$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa File: 3abee81f-b508-3c4e-9dc5-859969e3d79e.roa (raw, json) Hash identifier: 6EbTqnTcxSJkGt7hL31Ti6707UJUTKzs939O7PA1bfg= Subject key identifier: A2:BA:79:65:28:25:80:6F:0F:90:3E:3E:B6:5A:1E:D9:7D:D2:D2:56 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D2274BA261E957C687F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:22:74:ba:26:1e:95:7c:68:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=28ee593f-37ed-47b1-9fc5-2f873eaa0878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:42:c6:3a:e0:e9:e5:8d:33:3e:4e:4e:d1:d3: ce:a0:78:68:f6:53:26:c1:95:6f:c9:bd:ae:52:63: c9:9d:45:be:43:ae:dc:4b:44:17:07:96:35:c8:8d: 58:4d:ac:63:71:be:53:b1:4c:c7:c0:00:77:c5:37: 82:27:b0:af:e7:09:e8:5c:71:dd:89:93:f0:47:b8: a2:9a:41:1e:01:b9:9e:9d:be:fd:ef:4f:37:ef:63: 2b:1a:8f:17:c3:ad:95:a4:9a:56:0c:4b:05:62:bf: ff:ae:71:e4:cb:08:97:c4:b0:b4:15:83:6c:68:96: 3d:cb:5a:15:03:96:e1:18:a6:72:c7:e6:bd:cc:64: 2f:33:b1:e9:bc:68:3b:b6:fe:3c:3c:e8:40:c6:9f: 0b:12:fa:c7:ba:3c:7e:34:84:d5:b6:28:8f:cd:53: b1:54:96:5f:44:d2:6e:fa:9a:0b:af:67:68:5a:75: bd:ba:1d:a1:e0:6b:a1:2f:eb:19:a5:b9:44:83:a7: b2:3e:83:b3:e7:f5:9c:92:34:c9:62:6e:c6:fd:76: e2:ff:5e:a3:a2:08:e1:a0:47:3e:fb:90:30:91:9b: cb:e6:90:9b:9c:34:ed:9d:8c:0a:48:72:20:72:8e: 3d:a0:be:5e:c5:db:e5:a7:45:24:00:96:9f:44:a1: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BA:79:65:28:25:80:6F:0F:90:3E:3E:B6:5A:1E:D9:7D:D2:D2:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f8:4c:f2:46:8c:eb:b7:5f:53:c6:aa:9c:8d:8e:08:2f:22: f0:65:be:b0:d5:6e:fd:0c:42:92:94:5f:c4:53:8f:fe:fb:c5: 0a:2a:46:cc:55:3e:96:ec:e6:49:00:ba:fa:e6:e7:56:3a:d9: 2d:88:03:d4:01:3a:f2:90:ca:e0:c9:5d:89:fc:2f:9e:a5:59: b9:f0:87:46:62:b9:71:01:89:1b:9b:b0:11:d0:97:ab:9a:d6: 59:a5:5d:86:a5:c7:a0:9d:1c:52:6f:f0:7b:72:35:82:3b:b5: 78:b2:81:36:74:2e:3f:d2:b6:b0:b9:8c:4c:3e:58:75:8f:fb: f6:ac:5e:18:d1:94:6f:25:32:1e:a7:a8:15:9e:e6:60:75:aa: af:95:03:61:0a:24:a4:45:59:99:66:7f:f5:2c:2c:39:ef:49: c6:1d:9c:cc:27:ab:33:fc:cd:13:b8:e4:bf:ad:dd:27:76:5f: 75:7a:79:50:9f:17:00:c3:bd:b3:c5:b7:9c:3e:65:8c:c8:e3: 53:66:f1:98:6f:7e:2a:40:26:a7:45:fe:f2:3e:86:85:69:66: c0:0c:16:42:d9:af:32:72:6b:8e:d4:60:8d:03:83:fa:87:5b: eb:96:99:d6:f9:3e:ee:4f:1e:db:f2:9a:da:72:f8:6a:67:1e: 85:d2:cc:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfSJ0uiYelXxof4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjhlZTU5M2YtMzdlZC00N2IxLTlmYzUtMmY4NzNlYWEwODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70LGOuDp5Y0zPk5O0dPOoHho9lMmwZVvyb2u UmPJnUW+Q67cS0QXB5Y1yI1YTaxjcb5TsUzHwAB3xTeCJ7Cv5wnoXHHdiZPwR7ii mkEeAbmenb79708372MrGo8Xw62VpJpWDEsFYr//rnHkywiXxLC0FYNsaJY9y1oV A5bhGKZyx+a9zGQvM7HpvGg7tv48POhAxp8LEvrHujx+NITVtiiPzVOxVJZfRNJu +poLr2doWnW9uh2h4GuhL+sZpblEg6eyPoOz5/WckjTJYm7G/Xbi/16jogjhoEc+ +5AwkZvL5pCbnDTtnYwKSHIgco49oL5exdvlp0UkAJafRKFAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK6eWUoJYBvD5A+PrZaHtl90tJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FiZWU4MWYtYjUwOC0z YzRlLTlkYzUtODU5OTY5ZTNkNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET4TPJGjOu3X1PGqpyNjggvIvBlvrDVbv0MQpKUX8RTj/77xQoqRsxV Ppbs5kkAuvrm51Y62S2IA9QBOvKQyuDJXYn8L56lWbnwh0ZiuXEBiRubsBHQl6ua 1lmlXYalx6CdHFJv8HtyNYI7tXiygTZ0Lj/StrC5jEw+WHWP+/asXhjRlG8lMh6n qBWe5mB1qq+VA2EKJKRFWZlmf/UsLDnvScYdnMwnqzP8zRO45L+t3Sd2X3V6eVCf FwDDvbPFt5w+ZYzI41Nm8ZhvfipAJqdF/vI+hoVpZsAMFkLZrzJya47UYI0Dg/qH W+uWmdb5Pu5PHtvymtpy+GpnHoXSzLw= -----END CERTIFICATE-----Generated at Sat Sep 26 07:04:40 2026 by rpki-client