$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa File: 452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa (raw, json) Hash identifier: 9nB0mXSqadI/FbC0jf2irEuXkN5IRvP/qVaYx92j9UE= Subject key identifier: A0:35:22:FE:AC:5F:00:63:C2:01:D6:71:37:91:8D:5E:93:7C:16:D1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984F1F75B0548A82D1D8580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:f1:f7:5b:05:48:a8:2d:1d:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a0bf1086-4803-458c-8bd6-883a1497c9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f1:e3:be:cd:7f:c8:62:88:e7:d8:2f:47:52: f1:1f:d7:0c:0e:a6:d3:98:59:e4:76:a3:b0:50:1e: a8:6a:30:10:85:e4:4d:8f:10:2a:1a:51:c4:95:bf: 95:2f:b7:5e:19:7e:64:45:c3:a4:30:e6:b2:b9:a2: 4e:3e:23:1d:f4:26:eb:6c:4d:c9:3c:d1:64:20:a5: 99:4d:96:f4:3f:ab:16:e0:4a:eb:02:35:ed:3d:cd: e1:1b:a1:be:34:38:a5:e0:21:f3:61:8e:ad:5a:10: 72:b5:f0:4e:d5:d6:a8:f7:d8:8e:62:dc:28:09:87: b3:22:87:a0:55:ea:4d:30:dc:5a:dc:b6:6d:a6:de: 12:4e:97:ff:70:c0:ff:d0:8f:df:54:40:5e:9c:c2: ae:22:7c:24:b6:56:2f:34:6e:e2:8c:29:5b:f5:b8: 7a:fe:a9:39:a3:b3:52:04:3c:02:0b:be:30:06:ca: 78:47:fb:33:2f:d7:19:6e:69:bf:35:39:27:89:8a: 86:40:1a:26:17:c6:20:41:b0:b4:4b:34:ad:87:27: e1:bd:03:dd:f9:b0:f4:1d:3f:f5:f2:87:c1:a9:a3: 40:78:59:0d:17:cf:2a:7e:d2:29:0d:dd:e0:9a:af: 41:f0:74:c1:80:b5:0f:72:37:3b:3d:08:94:34:7d: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:35:22:FE:AC:5F:00:63:C2:01:D6:71:37:91:8D:5E:93:7C:16:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:60:b9:6d:60:00:9b:c4:9f:e5:62:ff:93:a0:66:81:6b:ea: f7:e0:c0:92:0e:65:b9:28:95:4b:a5:26:f4:0f:59:6d:18:8b: d9:35:4b:43:e9:f2:af:24:55:f1:e3:af:c3:d5:43:5c:6e:eb: af:e5:21:56:1e:7a:c3:5c:83:af:db:2e:0f:28:b2:ac:73:b6: bc:11:6f:31:41:9a:d0:ad:2f:04:df:04:cf:09:48:a1:36:47: 24:7d:c1:90:32:19:85:71:57:4b:6a:f7:ca:c5:df:c4:68:ea: 2e:10:26:0c:f7:ed:fa:2c:d4:71:57:e1:98:59:39:8b:71:eb: 8e:97:2e:41:54:41:fc:1a:4e:3d:88:bb:dd:b6:1e:c4:bc:a6: ba:ef:5c:32:2d:d0:d4:b3:cc:cc:e7:67:c9:a5:21:6c:8f:b7: 27:e5:87:a1:6c:14:cd:4c:12:6c:53:c9:c7:eb:16:13:56:e6: 56:9f:2d:51:7e:dd:38:12:cd:14:80:2b:aa:3d:5d:50:7b:72: dd:68:ea:90:50:d3:e4:bc:37:50:ff:77:ef:5f:c9:b8:3d:a1: ed:84:ac:01:79:81:65:f6:14:58:dc:36:34:fe:b7:92:c5:e9: 37:b0:05:c6:99:eb:2c:84:9e:98:06:63:f1:ad:e5:ee:8b:6c: e5:55:9f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPH3WwVIqC0dhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTBiZjEwODYtNDgwMy00NThjLThiZDYtODgzYTE0OTdjOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Hjvs1/yGKI59gvR1LxH9cMDqbTmFnkdqOw UB6oajAQheRNjxAqGlHElb+VL7deGX5kRcOkMOayuaJOPiMd9CbrbE3JPNFkIKWZ TZb0P6sW4ErrAjXtPc3hG6G+NDil4CHzYY6tWhBytfBO1dao99iOYtwoCYezIoeg VepNMNxa3LZtpt4STpf/cMD/0I/fVEBenMKuInwktlYvNG7ijClb9bh6/qk5o7NS BDwCC74wBsp4R/szL9cZbmm/NTkniYqGQBomF8YgQbC0SzSthyfhvQPd+bD0HT/1 8ofBqaNAeFkNF88qftIpDd3gmq9B8HTBgLUPcjc7PQiUNH2yXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA1Iv6sXwBjwgHWcTeRjV6TfBbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDUyMDg1YjgtZGRmZS0z MzE2LWFjMmUtZjcyOWQ2ZTNmMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVguW1gAJvEn+Vi/5OgZoFr6vfgwJIOZbkolUulJvQPWW0Yi9k1S0Pp 8q8kVfHjr8PVQ1xu66/lIVYeesNcg6/bLg8osqxztrwRbzFBmtCtLwTfBM8JSKE2 RyR9wZAyGYVxV0tq98rF38Ro6i4QJgz37fos1HFX4ZhZOYtx646XLkFUQfwaTj2I u922HsS8prrvXDIt0NSzzMznZ8mlIWyPtyflh6FsFM1MEmxTycfrFhNW5lafLVF+ 3TgSzRSAK6o9XVB7ct1o6pBQ0+S8N1D/d+9fybg9oe2ErAF5gWX2FFjcNjT+t5LF 6TewBcaZ6yyEnpgGY/Gt5e6LbOVVn70= -----END CERTIFICATE-----Generated at Sat Sep 26 03:00:12 2026 by rpki-client