$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa File: 640ab488-921d-3ed3-a072-3005686e58b7.roa (raw, json) Hash identifier: r+Ysk7fUPzaNJyu25sQ4IXubw8gTw8nOcB8k8ei6R6M= Subject key identifier: B8:32:D4:AF:1A:B6:70:52:B7:48:0C:10:7E:2B:B7:1E:8B:CE:BA:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D094D18E4AD9829C05020 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:09:4d:18:e4:ad:98:29:c0:50:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=60ee9ebb-4615-4f02-8aaf-2d3e4831c5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a6:a6:df:d6:ef:cc:23:b3:ac:56:02:4b:d1: 2a:a2:07:90:10:4d:46:53:cf:45:8a:b5:77:4e:40: 55:44:28:d6:de:43:67:ba:3c:0c:81:59:6e:76:6c: 59:b3:87:67:2f:49:67:b5:c8:05:93:cc:6b:34:2a: 37:79:72:e2:71:c2:28:5f:8b:e1:29:0e:16:68:f7: e7:b8:60:f2:2c:a0:1b:73:e3:b3:ec:4b:cf:b7:fe: 14:1c:72:06:e3:73:b6:8d:52:d8:dc:47:be:c1:a0: ab:b0:44:e4:0f:e1:76:24:9c:ba:8d:14:0d:31:ef: 90:b8:a1:62:fd:fa:04:1d:81:2f:d1:41:7d:0b:7a: 3c:ac:99:2c:ba:af:fe:b4:3c:b7:2a:33:9e:96:c0: 22:0a:8a:75:cb:cc:1c:79:9f:6b:e2:5a:3b:eb:a8: fd:53:ea:68:b6:bc:e9:80:ff:23:16:70:62:a2:2b: fd:c5:6a:1c:f9:95:87:bf:ca:49:7b:51:ce:29:17: a8:91:aa:fb:63:5b:27:e7:a7:3f:1d:53:4f:4e:80: 44:a8:29:b2:9b:94:91:f8:39:8a:f3:96:a8:73:31: c2:ba:d2:41:3e:0f:9d:c7:44:93:88:cc:2d:59:19: ed:3c:db:1a:fc:41:e0:3c:07:a1:21:c9:c0:6b:75: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:32:D4:AF:1A:B6:70:52:B7:48:0C:10:7E:2B:B7:1E:8B:CE:BA:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:09:c2:4f:8f:8c:be:dc:21:ff:13:45:66:a4:89:7c:c5:79: d0:f0:fe:60:77:0a:8b:89:aa:f8:54:62:cc:39:37:a5:4b:c2: 49:50:c3:90:55:eb:b0:02:81:92:60:b3:8d:cd:f1:c8:43:e1: 3c:b6:d4:fa:a7:ff:f4:b6:26:0d:07:04:9d:d8:95:eb:e0:75: 21:68:48:68:9c:e2:b3:70:68:d8:f5:c0:c4:10:62:e7:13:69: 9a:15:f4:e7:dd:5d:0f:36:fe:c3:b8:32:67:d4:87:2f:3f:30: d1:2a:81:a0:38:e2:3c:9e:06:e3:12:83:ac:f1:8b:a9:b2:f3: 52:03:ec:98:28:08:1f:67:3c:44:a4:83:e9:8e:6e:7d:52:f5: 5d:d0:a5:7a:ad:16:04:fb:df:2d:2b:e2:78:13:9b:b8:59:ef: c3:e8:8d:3c:36:67:be:07:3b:c5:c7:4f:ee:7e:bf:23:ed:ea: e8:3f:da:25:69:86:0d:e3:ce:77:bd:f4:35:95:49:81:c1:f4: 41:77:aa:55:c1:d8:c4:80:72:1d:9d:61:6a:44:6e:76:72:e4: 19:87:da:74:58:b1:d8:7f:f2:14:f9:57:12:c4:d1:4b:06:fa: f6:1a:12:c4:f7:28:b8:2d:a9:52:d3:bd:1c:f7:ac:d8:d4:f0: 0c:a8:67:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQlNGOStmCnAUCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjBlZTllYmItNDYxNS00ZjAyLThhYWYtMmQzZTQ4MzFjNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6am39bvzCOzrFYCS9EqogeQEE1GU89FirV3 TkBVRCjW3kNnujwMgVludmxZs4dnL0lntcgFk8xrNCo3eXLiccIoX4vhKQ4WaPfn uGDyLKAbc+Oz7EvPt/4UHHIG43O2jVLY3Ee+waCrsETkD+F2JJy6jRQNMe+QuKFi /foEHYEv0UF9C3o8rJksuq/+tDy3KjOelsAiCop1y8wceZ9r4lo766j9U+potrzp gP8jFnBioiv9xWoc+ZWHv8pJe1HOKReokar7Y1sn56c/HVNPToBEqCmym5SR+DmK 85aoczHCutJBPg+dx0STiMwtWRntPNsa/EHgPAehIcnAa3UVTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgy1K8atnBSt0gMEH4rtx6LzrrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQwYWI0ODgtOTIxZC0z ZWQzLWEwNzItMzAwNTY4NmU1OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsJwk+PjL7cIf8TRWakiXzFedDw/mB3CouJqvhUYsw5N6VLwklQw5BV 67ACgZJgs43N8chD4Ty21Pqn//S2Jg0HBJ3YlevgdSFoSGic4rNwaNj1wMQQYucT aZoV9OfdXQ82/sO4MmfUhy8/MNEqgaA44jyeBuMSg6zxi6my81ID7JgoCB9nPESk g+mObn1S9V3QpXqtFgT73y0r4ngTm7hZ78PojTw2Z74HO8XHT+5+vyPt6ug/2iVp hg3jzne99DWVSYHB9EF3qlXB2MSAch2dYWpEbnZy5BmH2nRYsdh/8hT5VxLE0UsG +vYaEsT3KLgtqVLTvRz3rNjU8AyoZ0g= -----END CERTIFICATE-----Generated at Fri Sep 25 14:54:41 2026 by rpki-client