$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa File: 20b50217-08d6-3245-abc2-d3c9c7b445a1.roa (raw, json) Hash identifier: kuoEmcqfOxiZtZmw4xSJc3PLENX28El9/RBdzcfRxmk= Subject key identifier: 77:3D:26:2A:B6:E9:03:31:DC:58:44:21:06:1D:91:31:0C:D0:55:19 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CDC9DACEC8B407B15D410 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:dc:9d:ac:ec:8b:40:7b:15:d4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9010a729-823d-4cfb-b384-694aeb8ccd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:27:02:a3:4d:a7:10:fd:ea:78:4e:49:c5: 21:76:03:bf:3a:51:99:bd:b0:8b:be:79:37:8b:53: 53:e0:66:cd:3d:3f:85:0f:84:56:49:b5:a5:95:73: 9d:82:6b:4b:11:7b:bc:2d:3d:15:db:1d:ae:f8:89: 72:fc:37:eb:f9:ee:07:bf:9f:cc:07:4d:0d:50:8a: 58:af:a2:4f:1e:bf:98:7b:d6:48:8a:eb:a8:d3:e9: 9f:dc:1f:6b:15:ad:6a:8f:2f:c1:c1:82:72:e1:16: 38:9e:c6:35:8b:34:6b:88:cf:d7:a4:6b:ff:ec:14: a0:e5:1c:87:ed:c3:a6:b1:91:93:ac:0b:fc:8b:3d: 91:e5:86:a2:61:5b:6c:fb:49:f8:5f:24:79:14:8c: 24:fa:df:0a:95:c4:d3:0b:9a:04:02:b4:4a:fc:8c: ee:a3:41:31:f6:14:f9:21:13:9a:17:66:de:42:03: 45:e3:6e:82:b2:fb:eb:48:24:8d:9c:db:8e:59:d1: 18:17:73:3b:7d:4b:a0:9f:5c:9c:15:52:65:79:f3: 87:46:0a:05:e9:2d:0c:b4:11:6f:ce:03:9e:9a:e2: cc:58:d9:8e:82:a9:d5:ef:eb:ca:ee:49:4f:ac:d3: 60:08:aa:e4:ed:e1:24:18:2f:1d:ad:b7:81:6d:5d: ff:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3D:26:2A:B6:E9:03:31:DC:58:44:21:06:1D:91:31:0C:D0:55:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:46:21:b7:83:99:05:8f:c2:50:8e:17:7d:da:7a:0c:fe:2a: 93:ca:28:a6:5a:a3:ae:06:bd:78:13:6a:8e:75:9c:71:6a:b5: 4c:e4:06:8e:7f:d2:14:dd:ba:3b:a2:25:d0:fe:6a:35:dd:3c: 37:d7:9b:37:91:41:aa:8e:b8:ed:c8:76:99:23:ab:e4:f3:fe: 4d:c0:ec:27:b6:0b:05:80:45:12:79:38:72:77:d8:c0:1b:00: d2:1d:c7:28:e7:eb:83:a9:66:05:6b:4f:31:38:6b:92:9e:94: 95:cb:c1:35:4a:3c:8b:86:ab:29:fe:5a:c3:c6:1a:79:68:02: 28:49:a3:60:fe:42:fb:60:6f:40:f5:ce:b7:ae:61:d0:d8:04: 3a:33:9c:50:11:52:b0:72:9f:ab:30:de:97:59:f1:38:77:5a: eb:87:bb:f8:d4:78:36:e5:ea:22:cb:7c:f4:b6:50:41:bb:05: ed:e9:59:87:f8:01:07:87:2f:71:23:96:64:39:4f:55:77:71: 92:d9:6e:fb:35:cf:c0:ca:38:08:79:5a:ef:a4:06:48:1a:2c: 01:ae:b2:9c:b8:32:f1:58:08:79:8c:7d:10:4b:77:0c:09:6f: 92:f8:e0:17:ae:dd:92:d7:ae:ca:de:5c:66:48:2b:d2:38:bb: 6b:f0:d9:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfNydrOyLQHsV1BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTAxMGE3MjktODIzZC00Y2ZiLWIzODQtNjk0YWViOGNjZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMwnAqNNpxD96nhOScUhdgO/OlGZvbCLvnk3 i1NT4GbNPT+FD4RWSbWllXOdgmtLEXu8LT0V2x2u+Ily/Dfr+e4Hv5/MB00NUIpY r6JPHr+Ye9ZIiuuo0+mf3B9rFa1qjy/BwYJy4RY4nsY1izRriM/XpGv/7BSg5RyH 7cOmsZGTrAv8iz2R5YaiYVts+0n4XyR5FIwk+t8KlcTTC5oEArRK/Izuo0Ex9hT5 IROaF2beQgNF426CsvvrSCSNnNuOWdEYF3M7fUugn1ycFVJlefOHRgoF6S0MtBFv zgOemuLMWNmOgqnV7+vK7klPrNNgCKrk7eEkGC8drbeBbV3/gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc9Jiq26QMx3FhEIQYdkTEM0FUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjBiNTAyMTctMDhkNi0z MjQ1LWFiYzItZDNjOWM3YjQ0NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBGIbeDmQWPwlCOF33aegz+KpPKKKZao64GvXgTao51nHFqtUzkBo5/ 0hTdujuiJdD+ajXdPDfXmzeRQaqOuO3Idpkjq+Tz/k3A7Ce2CwWARRJ5OHJ32MAb ANIdxyjn64OpZgVrTzE4a5KelJXLwTVKPIuGqyn+WsPGGnloAihJo2D+Qvtgb0D1 zreuYdDYBDoznFARUrByn6sw3pdZ8Th3WuuHu/jUeDbl6iLLfPS2UEG7Be3pWYf4 AQeHL3EjlmQ5T1V3cZLZbvs1z8DKOAh5Wu+kBkgaLAGuspy4MvFYCHmMfRBLdwwJ b5L44Beu3ZLXrsreXGZIK9I4u2vw2aU= -----END CERTIFICATE-----Generated at Fri Sep 25 19:04:54 2026 by rpki-client