$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/08a0624f-edb4-329f-bf8a-ea652593f0a7.roa File: 08a0624f-edb4-329f-bf8a-ea652593f0a7.roa (raw, json) Hash identifier: XsNXRmj5LE+xe7SZ5DVZ1u3LAT82H9vZqSWqK+qWcdg= Subject key identifier: 6D:C0:93:52:20:C1:16:D7:74:3C:EF:DC:AA:3B:7D:BD:9A:2F:88:AA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49738F2C17637ABECF179A20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/08a0624f-edb4-329f-bf8a-ea652593f0a7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:8f:2c:17:63:7a:be:cf:17:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=505fa22a-2378-42d3-bfff-5b77a5520e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:98:ef:f5:31:48:76:c0:3c:e3:ea:38:b1:9e: 87:97:ff:54:24:1c:7b:72:f8:43:b8:98:81:d1:52: 21:19:75:2e:21:ee:91:75:4b:71:a7:63:0d:e2:86: 56:30:36:6a:04:95:1e:7b:88:ba:50:4a:31:f7:96: 13:d3:61:7b:37:4f:11:f4:a6:c6:e7:9a:a3:6d:47: 53:12:d1:09:84:a2:45:2c:87:4d:42:73:a6:37:88: c9:6b:8a:53:e8:47:97:4c:4d:36:a2:63:a3:d7:ec: 93:c5:6b:de:56:ea:34:bd:37:b7:4b:63:ae:87:6a: 31:88:61:77:5d:3d:cc:f4:ca:aa:03:0b:48:9b:2e: 9f:c1:08:45:c6:36:f9:f1:3b:74:ee:98:58:20:3f: 7f:a1:24:0a:61:50:a8:4c:9a:58:d5:e1:26:43:31: ae:a6:4a:c8:bb:7e:ee:26:04:02:66:ac:6f:1b:57: a3:6f:0a:49:fe:34:88:d2:23:0e:44:89:4c:5a:fd: d5:df:0a:35:59:4d:1f:f6:b9:bd:6b:ad:07:ae:e3: 8f:a9:46:50:ca:0e:3b:65:c2:1d:6e:4d:64:0a:a8: cc:ba:01:c5:ad:5a:21:4a:0d:4d:64:4e:f4:0e:72: 75:15:84:ea:16:f4:06:ca:bd:0d:5a:84:91:8e:00: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C0:93:52:20:C1:16:D7:74:3C:EF:DC:AA:3B:7D:BD:9A:2F:88:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/08a0624f-edb4-329f-bf8a-ea652593f0a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c5:b4:bc:eb:78:52:b0:fd:8c:25:b0:70:fd:3c:e3:6f:4c: 12:c3:7f:fd:c4:11:02:ba:45:e7:24:aa:da:1c:ab:67:8a:81: e1:2e:03:ba:db:ef:24:ad:4a:42:41:a7:e8:dc:b8:5f:45:ab: b8:fe:75:32:32:5f:64:41:23:4c:e1:5c:af:0d:dd:1b:3a:8c: e3:77:f3:81:41:f1:4f:ef:0a:de:64:2b:77:b4:2f:5c:a8:5f: 48:d8:60:9a:8d:e2:a5:77:55:c0:25:59:f8:65:bc:ea:e6:34: 85:f5:5a:27:75:a9:96:5e:2a:bf:1a:4f:df:95:ca:34:6a:3b: 76:7e:8c:cc:9d:28:7a:fa:b0:0c:ea:03:0f:08:6f:40:8c:17: e2:90:54:cc:e5:6c:44:4e:13:3c:9c:33:dd:53:54:b4:3c:8e: b3:82:0b:d9:33:f6:32:ac:42:a2:7c:48:aa:67:f6:4c:45:31: 24:03:a2:02:80:44:6f:3f:a7:1c:6a:8e:90:40:ab:d5:9c:11: 4f:94:73:d9:e3:c2:eb:75:1b:01:7b:81:f5:09:49:60:5f:05: 0b:03:6f:39:0a:da:d7:cb:bc:b4:26:1d:ed:94:10:84:7a:69: 21:07:30:9b:dd:2c:83:0d:b1:e0:4e:a5:aa:b8:75:d7:b3:a2: 8c:75:8c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc48sF2N6vs8XmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTA1ZmEyMmEtMjM3OC00MmQzLWJmZmYtNWI3N2E1NTIwZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5jv9TFIdsA84+o4sZ6Hl/9UJBx7cvhDuJiB 0VIhGXUuIe6RdUtxp2MN4oZWMDZqBJUee4i6UEox95YT02F7N08R9KbG55qjbUdT EtEJhKJFLIdNQnOmN4jJa4pT6EeXTE02omOj1+yTxWveVuo0vTe3S2Ouh2oxiGF3 XT3M9MqqAwtImy6fwQhFxjb58Tt07phYID9/oSQKYVCoTJpY1eEmQzGupkrIu37u JgQCZqxvG1ejbwpJ/jSI0iMORIlMWv3V3wo1WU0f9rm9a60HruOPqUZQyg47ZcId bk1kCqjMugHFrVohSg1NZE70DnJ1FYTqFvQGyr0NWoSRjgByUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3Ak1IgwRbXdDzv3Ko7fb2aL4iqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDhhMDYyNGYtZWRiNC0z MjlmLWJmOGEtZWE2NTI1OTNmMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHFtLzreFKw/YwlsHD9PONvTBLDf/3EEQK6Reckqtocq2eKgeEuA7rb 7yStSkJBp+jcuF9Fq7j+dTIyX2RBI0zhXK8N3Rs6jON384FB8U/vCt5kK3e0L1yo X0jYYJqN4qV3VcAlWfhlvOrmNIX1Wid1qZZeKr8aT9+VyjRqO3Z+jMydKHr6sAzq Aw8Ib0CMF+KQVMzlbEROEzycM91TVLQ8jrOCC9kz9jKsQqJ8SKpn9kxFMSQDogKA RG8/pxxqjpBAq9WcEU+Uc9njwut1GwF7gfUJSWBfBQsDbzkK2tfLvLQmHe2UEIR6 aSEHMJvdLIMNseBOpaq4ddezoox1jDE= -----END CERTIFICATE-----Generated at Fri Sep 25 20:23:39 2026 by rpki-client