4e:3c:e4:0f:7a:4a:5c:57:ca:de:db:2a:6e:60:b0: 57:ee:59:c5:17:9a:44:f2:75:a3:ec:59:34:69:9f:e6:21:05: 63:36:ea:dc:91:5f:51:20:01:7f:cf:84:b0:be:02:94:26:85: 7f:9d:0e:52:28:54:b1:ce:ea:0e:7d:d4:dd:4e:27:32:97:f2: d2:ec:f4:18:41:83:b7:01:10:c8:ab:16:77:a2:f1:25:de:ec: 66:fe:cc:cd:b4:e5:ad:b8:39:d9:29:56:d0:21:23:d5:9c:f5: 4e:1c:6b:e9:fc:54:3e:a2:97:8f:4f:c4:61:08:64:03:e9:59: 64:79:69:eb:0c:f6:d2:53:31:4b:c2:d8:9d:f7:97:66:53:9e: 74:fc:8e:8d:76:d4:48:18:d5:b8:63:12:7b:9d:29:c8:1b:e7: a2:6b:5a:85:7c:73:a1:69:22:95:4c:9f:79:cf:f9:51:23:d6: 27:eb:3b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LTGUsHQDkwNygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MmJhZTFlMDctMGM5My00OGEwLWFmZWYtNmQ2YWU2NmMxZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb2lx1/SlJTOJ2qMbh+WrZl/UauCFfqFwIx6 wFBU8n/NTzd4NlP6wwNs2nWChNvQ9s01lwnZqSt8+aWvzLJDjbil9AeJRjtitgmE eyFcql9i0hKJys7MlI+qtgxGdvXar9+/jW8SnCHG6jzQ7a0SVWiS13xlPpYsYwJJ lME7df6yfL/rOaaHvUaTEtQwveBrD8PnoAdwKvVFUN07r0XFUnVpOcTxPA+mKzQr zB0RvpEhZ0P4HikYsNkiuaE+uSsZ6Y/hPRwf18lMfxkb2q7GGp3mgwHq7P7L5MPU 6cMtrnTM/Sck+6U1g19ZyM8ITU/b/PmeSYhVlTQ2fcTChQM2gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOccYCeyW6WnmRW4VTFm7dKQcoeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWNjYzA0OWQtZjM5ZS0z YTAxLThhZjMtZTE2NzUzOWFkZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiryBbmB3u10stJYvflg+nNXZiIDFZStI7MUK4qnJme9uRJvun93Gb4 Ud95ZsGzbyT3kbdXf+gCO/2oheh3iUzt6PkmlESEuUAHFE485A96SlxXyt7bKm5g sFfuWcUXmkTydaPsWTRpn+YhBWM26tyRX1EgAX/PhLC+ApQmhX+dDlIoVLHO6g59 1N1OJzKX8tLs9BhBg7cBEMirFnei8SXe7Gb+zM205a24OdkpVtAhI9Wc9U4ca+n8 VD6il49PxGEIZAPpWWR5aesM9tJTMUvC2J33l2ZTnnT8jo121EgY1bhjEnudKcgb 56JrWoV8c6FpIpVMn3nP+VEj1ifrO+w= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:11 2025 by rpki-client