$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa File: 29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa (raw, json) Hash identifier: j9DvmR2FM5TRauucJpN8xJsyJ4G9y8zVppaSJGGTz+k= Subject key identifier: 68:E4:1C:E5:29:10:69:61:E1:85:0F:B2:80:ED:ED:19:47:5D:77:FF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49850AF87583088FEF23FE20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:0a:f8:75:83:08:8f:ef:23:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=80281d0b-8cc2-43eb-9f12-8a5d22ae72d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:39:a3:99:52:7e:75:5b:01:da:8b:77:db: a6:25:12:d9:c3:72:7b:21:32:b2:59:41:77:41:24: 4b:03:b5:1c:87:f5:01:a4:75:48:7c:76:70:5b:4e: 74:96:b1:77:8d:f0:c8:a6:2e:58:6f:a7:02:c6:33: a6:88:13:00:33:98:6f:d0:22:ef:62:57:05:c4:34: ca:05:ce:58:98:e1:61:d4:95:e0:47:3c:58:5f:43: aa:28:b7:b1:7b:70:a7:99:5a:cf:22:46:80:e4:36: 82:36:aa:a6:fe:5c:81:52:f4:5b:e3:aa:30:3e:79: 9d:dd:7a:34:ee:1d:88:67:05:2f:35:9e:5f:c6:6e: d8:85:ad:68:a9:ba:8a:ca:02:ae:3d:47:bb:f5:1c: 7b:4c:cf:39:c3:90:ea:91:f8:1d:59:79:3a:53:4b: 66:4f:3d:8a:92:e1:b5:7f:6f:d1:0e:0d:84:5f:72: ca:07:ac:4d:03:77:a3:71:2b:39:55:2b:06:42:a7: 0e:d1:ef:f2:2d:e0:a6:1f:92:1e:67:52:e1:64:63: 6c:1a:98:9c:d8:75:de:83:a0:53:90:9f:5e:0f:6d: af:94:eb:e3:f7:4b:e8:22:6c:d6:04:a7:4b:38:ed: 70:f8:3b:bc:b8:c1:c1:42:08:d7:6a:07:dd:68:f2: 29:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E4:1C:E5:29:10:69:61:E1:85:0F:B2:80:ED:ED:19:47:5D:77:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:34:aa:e6:7a:50:da:5a:f1:f4:57:aa:cc:24:a7:e2:1d:cf: 5d:58:ce:f4:64:0f:47:ed:a6:71:d9:50:8d:88:9a:2c:5d:55: 38:4e:04:5d:89:8a:46:cb:da:bd:c2:53:93:ff:98:6b:20:0a: c8:c7:4c:16:82:ec:e3:39:28:66:72:ab:03:19:d6:d3:23:f1: 9d:c7:8d:b7:dd:4f:8b:11:be:3e:3b:55:d5:2f:fa:7f:65:22: 96:2e:35:09:b1:53:90:c8:db:20:d3:44:d9:08:f3:fe:90:d2: f5:94:27:23:ae:41:60:ce:26:d0:08:a2:e9:b4:a9:07:ab:89: 3e:01:cd:b1:29:4b:5e:1c:24:03:8f:29:7b:d3:8f:26:ff:cc: 35:fb:5f:a6:bb:60:f3:85:79:a1:4e:18:5b:cd:42:34:93:30: 15:47:85:d6:33:1f:14:8d:68:26:d1:5c:e6:6b:f5:ab:cc:f8: cd:f7:57:d3:65:c1:14:2d:48:a4:98:03:7b:10:3b:8a:76:95: a8:62:b0:e6:12:c1:a6:7e:3d:ab:a8:ae:b4:30:5a:9a:3c:0a: c6:4b:bd:a9:5a:c4:67:37:bb:de:78:0b:bf:25:4f:6f:a2:40: ce:e0:94:16:c1:7f:2e:48:ee:8e:43:41:78:d6:87:b8:32:9e: 84:51:3b:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQr4dYMIj+8j/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODAyODFkMGItOGNjMi00M2ViLTlmMTItOGE1ZDIyYWU3MmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhns5o5lSfnVbAdqLd9umJRLZw3J7ITKyWUF3 QSRLA7Uch/UBpHVIfHZwW050lrF3jfDIpi5Yb6cCxjOmiBMAM5hv0CLvYlcFxDTK Bc5YmOFh1JXgRzxYX0OqKLexe3CnmVrPIkaA5DaCNqqm/lyBUvRb46owPnmd3Xo0 7h2IZwUvNZ5fxm7Yha1oqbqKygKuPUe79Rx7TM85w5DqkfgdWXk6U0tmTz2KkuG1 f2/RDg2EX3LKB6xNA3ejcSs5VSsGQqcO0e/yLeCmH5IeZ1LhZGNsGpic2HXeg6BT kJ9eD22vlOvj90voImzWBKdLOO1w+Du8uMHBQgjXagfdaPIp9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjkHOUpEGlh4YUPsoDt7RlHXXf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjliZTU3NTQtNjNjNS0z YzFlLTk3ZmYtN2YyZmU3OGIwMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo0quZ6UNpa8fRXqswkp+Idz11YzvRkD0ftpnHZUI2ImixdVThOBF2J ikbL2r3CU5P/mGsgCsjHTBaC7OM5KGZyqwMZ1tMj8Z3HjbfdT4sRvj47VdUv+n9l IpYuNQmxU5DI2yDTRNkI8/6Q0vWUJyOuQWDOJtAIoum0qQeriT4BzbEpS14cJAOP KXvTjyb/zDX7X6a7YPOFeaFOGFvNQjSTMBVHhdYzHxSNaCbRXOZr9avM+M33V9Nl wRQtSKSYA3sQO4p2lahisOYSwaZ+PauorrQwWpo8CsZLvalaxGc3u954C78lT2+i QM7glBbBfy5I7o5DQXjWh7gynoRROwU= -----END CERTIFICATE-----Generated at Sat Sep 26 07:04:34 2026 by rpki-client