$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa File: 17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa (raw, json) Hash identifier: 7MKM/iahzp8OLjvBByTO6qOzyJdZ1TyEa3Ve7x6xjc8= Subject key identifier: 53:BC:02:66:08:7E:B6:9C:00:65:D3:88:D5:FE:FA:B5:52:E7:E9:DE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F58CD5D06899AE0C5B87B5DA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 15169 IP address blocks: 172.217.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:5d:06:89:9a:e0:c5:b8:7b:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=51d4217c-3c94-4d5e-a629-5cd330f6a6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:49:0f:e5:79:db:40:50:ff:ef:57:af:46:f1: 6b:45:cb:72:fa:94:e7:72:04:03:e8:ae:2d:f7:8a: d8:f7:0e:69:2f:68:37:50:bc:64:2d:b6:b9:7c:ea: 78:37:2c:83:ad:d1:18:b1:84:93:a4:89:48:e0:29: 5b:51:92:9e:46:bd:3d:ab:50:93:24:dd:34:2e:2e: df:9d:8a:0e:e2:06:87:e5:88:77:d1:a8:97:56:6c: 34:3c:34:40:90:fa:f7:7f:05:b7:fa:0f:92:07:6b: 10:97:33:8f:50:54:76:ec:f3:6b:17:e5:29:28:d1: 93:41:10:ff:cb:75:1f:4f:67:08:89:ad:86:9e:ec: db:f7:71:4f:51:61:64:4f:74:98:37:53:a2:21:62: fd:7b:1f:94:9e:d6:58:1e:e3:23:9b:ad:c4:c4:1a: 74:af:88:6e:cc:c5:aa:eb:55:be:d6:b7:30:33:07: cc:b1:99:10:6a:17:a0:6a:4c:63:1e:8a:22:4c:1a: 55:cb:30:93:2c:38:d3:69:7b:19:74:ad:1d:d6:87: c1:fd:ba:5c:e5:0b:1b:98:06:b8:2a:71:43:62:69: 77:f1:bc:29:ff:b4:68:5e:4d:97:c0:59:d2:ac:5c: 02:12:9b:46:17:89:8f:ce:97:3c:29:62:c4:e8:bc: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BC:02:66:08:7E:B6:9C:00:65:D3:88:D5:FE:FA:B5:52:E7:E9:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e9:ab:b5:67:d9:1e:05:c2:23:5f:22:87:6f:24:19:1a:4d: 48:3b:16:20:88:56:63:93:b0:0f:0b:e6:c7:91:6a:c2:20:9d: 97:04:38:18:6f:4b:38:1c:32:71:8b:e2:e8:ad:59:5f:1c:15: 91:32:5d:97:69:65:62:ad:d5:4c:09:a7:da:70:8b:2e:ac:dc: cb:76:bd:62:2e:48:74:d2:cc:05:c8:52:26:0d:64:20:c4:07: 04:e6:86:49:f4:b2:ff:9b:30:c2:1d:fa:b0:3e:34:4a:dd:24: 4b:ff:7b:7f:76:c0:23:23:a6:30:63:10:b7:19:82:3e:25:e4: 46:dd:c4:bb:ce:35:79:5e:93:ea:bf:32:60:b9:99:98:9b:5c: 9b:36:14:f6:74:f6:31:92:a6:6a:b2:e6:7a:5a:77:e6:bc:41: b4:0e:0f:83:49:e1:85:7d:76:47:41:36:4a:19:f2:cf:4c:2b: 25:d1:3f:ae:dd:4e:2b:ed:fe:c6:b3:a3:91:1f:e0:50:9d:7c: d4:af:e8:f0:45:9d:da:d8:59:be:a3:a8:2b:e9:e1:3c:8d:c1: 42:36:9b:2d:e0:50:83:18:30:75:ab:7f:ad:1f:cc:bf:1a:be: 9e:d2:08:a6:94:c0:85:31:48:f0:33:02:8e:d3:0c:b7:c6:c1: 55:3e:94:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzV0GiZrgxbh7XaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk NTFkNDIxN2MtM2M5NC00ZDVlLWE2MjktNWNkMzMwZjZhNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EkP5XnbQFD/71evRvFrRcty+pTncgQD6K4t 94rY9w5pL2g3ULxkLba5fOp4NyyDrdEYsYSTpIlI4ClbUZKeRr09q1CTJN00Li7f nYoO4gaH5Yh30aiXVmw0PDRAkPr3fwW3+g+SB2sQlzOPUFR27PNrF+UpKNGTQRD/ y3UfT2cIia2Gnuzb93FPUWFkT3SYN1OiIWL9ex+UntZYHuMjm63ExBp0r4huzMWq 61W+1rcwMwfMsZkQahegakxjHooiTBpVyzCTLDjTaXsZdK0d1ofB/bpc5QsbmAa4 KnFDYml38bwp/7RoXk2XwFnSrFwCEptGF4mPzpc8KWLE6Lz6gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO8AmYIfracAGXTiNX++rVS5+neMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTdjZDA3MTEtM2JkNC0z ZTA3LThlNmEtYTVmMDRlYjUwZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDpq7Vn2R4FwiNfIodvJBkaTUg7FiCIVmOTsA8L5seRasIgnZcEOBhv SzgcMnGL4uitWV8cFZEyXZdpZWKt1UwJp9pwiy6s3Mt2vWIuSHTSzAXIUiYNZCDE BwTmhkn0sv+bMMId+rA+NErdJEv/e392wCMjpjBjELcZgj4l5EbdxLvONXlek+q/ MmC5mZibXJs2FPZ09jGSpmqy5npad+a8QbQOD4NJ4YV9dkdBNkoZ8s9MKyXRP67d Tivt/sazo5Ef4FCdfNSv6PBFndrYWb6jqCvp4TyNwUI2my3gUIMYMHWrf60fzL8a vp7SCKaUwIUxSPAzAo7TDLfGwVU+lK0= -----END CERTIFICATE-----Generated at Tue Nov 10 22:53:42 2026 by rpki-client