$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa File: ef6dc64b-a739-3069-8e89-e656f33c13e6.roa (raw, json) Hash identifier: bbTuGmppdLCWj6QKq2S+EXuTp49Ry0j6p6PZeRvH1nk= Subject key identifier: 54:3A:5F:75:BB:3B:FB:CA:CA:F0:6B:7F:04:95:1A:EE:C1:A3:CA:4C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD68F76BD72B2527C21E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:68:f7:6b:d7:2b:25:27:c2:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=9d41f837-c54f-43d5-9e1b-31dcd0c79d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9b:49:24:4d:8b:db:6c:33:11:16:bf:dd:80: 37:11:bd:c7:df:d5:71:2f:37:23:82:6a:ee:ca:2f: 1b:0d:5c:20:91:8a:bb:f1:56:a6:2f:1f:34:9d:5b: 44:6f:9a:b7:94:e7:78:40:4c:1b:1e:f5:c0:b8:4e: ee:4c:35:12:22:e6:78:7a:bc:d6:eb:19:82:fb:26: e9:bd:0d:b9:8e:ad:af:04:0f:5b:d5:3b:ed:40:b5: c2:60:16:6a:fe:96:31:e7:8f:1d:59:dc:39:9b:67: 0e:cb:42:49:f5:66:3e:17:06:78:69:58:dd:c2:b7: 7b:a9:5e:63:82:99:07:14:10:2d:67:ee:32:d6:ef: c1:80:f7:09:98:55:01:c3:ca:a3:31:aa:23:bb:6a: 07:40:9b:6e:e8:25:69:05:0c:95:e3:96:db:0a:16: ce:82:f0:5a:04:4e:5b:6e:05:5b:6a:68:30:94:27: 85:85:67:4f:85:01:d8:46:e7:bd:b1:d6:b6:6a:c2: 69:91:d0:c0:a9:46:89:f0:4b:b0:58:71:fa:f5:a5: 54:01:bc:f5:3f:f5:d4:37:57:e3:5b:8a:ea:99:78: 56:a7:3d:f8:3c:61:ec:8c:51:82:9d:9b:d5:aa:24: 1d:02:d5:40:30:0d:bc:39:9b:16:70:9a:dd:bb:fd: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3A:5F:75:BB:3B:FB:CA:CA:F0:6B:7F:04:95:1A:EE:C1:A3:CA:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:01:26:8a:d8:c1:a1:1b:60:70:6f:d4:34:a3:9c:89:5b:a3: c7:2a:8f:5e:32:79:d4:5a:4c:9d:89:28:f4:3f:b6:51:7e:7c: a5:83:50:54:15:c6:de:21:05:3b:e1:2c:e5:3e:71:ca:15:2e: 4c:4f:35:f8:87:c3:b9:60:5a:ea:02:d9:4d:59:5d:62:9c:d8: 50:e6:cb:61:b1:9d:80:b4:24:d4:d9:d0:71:a8:5f:b5:74:26: 5f:ce:d7:02:cc:da:38:e9:ef:35:2b:c6:9b:38:71:e7:d3:1c: ae:b8:a3:0a:1c:35:63:aa:82:74:cc:6f:d8:79:56:25:43:dd: 17:c5:c6:f7:f8:18:0a:76:c6:07:1a:58:e3:5a:35:e0:58:2b: eb:c8:36:2b:e3:9d:8c:95:52:5d:af:cc:4a:6b:a5:df:82:af: d7:24:bd:5b:86:af:9e:3e:c0:ae:8d:bd:73:a7:29:d5:af:a4: cf:b3:50:8d:a3:61:85:93:8b:4f:4a:9b:4c:79:78:45:71:f6: bd:31:cd:96:2b:d5:72:64:8a:5a:9e:1c:1d:a0:ce:ec:2f:0d: 5a:cf:17:e7:a1:df:98:5f:53:52:43:9b:07:e0:1d:0e:75:83: a3:34:d2:af:e0:be:d5:fc:b6:42:8f:04:3c:11:5a:be:ac:15: f3:3c:7d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWj3a9crJSfCHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OWQ0MWY4MzctYzU0Zi00M2Q1LTllMWItMzFkY2QwYzc5ZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiptJJE2L22wzERa/3YA3Eb3H39VxLzcjgmru yi8bDVwgkYq78VamLx80nVtEb5q3lOd4QEwbHvXAuE7uTDUSIuZ4erzW6xmC+ybp vQ25jq2vBA9b1TvtQLXCYBZq/pYx548dWdw5m2cOy0JJ9WY+FwZ4aVjdwrd7qV5j gpkHFBAtZ+4y1u/BgPcJmFUBw8qjMaoju2oHQJtu6CVpBQyV45bbChbOgvBaBE5b bgVbamgwlCeFhWdPhQHYRue9sda2asJpkdDAqUaJ8EuwWHH69aVUAbz1P/XUN1fj W4rqmXhWpz34PGHsjFGCnZvVqiQdAtVAMA28OZsWcJrdu/17lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ6X3W7O/vKyvBrfwSVGu7Bo8pMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWY2ZGM2NGItYTczOS0z MDY5LThlODktZTY1NmYzM2MxM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUBJorYwaEbYHBv1DSjnIlbo8cqj14yedRaTJ2JKPQ/tlF+fKWDUFQV xt4hBTvhLOU+ccoVLkxPNfiHw7lgWuoC2U1ZXWKc2FDmy2GxnYC0JNTZ0HGoX7V0 Jl/O1wLM2jjp7zUrxps4cefTHK64owocNWOqgnTMb9h5ViVD3RfFxvf4GAp2xgca WONaNeBYK+vINivjnYyVUl2vzEprpd+Cr9ckvVuGr54+wK6NvXOnKdWvpM+zUI2j YYWTi09Km0x5eEVx9r0xzZYr1XJkilqeHB2gzuwvDVrPF+eh35hfU1JDmwfgHQ51 g6M00q/gvtX8tkKPBDwRWr6sFfM8fSc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:25 2025 by rpki-client