$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa File: 859f2179-6268-3d00-b2bc-ba3b138d14d0.roa (raw, json) Hash identifier: /Em6LcZ6CbP5hsoRY04EbnyyLvBv5IvQjig7lL9DJYU= Subject key identifier: EF:22:E3:5A:5C:AE:94:87:F9:C9:B5:AB:8F:BE:DA:A9:80:ED:55:9F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984FDB42FEB214D4AC9D8B2 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:fd:b4:2f:eb:21:4d:4a:c9:d8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=85cda8b2-55ac-4b67-a710-7eaa4b868414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:f3:2b:1c:8d:8f:b0:3a:7a:c0:35:54:29: 6b:34:5f:28:f8:48:df:d7:59:5c:f8:0a:7f:16:e8: 92:8c:5e:d0:72:ba:9a:6a:7e:9c:83:7f:8e:86:8c: 70:0f:39:f4:e9:17:29:c9:ae:0b:35:b8:ed:5c:ae: 51:5c:c4:a2:23:fd:c2:6d:a1:eb:80:ac:54:5d:14: 26:d9:5c:42:d9:7c:0d:e2:3b:70:72:2c:77:1f:e3: 5b:84:04:4b:1a:65:03:0c:80:43:f6:9c:ae:3a:23: 7e:16:2b:cf:f8:db:48:3f:6e:13:2c:7c:01:5f:67: e1:a6:37:9f:67:0f:22:4e:10:f5:f6:43:f9:7b:63: 90:1f:35:41:f9:ca:e1:84:8a:5d:94:10:fd:7c:1e: 18:74:d8:bb:08:f0:40:7a:9f:96:da:67:18:8d:2e: d9:0c:71:6d:74:3b:de:2c:66:a9:d8:85:b8:6d:71: a9:d1:92:8a:50:4d:e8:87:df:23:48:01:1b:80:c2: 75:ed:83:6c:59:6e:51:5e:7e:9e:fb:a0:3b:d1:93: 31:93:be:a3:36:00:83:7d:d0:04:bc:aa:7e:1f:3b: e0:96:b0:6d:5a:61:86:90:8c:62:a3:fd:df:e4:eb: 7c:1c:f4:db:70:9a:50:46:20:d1:42:91:20:67:fe: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:22:E3:5A:5C:AE:94:87:F9:C9:B5:AB:8F:BE:DA:A9:80:ED:55:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:5c:40:43:98:17:e3:18:ef:c4:4d:f9:56:4e:06:6c:a9:01: 5a:78:a7:dd:84:60:28:8c:5c:53:38:c6:55:2d:7b:de:ae:e2: 92:bf:a3:a6:eb:93:7e:00:0e:1e:79:ec:97:fa:d8:50:ab:64: 59:66:bd:b1:ef:23:cd:13:65:da:30:3a:94:5b:86:48:09:58: 8b:f8:84:8d:93:b6:f4:0e:4e:6d:a9:96:0d:e1:62:0b:9b:02: 91:f0:d8:66:b7:d7:28:44:93:5f:36:d9:5f:92:ea:52:1f:b6: 70:e4:f0:a8:ae:95:a7:ce:60:0e:0b:b1:07:55:93:28:53:35: 11:89:a8:47:14:b0:39:ce:7c:7a:1c:e4:88:a8:34:75:d7:ca: ca:9a:44:cd:72:a6:f7:e5:c7:6e:ac:65:79:c3:0a:ed:d4:4d: 56:42:84:2e:e1:fc:9b:f6:63:1e:4f:a5:76:17:e5:09:28:18: 95:22:47:33:b5:4c:b8:15:17:4c:3c:6e:30:65:4a:e0:f2:53: 46:bb:8c:f0:d0:70:a0:6d:5c:0f:a3:4c:98:13:cd:23:84:29: 33:3a:03:9e:1c:f6:31:8b:cc:17:0f:3b:e4:66:54:ae:25:63: 56:61:97:28:1c:0d:e4:3f:f4:fb:37:b1:ff:54:ec:d4:ab:20: f2:0c:e5:7a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JhP20L+shTUrJ2LIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODVjZGE4YjItNTVhYy00YjY3LWE3MTAtN2VhYTRiODY4NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr17zKxyNj7A6esA1VClrNF8o+Ejf11lc+Ap/ FuiSjF7Qcrqaan6cg3+OhoxwDzn06Rcpya4LNbjtXK5RXMSiI/3CbaHrgKxUXRQm 2VxC2XwN4jtwcix3H+NbhARLGmUDDIBD9pyuOiN+FivP+NtIP24TLHwBX2fhpjef Zw8iThD19kP5e2OQHzVB+crhhIpdlBD9fB4YdNi7CPBAep+W2mcYjS7ZDHFtdDve LGap2IW4bXGp0ZKKUE3oh98jSAEbgMJ17YNsWW5RXn6e+6A70ZMxk76jNgCDfdAE vKp+HzvglrBtWmGGkIxio/3f5Ot8HPTbcJpQRiDRQpEgZ/4dcQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO8i41pcrpSH+cm1q4++2qmA7VWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODU5ZjIxNzktNjI2OC0z ZDAwLWIyYmMtYmEzYjEzOGQxNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArNkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAp1xAQ5gX4xjvxE35Vk4GbKkBWnin3YRgKIxcUzjGVS173q7ikr+jpuuT fgAOHnnsl/rYUKtkWWa9se8jzRNl2jA6lFuGSAlYi/iEjZO29A5ObamWDeFiC5sC kfDYZrfXKESTXzbZX5LqUh+2cOTwqK6Vp85gDguxB1WTKFM1EYmoRxSwOc58ehzk iKg0ddfKyppEzXKm9+XHbqxlecMK7dRNVkKELuH8m/ZjHk+ldhflCSgYlSJHM7VM uBUXTDxuMGVK4PJTRruM8NBwoG1cD6NMmBPNI4QpMzoDnhz2MYvMFw875GZUriVj VmGXKBwN5D/0+zex/1Ts1Ksg8gzleg== -----END CERTIFICATE-----Generated at Sat Sep 26 03:00:10 2026 by rpki-client