$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa File: 0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa (raw, json) Hash identifier: PF0Z8Sjytyn9vuXjO72chBj8r2ylHmZfNuoh1DiSs4g= Subject key identifier: D5:A7:85:4E:BF:58:CE:0C:E2:51:C5:3F:2B:92:54:11:6C:4F:AB:C0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D069DB9441D6A57B7DCC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:06:9d:b9:44:1d:6a:57:b7:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=18d4f5f5-37dc-4a3c-a7a9-628c409198ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:43:36:1a:2f:cb:89:d9:35:ec:95:25:b1:bb: ad:9f:84:ff:68:dd:82:aa:29:ef:0f:4c:91:4a:6f: 41:06:6d:bf:90:76:c9:10:cd:0f:c0:dc:f5:25:b2: 1c:2b:ac:ef:b4:ac:65:d1:ca:fe:4b:09:f0:c4:14: 6e:96:bb:9b:93:29:b6:7d:33:d4:26:f1:b0:5f:2c: 20:ee:21:83:c7:1a:fb:71:f9:f4:c7:d6:79:39:64: 93:70:2d:f9:80:69:00:82:83:d7:40:b5:bc:0e:78: f8:0b:73:7f:51:e9:d8:1d:25:16:4a:fd:18:dc:43: 2c:4f:a0:e3:57:77:9d:75:34:a6:b9:73:3f:88:18: 8c:d0:1e:31:4e:2e:8e:f6:3f:f5:64:53:59:ed:7c: a6:7e:50:a2:31:88:90:20:1d:3d:9d:31:2f:dd:fb: aa:d7:08:41:34:4a:1e:6c:2e:07:3b:cf:b7:a4:5c: ec:4a:71:c8:42:a9:d2:d6:72:b3:26:04:ea:79:b6: 84:c2:c4:0e:97:64:e5:31:e1:5c:2a:c6:3c:2a:0d: 81:48:27:f0:b4:c1:62:b3:71:9b:bf:ff:ea:82:a8: 37:e3:c0:45:15:fa:10:80:3d:6e:3d:78:45:d3:e5: 97:eb:54:25:e9:42:41:4a:ea:78:3c:8a:20:d7:b8: b4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A7:85:4E:BF:58:CE:0C:E2:51:C5:3F:2B:92:54:11:6C:4F:AB:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:16:86:99:dd:a3:7a:e2:52:0d:20:9a:df:d1:54:78:b7:00: a4:56:d5:b0:72:28:af:39:ff:16:c6:da:6d:91:2b:81:2c:03: f0:78:2f:72:32:9c:3e:de:12:84:28:d3:15:3b:97:5f:3b:18: 96:b1:30:68:e8:9e:af:dd:32:3e:7d:cd:79:76:27:5f:0c:45: cd:43:4a:57:2e:e5:a7:82:58:34:bd:a9:16:75:4d:50:86:e5: cc:2a:08:0e:b0:9c:98:6e:c6:a7:5e:54:5b:e5:1f:9d:ee:a9: 0f:e4:68:2f:26:99:37:f4:ed:02:7d:d8:7f:9c:19:94:d9:b4: 53:cb:4d:89:c2:fe:c9:e2:db:f3:20:ed:b6:bf:68:59:73:9c: e7:a5:70:fd:f3:ee:d7:87:29:b7:e6:00:ea:65:61:1f:ef:ac: 73:b4:27:72:6f:47:02:99:70:76:19:91:f5:d9:23:a0:bb:8c: eb:23:57:a3:b4:71:79:4d:76:2f:c5:52:b5:b2:17:57:24:0d: cf:b1:8e:a3:db:6a:f7:c0:f0:e0:bc:29:ee:a2:7e:2a:a5:8a: d0:ba:bf:87:5d:69:c8:89:0a:6d:1d:27:4a:9e:fb:46:b1:31: bb:65:40:32:26:c9:97:ac:2d:22:7c:d3:b1:b2:27:7b:d8:27: 44:d4:43:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQaduUQdale33MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MThkNGY1ZjUtMzdkYy00YTNjLWE3YTktNjI4YzQwOTE5OGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUM2Gi/Lidk17JUlsbutn4T/aN2CqinvD0yR Sm9BBm2/kHbJEM0PwNz1JbIcK6zvtKxl0cr+SwnwxBRulrubkym2fTPUJvGwXywg 7iGDxxr7cfn0x9Z5OWSTcC35gGkAgoPXQLW8Dnj4C3N/UenYHSUWSv0Y3EMsT6Dj V3eddTSmuXM/iBiM0B4xTi6O9j/1ZFNZ7XymflCiMYiQIB09nTEv3fuq1whBNEoe bC4HO8+3pFzsSnHIQqnS1nKzJgTqebaEwsQOl2TlMeFcKsY8Kg2BSCfwtMFis3Gb v//qgqg348BFFfoQgD1uPXhF0+WX61Ql6UJBSup4PIog17i0AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWnhU6/WM4M4lHFPyuSVBFsT6vAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGI0YTMxYjUtM2QyZi0z ZmY4LWE3YjgtZGI4OTU5NzJiZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0Whpndo3riUg0gmt/RVHi3AKRW1bByKK85/xbG2m2RK4EsA/B4L3Iy nD7eEoQo0xU7l187GJaxMGjonq/dMj59zXl2J18MRc1DSlcu5aeCWDS9qRZ1TVCG 5cwqCA6wnJhuxqdeVFvlH53uqQ/kaC8mmTf07QJ92H+cGZTZtFPLTYnC/sni2/Mg 7ba/aFlznOelcP3z7teHKbfmAOplYR/vrHO0J3JvRwKZcHYZkfXZI6C7jOsjV6O0 cXlNdi/FUrWyF1ckDc+xjqPbavfA8OC8Ke6ifiqlitC6v4ddaciJCm0dJ0qe+0ax MbtlQDImyZesLSJ807GyJ3vYJ0TUQ0M= -----END CERTIFICATE-----Generated at Fri Sep 25 19:03:04 2026 by rpki-client