$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d30231-bea3-3219-890c-ded092a6f171.roa File: 68d30231-bea3-3219-890c-ded092a6f171.roa (raw, json) Hash identifier: SJ3+MZPa9tmLXpEpQbbgiEUm3V3E2bhsIM213ewkcpY= Subject key identifier: 57:48:80:EA:2B:3A:1F:85:52:12:F5:17:74:CF:0E:91:89:F9:BF:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49853B5EBC6F6204DF816580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d30231-bea3-3219-890c-ded092a6f171.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 172.217.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:3b:5e:bc:6f:62:04:df:81:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=663a7975-804b-4c2e-bb56-a8fb36ff632d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:40:87:aa:96:6e:98:aa:44:06:4d:6a:ba:dc: a8:5d:5f:0d:5b:f5:62:ab:bb:cc:f5:85:6d:7a:b4: cc:05:d0:cd:01:c7:4c:3b:18:ff:f7:ad:dd:b0:ba: b9:44:35:8b:c2:eb:88:16:94:16:78:8c:fb:7d:05: aa:36:a2:ce:f3:73:39:79:6e:71:e4:ac:50:de:d3: ab:94:42:88:07:55:f6:a2:47:5f:e8:65:12:7c:f5: a5:a3:b2:4f:e9:fb:55:f8:b7:ca:32:6d:b8:04:93: 93:75:3e:ae:38:6f:0e:d3:01:06:bb:2c:aa:2d:56: 77:11:78:38:b3:91:2f:d8:2d:e3:6d:a6:fe:27:93: 25:37:62:0c:10:f7:03:e7:78:68:49:1a:f3:8f:aa: a1:6e:28:47:30:8e:db:ea:85:8f:82:8b:38:28:5c: 89:48:35:9c:67:02:f2:12:c9:47:82:02:c9:e5:2e: 10:9f:de:ed:d2:a5:43:22:ed:f5:cb:47:e7:f3:5e: 96:4d:2c:df:c1:c4:01:d0:07:b5:54:fe:1c:ab:10: b1:4b:14:d8:c5:dd:71:0a:77:0f:fe:e9:78:39:10: e8:e2:6a:e4:8d:b4:5e:2d:c4:ec:d5:fc:93:10:0c: 9c:a3:4d:ca:93:76:74:a6:87:9e:a4:ec:ed:03:12: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:48:80:EA:2B:3A:1F:85:52:12:F5:17:74:CF:0E:91:89:F9:BF:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d30231-bea3-3219-890c-ded092a6f171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:88:24:24:a8:03:76:34:fe:0b:6a:0f:af:fc:d5:3c:16:55: ef:c8:c8:3c:f3:35:f8:b5:3c:ca:93:80:03:84:c7:e6:86:6d: fd:22:27:66:1c:86:f7:ab:3b:0f:4d:cf:d5:2b:13:05:9f:9d: 9e:1b:04:f4:14:76:4e:c8:91:db:98:c1:a0:9d:ac:04:2c:71: 97:b9:ae:7d:7a:f1:e9:3a:bf:cd:72:a1:ed:7d:d0:49:59:c7: e4:ad:dc:e0:ba:3f:45:48:5a:7b:0e:cd:b2:5a:df:78:43:ce: a9:e4:b8:f4:67:ae:bd:ea:a1:5d:f4:1e:3a:04:3b:51:ae:7a: db:9c:d5:ff:40:e5:59:4a:3d:84:41:2d:39:cc:62:00:81:82: 07:e3:0e:e8:5a:34:35:e9:ca:c6:5d:10:19:10:e6:50:b9:d4: 59:70:70:0e:76:34:1b:c1:5f:9d:8f:b9:b9:b0:39:f1:19:f8: 2a:b5:ed:98:f4:c7:88:b0:d1:05:d3:00:a6:39:c7:e1:6e:27: 04:da:b4:d9:aa:fb:96:9a:4a:39:ca:a4:01:61:3d:67:d2:75: 4a:f9:72:96:bc:4d:21:31:0f:88:18:65:7d:54:8d:6f:61:4a: 78:92:72:eb:e3:c5:31:47:dd:ac:58:14:25:c9:1a:b9:05:33: ac:b4:70:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhTtevG9iBN+BZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjYzYTc5NzUtODA0Yi00YzJlLWJiNTYtYThmYjM2ZmY2MzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUCHqpZumKpEBk1qutyoXV8NW/Viq7vM9YVt erTMBdDNAcdMOxj/963dsLq5RDWLwuuIFpQWeIz7fQWqNqLO83M5eW5x5KxQ3tOr lEKIB1X2okdf6GUSfPWlo7JP6ftV+LfKMm24BJOTdT6uOG8O0wEGuyyqLVZ3EXg4 s5Ev2C3jbab+J5MlN2IMEPcD53hoSRrzj6qhbihHMI7b6oWPgos4KFyJSDWcZwLy EslHggLJ5S4Qn97t0qVDIu31y0fn816WTSzfwcQB0Ae1VP4cqxCxSxTYxd1xCncP /ul4ORDo4mrkjbReLcTs1fyTEAyco03Kk3Z0poeepOztAxLFoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdIgOorOh+FUhL1F3TPDpGJ+b/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhkMzAyMzEtYmVhMy0z MjE5LTg5MGMtZGVkMDkyYTZmMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNk+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6IJCSoA3Y0/gtqD6/81TwWVe/IyDzzNfi1PMqTgAOEx+aGbf0iJ2Yc hverOw9Nz9UrEwWfnZ4bBPQUdk7IkduYwaCdrAQscZe5rn168ek6v81yoe190ElZ x+St3OC6P0VIWnsOzbJa33hDzqnkuPRnrr3qoV30HjoEO1Guetuc1f9A5VlKPYRB LTnMYgCBggfjDuhaNDXpysZdEBkQ5lC51FlwcA52NBvBX52PubmwOfEZ+Cq17Zj0 x4iw0QXTAKY5x+FuJwTatNmq+5aaSjnKpAFhPWfSdUr5cpa8TSExD4gYZX1UjW9h SniScuvjxTFH3axYFCXJGrkFM6y0cK8= -----END CERTIFICATE-----Generated at Sat Sep 26 02:09:11 2026 by rpki-client