$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa File: 8684240a-b3e2-3586-b1f0-1953cb883e6c.roa (raw, json) Hash identifier: pFKmJRm7ZCTpZ1pLGcru1nO86INRcahd8aGW9Xu4PBc= Subject key identifier: 1B:F5:D3:64:16:08:9C:E8:B5:57:5F:4F:7B:84:A9:92:43:AD:72:32 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498503E80601F74F6B715680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:03:e8:06:01:f7:4f:6b:71:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f6797bfc-c32a-49cf-8f22-8d53fda4fc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:0d:88:7a:2f:91:83:37:98:3c:cb:4d:59: 91:bb:ad:42:b2:e8:66:16:12:2c:4a:8e:3e:9e:b3: c5:5d:60:07:93:00:f6:cb:c4:25:b5:fd:df:34:8f: 5f:3d:f8:cb:02:2f:a4:4d:d1:70:4c:57:91:d9:39: bf:a0:f1:47:48:99:18:66:2c:1f:a1:c6:a3:c5:a9: b0:0f:c0:35:99:da:c3:13:08:e6:f2:69:fa:3c:6c: 7b:78:c4:30:a8:65:2e:cb:62:12:59:f9:8a:6e:b6: b7:7e:f0:5b:2d:cf:18:9c:9a:f4:1e:1c:d5:d7:74: 09:86:aa:8c:52:25:93:ee:aa:a4:67:db:72:4a:ec: 28:1e:cb:02:70:e9:cf:f0:30:b7:5d:67:7b:1e:cd: a7:7d:51:b2:7c:82:93:94:3f:61:b4:23:cc:d9:2e: 58:82:f6:4c:48:24:33:18:31:27:1e:e7:0a:71:ca: 74:62:b7:5b:59:44:1d:40:27:dd:33:4d:a1:15:45: e8:2f:fa:2d:f1:df:ef:cb:24:16:c7:ac:e3:47:7e: 4f:30:67:34:93:d2:9e:e0:a1:6b:eb:51:dc:72:68: e2:cb:c6:cd:0f:54:a4:35:c4:d9:22:76:b6:00:58: e3:a5:48:d2:4f:4a:b1:5a:f5:ac:ea:c2:32:02:7c: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F5:D3:64:16:08:9C:E8:B5:57:5F:4F:7B:84:A9:92:43:AD:72:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:cf:04:7a:06:0c:60:47:6f:0d:6c:14:13:94:ca:df:96:6d: 79:10:b8:bd:87:a4:66:5a:ce:90:da:8c:a9:f3:5f:b8:ce:b2: 21:59:d4:76:02:f9:f7:fe:59:f1:dc:00:c4:3c:73:8d:5f:62: 65:2d:26:67:50:7c:cc:30:96:b9:2d:1f:a5:04:83:8b:c8:bd: 97:04:84:fd:e4:df:0f:d5:9e:d9:d6:44:3f:63:29:44:99:dc: e6:31:a5:29:1b:62:39:47:26:79:eb:87:cb:45:93:cb:63:2e: 16:57:f9:cb:11:ac:9c:d3:ce:7b:87:5f:7d:f2:f5:9e:80:e0: 83:ae:4f:6c:81:d7:3e:b6:00:38:f5:9d:ce:84:7f:74:f8:7d: 5d:e7:2a:46:68:65:40:c8:9d:20:83:37:f3:51:6c:29:7d:fc: 1d:66:59:a8:f6:eb:20:fb:8e:fb:e8:94:8e:ba:af:f0:79:81: 6f:8e:95:be:a5:a4:8d:94:4e:c7:94:96:ce:a7:ac:03:69:4b: d0:f5:96:1f:d9:cc:9d:52:ed:5e:bb:a5:da:0f:cd:a5:a6:b7: 48:4d:4d:83:51:f3:7f:53:fb:2b:e0:ea:c8:1a:fd:00:8e:85: b6:15:22:ef:23:d7:7b:f0:bb:c6:50:f3:a7:1d:7f:aa:3c:2a: 9a:48:b6:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQPoBgH3T2txVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjY3OTdiZmMtYzMyYS00OWNmLThmMjItOGQ1M2ZkYTRmYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHsNiHovkYM3mDzLTVmRu61CsuhmFhIsSo4+ nrPFXWAHkwD2y8Qltf3fNI9fPfjLAi+kTdFwTFeR2Tm/oPFHSJkYZiwfocajxamw D8A1mdrDEwjm8mn6PGx7eMQwqGUuy2ISWfmKbra3fvBbLc8YnJr0HhzV13QJhqqM UiWT7qqkZ9tySuwoHssCcOnP8DC3XWd7Hs2nfVGyfIKTlD9htCPM2S5YgvZMSCQz GDEnHucKccp0YrdbWUQdQCfdM02hFUXoL/ot8d/vyyQWx6zjR35PMGc0k9Ke4KFr 61Hccmjiy8bND1SkNcTZIna2AFjjpUjST0qxWvWs6sIyAnyevQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBv102QWCJzotVdfT3uEqZJDrXIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY4NDI0MGEtYjNlMi0z NTg2LWIxZjAtMTk1M2NiODgzZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfPBHoGDGBHbw1sFBOUyt+WbXkQuL2HpGZazpDajKnzX7jOsiFZ1HYC +ff+WfHcAMQ8c41fYmUtJmdQfMwwlrktH6UEg4vIvZcEhP3k3w/VntnWRD9jKUSZ 3OYxpSkbYjlHJnnrh8tFk8tjLhZX+csRrJzTznuHX33y9Z6A4IOuT2yB1z62ADj1 nc6Ef3T4fV3nKkZoZUDInSCDN/NRbCl9/B1mWaj26yD7jvvolI66r/B5gW+Olb6l pI2UTseUls6nrANpS9D1lh/ZzJ1S7V67pdoPzaWmt0hNTYNR839T+yvg6sga/QCO hbYVIu8j13vwu8ZQ86cdf6o8KppItkA= -----END CERTIFICATE-----Generated at Sat Sep 26 03:00:10 2026 by rpki-client