$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/410e946b-75d7-31af-aefe-d32233f8166b.roa File: 410e946b-75d7-31af-aefe-d32233f8166b.roa (raw, json) Hash identifier: qSlf4OCotqY8t0Tf698dl3zo8R6zxd/rZbP4hvOUIjY= Subject key identifier: B1:F2:22:03:35:AA:24:BE:BF:A1:A2:DE:2A:69:18:3E:6B:48:36:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F62930896C330D839C34A65A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/410e946b-75d7-31af-aefe-d32233f8166b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.217.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:08:96:c3:30:d8:39:c3:4a:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=5bbcf730-a827-476a-8c80-0235b476294f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:22:fb:84:dc:49:24:9b:97:98:45:a3:84: a8:fb:4f:c5:d2:29:cd:0d:f6:13:55:39:46:4c:4f: 2e:33:75:76:ee:87:a5:87:c9:a4:2b:96:38:02:8e: d5:8a:1e:76:b0:c6:e8:4f:7d:3d:84:e6:1f:16:b5: c0:85:6d:2d:8b:92:fe:d6:4a:11:79:18:06:77:9d: 96:70:e0:58:bd:d1:eb:9b:0c:cd:32:c6:5c:12:8e: 6d:be:9c:94:f8:99:30:c4:a3:93:4c:05:6d:c1:5a: 86:69:d5:74:44:c6:7e:f0:8f:27:52:1f:1c:26:6e: e6:2b:1f:75:19:2b:a5:29:f3:fd:3a:7a:95:18:c2: 99:b0:99:ae:84:1b:74:80:02:2c:b2:4b:03:04:95: 61:06:0d:5e:89:73:a8:31:36:38:1e:54:ac:09:87: 63:65:ce:a6:ce:1f:13:e9:1e:12:2c:39:80:4d:8f: 7c:14:a4:81:48:3b:bc:82:80:fa:ca:03:83:0c:fa: 62:22:e2:fc:17:a1:8c:95:21:8b:87:e0:3f:58:36: d3:c1:ba:d5:39:10:cb:06:e7:5e:50:c6:45:39:57: 67:43:1f:04:bf:62:16:89:57:34:12:a7:c4:4f:73: 02:36:69:f9:25:a1:04:57:10:1e:e5:88:3c:1d:2b: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F2:22:03:35:AA:24:BE:BF:A1:A2:DE:2A:69:18:3E:6B:48:36:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/410e946b-75d7-31af-aefe-d32233f8166b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bc:3c:72:2f:d9:c5:18:79:91:21:0c:2e:48:4a:c2:5a:94: e8:f8:d2:69:bd:4e:af:6b:9d:a3:be:2e:8e:94:d4:41:90:36: 2e:cf:b9:2e:4f:17:1d:4d:6a:71:8a:93:c6:0d:d4:fa:45:c0: 6a:57:ee:dc:21:b9:fd:39:bd:3f:9a:ec:de:de:40:a7:13:a1: 13:88:dc:9d:29:b2:24:73:24:bf:fb:74:93:66:ab:c5:e4:1a: 54:3a:bc:26:12:0b:3f:92:ab:52:fb:56:4a:7c:7a:cd:fa:b8: 2b:d7:d5:02:00:17:85:5e:e4:bd:cb:04:67:c1:ea:cb:56:70: cf:b4:9c:19:0d:1e:f8:0b:d9:92:58:04:ed:e1:82:20:17:83: 68:c4:ea:11:78:c1:51:ac:d0:7f:ca:e9:1e:35:b4:15:ff:45: f9:96:53:c3:51:d0:de:f9:4f:ad:37:d6:42:d9:c4:7a:a2:a7: ec:c1:7a:7d:f8:b5:60:e5:11:d9:9a:a6:11:bb:71:69:61:e4: 15:bc:66:cf:23:89:33:6a:29:7b:14:2f:06:d0:58:16:ae:fe: e5:48:51:e8:38:3f:e4:85:18:60:f8:35:88:eb:99:35:c7:c8: f3:f0:8e:c6:9c:e6:11:58:ed:ee:dc:0f:02:81:7f:a2:29:2e: ee:67:26:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwiWwzDYOcNKZaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NWJiY2Y3MzAtYTgyNy00NzZhLThjODAtMDIzNWI0NzYyOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLUi+4TcSSSbl5hFo4So+0/F0inNDfYTVTlG TE8uM3V27oelh8mkK5Y4Ao7Vih52sMboT309hOYfFrXAhW0ti5L+1koReRgGd52W cOBYvdHrmwzNMsZcEo5tvpyU+JkwxKOTTAVtwVqGadV0RMZ+8I8nUh8cJm7mKx91 GSulKfP9OnqVGMKZsJmuhBt0gAIssksDBJVhBg1eiXOoMTY4HlSsCYdjZc6mzh8T 6R4SLDmATY98FKSBSDu8goD6ygODDPpiIuL8F6GMlSGLh+A/WDbTwbrVORDLBude UMZFOVdnQx8Ev2IWiVc0EqfET3MCNmn5JaEEVxAe5Yg8HSstfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHyIgM1qiS+v6Gi3ippGD5rSDboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDEwZTk0NmItNzVkNy0z MWFmLWFlZmUtZDMyMjMzZjgxNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS8PHIv2cUYeZEhDC5ISsJalOj40mm9Tq9rnaO+Lo6U1EGQNi7PuS5P Fx1NanGKk8YN1PpFwGpX7twhuf05vT+a7N7eQKcToROI3J0psiRzJL/7dJNmq8Xk GlQ6vCYSCz+Sq1L7Vkp8es36uCvX1QIAF4Ve5L3LBGfB6stWcM+0nBkNHvgL2ZJY BO3hgiAXg2jE6hF4wVGs0H/K6R41tBX/RfmWU8NR0N75T6031kLZxHqip+zBen34 tWDlEdmaphG7cWlh5BW8Zs8jiTNqKXsULwbQWBau/uVIUeg4P+SFGGD4NYjrmTXH yPPwjsac5hFY7e7cDwKBf6IpLu5nJkE= -----END CERTIFICATE-----Generated at Sun Nov 15 11:49:22 2026 by rpki-client