$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa File: 8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa (raw, json) Hash identifier: 2y8BCiCGOYRqQ9tfpGL1U6FbcwnQfX3uNH2Ny63J3S0= Subject key identifier: 97:3C:35:16:F1:3D:11:18:19:02:42:C2:22:DD:3F:16:B8:1A:56:C3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49850B0358238ED7023DB200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 172.217.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:0b:03:58:23:8e:d7:02:3d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a7a1e43c-bfa5-4be6-ac37-6b483d8cae3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c3:41:7d:bc:5a:03:98:b8:ff:2c:a7:22:20: e5:41:64:9b:d3:5f:b4:7c:17:51:a2:a6:b4:5f:94: 21:d8:a4:52:a5:58:6b:f2:25:36:f3:28:35:cd:bc: 32:2e:07:84:7b:30:19:5d:c9:dc:05:6e:0f:0c:6d: 3a:83:90:11:20:bb:b3:39:0b:42:56:1a:98:9e:89: 89:b0:c0:96:82:6e:65:24:1a:3e:1e:4c:a7:05:32: 69:78:8a:92:be:be:8e:69:f5:20:15:92:e9:2b:1b: 33:df:f6:d1:bf:fa:e8:2c:98:23:da:a0:47:dc:b4: fe:84:0b:d8:84:70:16:a7:07:78:f1:ae:48:46:26: ca:74:31:54:b5:8e:9a:63:fd:f3:50:de:c3:d4:47: 07:64:76:57:fd:19:79:0c:c8:92:40:ea:15:ab:30: 2e:04:be:67:11:c0:8d:c3:5d:8e:3d:e8:3c:aa:a1: b7:de:95:59:78:95:94:c5:0d:17:7a:12:d1:08:c8: 8a:9c:c5:4b:d9:a3:b6:87:bb:b0:86:cd:83:09:10: 1b:ef:f3:d0:e0:46:ca:ec:69:86:15:10:90:01:69: e1:46:53:0f:57:42:72:71:9c:64:43:36:a6:0a:bc: ac:0c:cc:58:3d:0d:8d:48:be:3c:7f:88:00:ea:ab: cb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3C:35:16:F1:3D:11:18:19:02:42:C2:22:DD:3F:16:B8:1A:56:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:03:b7:96:ad:cd:be:47:db:b5:72:1e:98:94:12:55:0a:62: 22:c2:12:52:e3:20:ed:06:9e:2c:b8:74:25:43:8f:a7:cb:6e: a9:1f:56:a6:b4:3e:55:66:5f:a7:a4:fe:b2:58:3a:40:65:3f: ab:8e:55:28:25:d8:a0:ce:bf:e5:11:46:93:f0:44:c5:9b:10: 43:72:4b:4b:24:ae:c0:a2:ea:54:cb:0c:cd:51:89:df:c5:0b: 51:c5:5b:5d:ee:75:0f:44:8a:c0:ab:2d:75:2d:ea:52:14:44: 35:02:51:21:51:8e:47:64:8b:80:ec:39:ec:04:30:20:a9:5f: b1:6e:e1:1a:33:a1:2b:cd:52:1c:63:40:b1:06:ef:1b:de:ef: 3a:48:6d:53:1b:74:0f:a3:d0:24:12:bf:50:9c:66:ac:b8:a3: 6d:ed:fa:9f:4e:6c:13:74:2c:6a:e4:52:b3:d1:0d:88:1b:5d: f0:42:4c:9f:5e:ca:a4:75:79:08:c2:b3:94:56:b8:8f:e6:21: c3:94:9e:b3:67:1b:64:67:9f:6d:d1:8a:28:96:68:1d:53:3a: d5:34:e0:0f:8c:9d:1f:2e:65:5a:2a:9b:e7:38:06:c4:0d:c7: 96:62:32:8b:8b:65:9b:18:54:a4:4b:e0:b3:77:d8:db:c7:2b: 0b:cf:95:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQsDWCOO1wI9sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTdhMWU0M2MtYmZhNS00YmU2LWFjMzctNmI0ODNkOGNhZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcNBfbxaA5i4/yynIiDlQWSb01+0fBdRoqa0 X5Qh2KRSpVhr8iU28yg1zbwyLgeEezAZXcncBW4PDG06g5ARILuzOQtCVhqYnomJ sMCWgm5lJBo+HkynBTJpeIqSvr6OafUgFZLpKxsz3/bRv/roLJgj2qBH3LT+hAvY hHAWpwd48a5IRibKdDFUtY6aY/3zUN7D1EcHZHZX/Rl5DMiSQOoVqzAuBL5nEcCN w12OPeg8qqG33pVZeJWUxQ0XehLRCMiKnMVL2aO2h7uwhs2DCRAb7/PQ4EbK7GmG FRCQAWnhRlMPV0JycZxkQzamCrysDMxYPQ2NSL48f4gA6qvLnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc8NRbxPREYGQJCwiLdPxa4GlbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGUwMDcwYjctOGI0My0z MmJlLWJhYmYtNGJkYjU5YzJmYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrNk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMDt5atzb5H27VyHpiUElUKYiLCElLjIO0Gniy4dCVDj6fLbqkfVqa0 PlVmX6ek/rJYOkBlP6uOVSgl2KDOv+URRpPwRMWbEENyS0skrsCi6lTLDM1Rid/F C1HFW13udQ9EisCrLXUt6lIURDUCUSFRjkdki4DsOewEMCCpX7Fu4RozoSvNUhxj QLEG7xve7zpIbVMbdA+j0CQSv1CcZqy4o23t+p9ObBN0LGrkUrPRDYgbXfBCTJ9e yqR1eQjCs5RWuI/mIcOUnrNnG2Rnn23RiiiWaB1TOtU04A+MnR8uZVoqm+c4BsQN x5ZiMouLZZsYVKRL4LN32NvHKwvPlTk= -----END CERTIFICATE-----Generated at Fri Sep 25 20:51:55 2026 by rpki-client