$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa File: 65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa (raw, json) Hash identifier: NPSDHriVrKf+cJWnWv8DU1cKyfYDN+7/y+HUfQmJ4Wc= Subject key identifier: A5:43:63:D0:62:E7:D5:CE:79:F0:78:DC:7F:01:BE:8B:ED:17:F5:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CF1E54885467C75E1F100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:f1:e5:48:85:46:7c:75:e1:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8fe598e-a48a-42c2-965a-66601c027178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:52:75:e2:99:e0:66:5b:5d:4c:ee:bf:97: 45:92:de:b0:30:1a:45:56:bf:cb:f1:30:56:cf:5e: 31:37:23:8e:a9:c1:b3:b6:34:f4:73:19:86:04:d5: d1:44:17:2b:81:cf:18:d8:0e:e7:4f:c0:6f:38:82: ed:ce:8c:27:a8:72:09:60:04:b8:65:e3:b5:4c:8d: 32:f7:5e:02:1f:eb:b3:69:a0:82:02:04:61:7c:88: c6:ab:6e:7a:67:1b:2c:a4:2c:63:13:86:7f:25:d9: 6e:c8:73:e1:07:03:de:19:f0:8e:e6:e2:d0:bd:f0: a2:ec:4e:3c:9c:7b:b2:63:ce:1d:d0:f4:be:a3:78: ea:3a:ae:8b:21:03:3f:fc:91:34:5f:d0:05:77:64: eb:49:1e:21:79:64:e4:15:9e:de:d6:2c:71:6d:58: 55:9d:33:79:68:3e:4a:23:0f:fb:2e:14:f8:ae:c0: 7b:b4:41:19:bf:e7:c3:15:d8:0b:17:0f:66:31:6a: e1:eb:08:f9:80:78:aa:f0:c9:31:7e:2b:6d:f9:37: 5b:70:71:34:50:37:b2:e6:05:84:ac:84:77:07:41: 2f:81:2e:71:0c:07:fb:a6:15:6b:0c:29:a9:09:f2: ad:22:0b:0c:39:ba:16:18:76:3f:50:ba:1b:cc:89: bf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:43:63:D0:62:E7:D5:CE:79:F0:78:DC:7F:01:BE:8B:ED:17:F5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:32:8d:32:b6:e2:24:fa:a1:ff:fb:48:6b:db:1a:fa:f0:bc: e5:7b:86:5a:97:20:84:29:e1:a6:e4:8e:0b:ef:88:3e:db:6e: 63:6f:a7:08:87:84:f1:76:18:1f:d0:ae:53:71:30:f3:84:72: 5d:4b:be:cb:62:00:de:b3:3b:04:0d:7c:e6:77:79:6b:de:83: 19:60:20:cb:45:e5:87:a0:68:af:5a:cd:b3:c1:c0:01:ee:f3: 2f:97:b6:ee:4f:54:a4:d1:eb:49:69:e9:53:ee:b1:84:d4:69: c3:9f:d8:5e:19:20:86:b5:8c:50:62:96:2e:b2:5c:2a:fe:3b: ec:c4:8c:f6:81:f7:31:d4:b8:06:96:cf:65:d1:00:09:86:e9: 1e:07:b6:0c:99:9b:b9:1d:2a:85:43:0b:4d:78:e8:4f:64:71: 11:8d:5c:52:54:46:0b:53:4c:f2:21:02:f9:23:69:f2:89:3a: e6:ff:43:28:40:c4:bf:89:1b:ca:3f:cf:4c:eb:1e:b7:21:c5: 85:5c:d1:1a:f9:ea:66:e0:5c:57:32:6d:85:e6:14:60:24:27: 04:38:d5:60:eb:bc:eb:bc:90:21:35:6c:a2:bb:83:7d:ee:04: 02:5e:b1:4e:eb:70:0c:ef:59:f0:5f:36:f0:3f:f3:9b:5b:46: 6d:22:80:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfPHlSIVGfHXh8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YThmZTU5OGUtYTQ4YS00MmMyLTk2NWEtNjY2MDFjMDI3MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM5SdeKZ4GZbXUzuv5dFkt6wMBpFVr/L8TBW z14xNyOOqcGztjT0cxmGBNXRRBcrgc8Y2A7nT8BvOILtzownqHIJYAS4ZeO1TI0y 914CH+uzaaCCAgRhfIjGq256ZxsspCxjE4Z/JdluyHPhBwPeGfCO5uLQvfCi7E48 nHuyY84d0PS+o3jqOq6LIQM//JE0X9AFd2TrSR4heWTkFZ7e1ixxbVhVnTN5aD5K Iw/7LhT4rsB7tEEZv+fDFdgLFw9mMWrh6wj5gHiq8Mkxfitt+TdbcHE0UDey5gWE rIR3B0EvgS5xDAf7phVrDCmpCfKtIgsMOboWGHY/ULobzIm/8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVDY9Bi59XOefB43H8BvovtF/XUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjVhNmU1YmEtYzA1NC0z YTA0LThjM2YtMmQ0ZGUxMWU5NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIyjTK24iT6of/7SGvbGvrwvOV7hlqXIIQp4abkjgvviD7bbmNvpwiH hPF2GB/QrlNxMPOEcl1LvstiAN6zOwQNfOZ3eWvegxlgIMtF5YegaK9azbPBwAHu 8y+Xtu5PVKTR60lp6VPusYTUacOf2F4ZIIa1jFBili6yXCr+O+zEjPaB9zHUuAaW z2XRAAmG6R4HtgyZm7kdKoVDC0146E9kcRGNXFJURgtTTPIhAvkjafKJOub/QyhA xL+JG8o/z0zrHrchxYVc0Rr56mbgXFcybYXmFGAkJwQ41WDrvOu8kCE1bKK7g33u BAJesU7rcAzvWfBfNvA/85tbRm0igFU= -----END CERTIFICATE-----Generated at Fri Sep 25 17:34:43 2026 by rpki-client