$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa File: 86147445-4d27-3a02-b65f-dcb48ef32850.roa (raw, json) Hash identifier: Il/sSVoSo+XAY0lLW62uSSh7XKk3JQ2UbOQ0G0BLKU4= Subject key identifier: 79:4E:F9:3A:5B:EE:87:9C:E6:4F:D2:09:36:37:AE:61:CB:48:E4:1C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CE9C5CAC9D07DBA670200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:e9:c5:ca:c9:d0:7d:ba:67:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3649f02f-7122-4d4b-92e5-bc6b109859e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:3b:5a:18:7a:d4:c8:58:7f:b5:27:70:79: 08:a9:2c:be:fd:d4:b3:d8:fc:96:f4:83:d7:86:5e: fc:23:d6:03:59:ea:78:40:6a:fa:60:51:e5:30:07: c5:b5:66:bd:b3:1c:7c:46:b0:69:f6:8f:b5:1e:c9: f5:6b:c1:97:85:0d:80:76:6f:04:51:35:00:52:2f: 96:b8:b0:35:68:45:ae:91:56:57:e9:17:2a:37:b7: 43:bb:90:4f:fb:82:36:c9:b8:7b:e2:14:48:a4:1b: 3d:58:71:32:4f:15:66:95:ce:f1:79:df:e8:ca:8c: 02:53:8b:4c:6d:fb:57:fb:05:86:ae:39:32:b8:bf: 21:ea:d8:4d:ac:89:a4:73:8a:4a:2a:cc:2f:bd:21: b7:2f:a6:ca:a4:80:54:d9:a4:b5:14:fb:93:4e:75: bf:d0:76:f1:35:7e:e4:21:06:9e:c5:f3:5d:d3:32: d6:bb:aa:39:3f:aa:18:41:7d:3b:b7:fd:e5:75:75: f6:b6:1c:ff:36:98:a4:1b:2e:1a:87:08:c1:4f:1d: 01:49:bf:72:85:4a:9f:4c:5e:1f:3c:9f:98:0d:bf: e2:72:37:99:db:30:9f:81:a8:09:dd:8e:3f:1c:9b: fc:99:96:26:f6:a9:d6:8e:06:81:21:bf:3e:16:44: 0b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4E:F9:3A:5B:EE:87:9C:E6:4F:D2:09:36:37:AE:61:CB:48:E4:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:71:78:8a:cd:7b:08:b3:e7:5a:86:60:55:6d:76:39:68:c0: c1:2b:83:6f:c7:ab:35:bf:56:1f:4c:fe:14:ed:69:d5:fc:72: 9c:f3:59:63:37:b2:b9:5f:c1:03:ad:d5:1c:2e:ff:c1:69:32: 7d:4c:bd:31:b3:23:0f:0c:5a:4f:bc:9a:41:34:3d:ce:1f:7b: c2:4f:bb:e1:2c:aa:14:29:d4:82:a4:53:2b:7f:9b:b8:1e:62: 2a:a1:3b:08:19:cd:e9:71:3e:ce:7f:77:f9:09:e9:5a:d5:79: 64:9e:b5:f5:a9:ed:49:cd:08:bb:54:84:37:9d:0e:8e:57:96: 5f:8d:1c:d0:1a:77:0d:d5:1a:5a:bb:0f:df:67:50:23:b4:2d: 47:28:4e:48:3d:ab:de:b2:ed:2a:5a:e3:e7:dc:cb:91:7c:59: 37:e6:1e:2a:c5:7b:bd:d0:15:9d:80:f8:ae:64:b4:76:f6:46: c8:15:2c:7f:c6:65:71:2e:43:54:cf:f1:63:6d:50:80:cd:fe: 22:5b:a0:21:36:74:ae:96:3d:9c:35:0f:61:cb:86:0e:23:95: 9b:9b:4a:18:4f:6c:b4:6b:74:f3:1d:01:4b:ec:f3:af:50:2a: 54:e6:f9:c8:5c:e8:31:a8:f0:4e:2b:8b:c1:c8:e6:f0:87:6e: 87:d0:1c:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfOnFysnQfbpnAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzY0OWYwMmYtNzEyMi00ZDRiLTkyZTUtYmM2YjEwOTg1OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpM7Whh61MhYf7UncHkIqSy+/dSz2PyW9IPX hl78I9YDWep4QGr6YFHlMAfFtWa9sxx8RrBp9o+1Hsn1a8GXhQ2Adm8EUTUAUi+W uLA1aEWukVZX6RcqN7dDu5BP+4I2ybh74hRIpBs9WHEyTxVmlc7xed/oyowCU4tM bftX+wWGrjkyuL8h6thNrImkc4pKKswvvSG3L6bKpIBU2aS1FPuTTnW/0HbxNX7k IQaexfNd0zLWu6o5P6oYQX07t/3ldXX2thz/NpikGy4ahwjBTx0BSb9yhUqfTF4f PJ+YDb/icjeZ2zCfgagJ3Y4/HJv8mZYm9qnWjgaBIb8+FkQLywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlO+Tpb7oec5k/SCTY3rmHLSOQcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODYxNDc0NDUtNGQyNy0z YTAyLWI2NWYtZGNiNDhlZjMyODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtxeIrNewiz51qGYFVtdjlowMErg2/HqzW/Vh9M/hTtadX8cpzzWWM3 srlfwQOt1Rwu/8FpMn1MvTGzIw8MWk+8mkE0Pc4fe8JPu+EsqhQp1IKkUyt/m7ge YiqhOwgZzelxPs5/d/kJ6VrVeWSetfWp7UnNCLtUhDedDo5Xll+NHNAadw3VGlq7 D99nUCO0LUcoTkg9q96y7Spa4+fcy5F8WTfmHirFe73QFZ2A+K5ktHb2RsgVLH/G ZXEuQ1TP8WNtUIDN/iJboCE2dK6WPZw1D2HLhg4jlZubShhPbLRrdPMdAUvs869Q KlTm+chc6DGo8E4ri8HI5vCHbofQHMw= -----END CERTIFICATE-----Generated at Sat Sep 26 05:56:39 2026 by rpki-client