$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa File: 7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa (raw, json) Hash identifier: 96jJsxujlfMKa8wi+q1NNsQfMB6+9EPtqKiFqk+zaFA= Subject key identifier: 58:35:2A:D9:1E:A7:82:FF:04:5B:94:9A:6D:B4:29:13:60:A1:52:59 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CDCC4B764A7BB29445EE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:dc:c4:b7:64:a7:bb:29:44:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=16f6f718-7959-4bf2-b8be-c8b739cfcd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:fb:2a:02:19:e6:c6:42:17:56:27:04:a8: c3:4b:48:22:67:15:dc:a1:dc:00:ce:0c:11:d2:f1: 66:2c:c0:77:ee:47:3f:65:3f:03:60:ca:94:62:b1: e0:bb:2d:73:f8:cb:59:cc:a1:57:73:30:58:89:04: 1e:ce:33:c1:ad:c4:af:e4:4a:cd:7b:3a:16:76:f2: ed:2c:7c:39:bc:2a:54:04:7b:2f:3d:f1:65:1b:1a: 8d:67:dc:3e:cb:a4:de:d7:a7:e5:3b:b4:9d:6a:22: e7:23:a2:84:a2:91:fa:b7:a1:b7:ce:7a:72:d6:49: 4e:70:62:af:35:19:c4:6e:22:54:e2:e5:b1:30:68: 14:81:3f:5a:44:ed:b0:63:c6:5c:fa:d8:c1:9c:cb: 8f:9c:a9:c9:e7:3d:70:c9:71:f9:22:97:29:ea:cf: 93:57:83:06:b2:72:09:46:75:2f:54:75:3b:2c:18: 9f:37:e7:b9:50:ff:99:4d:78:57:75:c2:62:9b:f5: 23:a0:48:6a:7a:b7:ba:f3:90:59:e0:b7:72:98:83: 3f:f3:69:0e:f7:f1:63:08:c3:54:fb:a3:a7:c6:84: e6:10:64:f7:e6:05:66:3c:b6:af:d8:fa:55:f7:7d: eb:de:86:1c:6e:9e:4e:74:00:d2:56:02:68:45:21: 62:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:35:2A:D9:1E:A7:82:FF:04:5B:94:9A:6D:B4:29:13:60:A1:52:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:54:e0:a6:f5:21:09:50:40:bb:26:92:c6:7f:6a:0b:82:a3: 93:28:d1:c0:53:ee:d9:c8:99:d1:fb:0b:00:ef:58:92:c1:12: 92:7a:6a:5c:20:d8:58:97:6f:1e:f9:e9:be:3f:c8:d1:c7:d9: 37:f2:84:36:42:19:ce:91:ff:fc:1f:40:9f:8f:a8:5e:ff:bc: 0a:e5:50:13:71:0b:25:0a:f4:2e:c9:d8:fc:37:df:f0:d8:6a: 0b:f2:19:b0:90:a1:c8:08:39:1e:9e:5c:1d:3b:0f:b1:00:6f: 24:ad:55:8f:fd:65:2f:e8:4c:8e:bf:e1:4a:ed:37:2d:10:a6: 82:ae:70:7c:ac:3c:cb:14:e6:46:70:e2:73:d3:3e:33:c8:9a: 65:69:30:5e:a4:88:32:90:d7:ca:a0:d8:03:dd:88:c5:42:02: 21:0b:c1:68:3d:b9:e9:51:ef:d0:65:fc:78:fb:52:1e:bf:a4: b1:51:a6:d7:17:c1:96:8b:b2:21:a0:7a:f6:c5:82:eb:c0:64: 3b:8a:3d:11:b5:8d:16:2b:cb:71:52:3a:47:4d:16:03:f6:00: cb:16:d3:47:c8:40:c1:e5:e8:a2:df:a6:cf:72:fe:da:59:7f: 2c:8a:5f:22:d4:b1:0c:35:67:d0:64:94:b5:d1:fb:0a:6b:e4: e0:b2:b6:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfNzEt2SnuylEXuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTZmNmY3MTgtNzk1OS00YmYyLWI4YmUtYzhiNzM5Y2ZjZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMv7KgIZ5sZCF1YnBKjDS0giZxXcodwAzgwR 0vFmLMB37kc/ZT8DYMqUYrHguy1z+MtZzKFXczBYiQQezjPBrcSv5ErNezoWdvLt LHw5vCpUBHsvPfFlGxqNZ9w+y6Te16flO7SdaiLnI6KEopH6t6G3znpy1klOcGKv NRnEbiJU4uWxMGgUgT9aRO2wY8Zc+tjBnMuPnKnJ5z1wyXH5Ipcp6s+TV4MGsnIJ RnUvVHU7LBifN+e5UP+ZTXhXdcJim/UjoEhqere685BZ4LdymIM/82kO9/FjCMNU +6OnxoTmEGT35gVmPLav2PpV933r3oYcbp5OdADSVgJoRSFiowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg1Ktkep4L/BFuUmm20KRNgoVJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2E4Y2U0M2MtYTFlZi0z ZTYyLTk5MzEtYmI5NGEwYmE2M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVU4Kb1IQlQQLsmksZ/aguCo5Mo0cBT7tnImdH7CwDvWJLBEpJ6alwg 2FiXbx756b4/yNHH2TfyhDZCGc6R//wfQJ+PqF7/vArlUBNxCyUK9C7J2Pw33/DY agvyGbCQocgIOR6eXB07D7EAbyStVY/9ZS/oTI6/4UrtNy0QpoKucHysPMsU5kZw 4nPTPjPImmVpMF6kiDKQ18qg2APdiMVCAiELwWg9uelR79Bl/Hj7Uh6/pLFRptcX wZaLsiGgevbFguvAZDuKPRG1jRYry3FSOkdNFgP2AMsW00fIQMHl6KLfps9y/tpZ fyyKXyLUsQw1Z9BklLXR+wpr5OCytqk= -----END CERTIFICATE-----Generated at Fri Sep 25 19:05:05 2026 by rpki-client