$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa File: 661fdda3-d9b9-336b-868c-5694c1d1cfea.roa (raw, json) Hash identifier: VBYJZ44V+rK2aVxjogq0Kq7jXIIDo4FR9Vk03eSdBzk= Subject key identifier: E7:AF:92:77:EB:1E:98:2B:F2:17:EA:03:D1:3B:B0:BE:2B:28:EB:CA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D1FD0BB0035A2EB3B09C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:1f:d0:bb:00:35:a2:eb:3b:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6fa7019a-85a8-4dd9-84db-56575ec54cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:fd:5e:78:e6:93:0b:56:60:30:bd:cd:dc: 77:77:e3:c8:83:e1:7d:6e:24:47:e8:d7:85:38:e1: b6:35:be:e0:4c:4c:d6:aa:19:79:dc:20:39:59:f5: ec:fc:50:cf:3d:00:1d:03:92:1d:57:0f:04:f6:12: ae:87:8e:9c:d7:c2:76:b2:6c:2d:e1:b5:6c:80:7d: da:d1:2c:b8:9e:a3:5a:1d:d2:32:67:fd:1f:57:f0: 60:50:5e:87:1c:77:51:6f:c4:2b:b5:60:3c:4c:2d: 11:6f:e4:69:89:f8:36:c3:b9:8b:d3:d6:04:94:a6: 5c:ff:c9:4c:df:8d:9e:35:44:63:0a:7d:43:08:ed: 7a:5f:d8:bd:8d:84:b6:f7:dc:2b:bf:82:8b:e2:e4: b8:76:7a:64:7c:0e:e9:71:c9:2a:16:7c:78:fc:8a: 1b:b6:d5:d0:7b:db:3e:1e:f0:68:ba:69:58:d3:12: 82:67:94:78:e0:65:1c:7c:c3:51:97:e6:5b:f8:53: ec:60:8e:b3:0a:55:fe:8b:29:44:2a:01:d6:bc:7a: 38:a3:80:c8:7c:8f:b3:ce:be:54:90:dc:9a:3d:9c: 61:71:b9:b2:05:4e:1f:94:68:df:fa:aa:8e:47:d1: bd:27:15:7d:7f:d4:2f:7f:af:ee:2e:bb:3f:16:6b: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AF:92:77:EB:1E:98:2B:F2:17:EA:03:D1:3B:B0:BE:2B:28:EB:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:36:c2:fb:68:db:b3:74:cd:ea:71:80:40:a3:ea:c0:a2:87: e0:de:4a:cd:0e:61:50:f0:bd:fb:94:24:a7:57:fa:cb:8c:e4: 89:ca:0d:5d:83:08:5a:e4:8c:27:96:e9:57:33:5b:2f:a4:36: 23:2b:de:07:05:5d:bd:35:10:8a:9b:22:97:13:b3:9d:4a:e9: 7b:cf:23:da:92:f5:c8:d7:df:fa:ac:fc:53:d6:b1:12:b1:47: 7a:15:47:53:01:08:84:86:93:54:03:5b:b0:dd:8b:c2:8d:59: 7e:8b:85:89:83:36:c2:c3:52:b9:f5:f3:5c:14:d9:64:ec:fe: a7:2c:e1:ef:bf:1d:f6:78:4b:f7:66:28:15:13:f7:1f:e8:87: af:4b:36:b7:31:dc:f7:ba:e8:ca:cf:de:70:0d:91:c5:46:8c: 8d:b7:bb:5f:ad:51:76:d6:d4:a6:42:2d:a6:a6:fd:21:aa:0d: 08:0e:48:da:ca:1e:39:0d:5a:a1:bd:97:65:75:dd:7c:00:83: d2:71:a8:3b:0f:ad:13:d1:d4:c6:e1:e7:dc:38:c7:59:78:1d: 47:41:ba:67:ec:00:91:f8:ff:ad:4f:7c:67:1b:ec:37:92:b5: 76:07:1c:a5:f2:54:2f:25:eb:31:df:a6:5c:0f:c7:fa:ca:b8: 53:61:82:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfR/QuwA1ous7CcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmZhNzAxOWEtODVhOC00ZGQ5LTg0ZGItNTY1NzVlYzU0Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCj9XnjmkwtWYDC9zdx3d+PIg+F9biRH6NeF OOG2Nb7gTEzWqhl53CA5WfXs/FDPPQAdA5IdVw8E9hKuh46c18J2smwt4bVsgH3a 0Sy4nqNaHdIyZ/0fV/BgUF6HHHdRb8QrtWA8TC0Rb+Rpifg2w7mL09YElKZc/8lM 342eNURjCn1DCO16X9i9jYS299wrv4KL4uS4dnpkfA7pcckqFnx4/IobttXQe9s+ HvBoumlY0xKCZ5R44GUcfMNRl+Zb+FPsYI6zClX+iylEKgHWvHo4o4DIfI+zzr5U kNyaPZxhcbmyBU4flGjf+qqOR9G9JxV9f9Qvf6/uLrs/FmthkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOevknfrHpgr8hfqA9E7sL4rKOvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjYxZmRkYTMtZDliOS0z MzZiLTg2OGMtNTY5NGMxZDFjZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM2wvto27N0zepxgECj6sCih+DeSs0OYVDwvfuUJKdX+suM5InKDV2D CFrkjCeW6VczWy+kNiMr3gcFXb01EIqbIpcTs51K6XvPI9qS9cjX3/qs/FPWsRKx R3oVR1MBCISGk1QDW7Ddi8KNWX6LhYmDNsLDUrn181wU2WTs/qcs4e+/HfZ4S/dm KBUT9x/oh69LNrcx3Pe66MrP3nANkcVGjI23u1+tUXbW1KZCLaam/SGqDQgOSNrK HjkNWqG9l2V13XwAg9JxqDsPrRPR1Mbh59w4x1l4HUdBumfsAJH4/61PfGcb7DeS tXYHHKXyVC8l6zHfplwPx/rKuFNhgrI= -----END CERTIFICATE-----Generated at Sat Sep 26 01:46:56 2026 by rpki-client