$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa File: a67282dc-ef4b-3424-b14a-d7cc85f54925.roa (raw, json) Hash identifier: 2V+/d1i8PLuK7Y3+zgN2+D/wYNkbklnpmDTerGaQK6g= Subject key identifier: 30:A8:1D:AB:EE:D7:67:21:B8:A6:74:BA:F3:B4:1C:80:60:65:CE:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D14B19CBFCA5ABDEAD600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:14:b1:9c:bf:ca:5a:bd:ea:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cc95cd50-ee0b-432c-9535-77d83dbb9873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:87:96:b0:a2:54:76:71:fe:f3:0e:e9:ea: 8f:14:96:12:98:cc:47:1f:d7:ca:47:43:d8:fd:3c: 50:85:97:f3:88:c4:d2:da:22:98:4a:18:61:fd:b0: 1a:fe:76:09:7e:75:cc:eb:f6:be:e4:a6:55:c0:ec: 38:f2:8d:2a:ba:ef:08:b8:a2:e7:1e:10:1a:e4:87: 07:51:d6:ab:c8:32:c4:fc:8d:b2:90:74:a8:81:2d: a4:9e:94:36:95:3a:2e:76:68:d2:af:b8:fe:2d:c1: a2:ad:6e:c8:09:94:e3:9b:32:d1:87:e1:87:ea:4c: 92:d1:03:1f:cf:7b:15:71:09:f1:4d:c6:59:26:2f: 80:81:57:4f:6d:5a:83:f2:b4:af:63:ee:c5:36:22: 71:6d:99:d6:a6:d1:d0:5a:77:68:a2:4b:73:68:76: 7e:9d:43:c0:06:f8:c1:1c:cc:79:90:79:f7:a8:1d: 3a:ad:6f:89:eb:4c:93:19:b9:04:4d:e0:ed:e2:7f: d2:af:c6:ce:ee:08:90:b7:e8:a2:63:ff:d4:b4:b1: 36:88:18:4f:2d:fc:7e:81:06:20:cf:80:70:b8:54: 0f:d6:c3:88:0a:6c:c6:1f:db:4c:dc:1d:ca:f1:3e: 8e:2d:e0:db:f5:d2:a0:de:e5:13:b7:02:49:71:17: 8c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A8:1D:AB:EE:D7:67:21:B8:A6:74:BA:F3:B4:1C:80:60:65:CE:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:45:70:8c:dc:eb:08:08:ac:75:b0:96:22:4f:9b:6d:8a:68: 85:c3:97:c7:47:a9:d4:68:62:14:c4:39:a9:d1:a5:30:68:72: 49:8c:ad:05:21:98:f5:de:7b:20:81:a3:0b:0e:4e:83:cc:27: 3b:4f:55:68:fc:97:0e:ea:1c:65:cb:65:b1:26:4d:75:0e:4d: bd:81:43:58:85:04:90:f6:c1:6a:1f:69:3f:97:21:97:06:a1: b8:d0:40:0b:57:a3:10:f5:ed:e2:4b:ed:02:dc:75:9c:a3:56: 5e:24:63:b3:26:07:7c:99:a2:47:ca:56:a0:36:94:11:18:44: 70:dc:35:43:85:1f:08:c2:54:ff:60:93:b6:3b:ba:48:37:34: 26:c5:03:86:e2:a0:cf:ed:f7:b5:a2:96:72:47:2a:98:59:c4: e6:d5:c5:aa:fd:1f:23:f4:0a:f3:2a:bc:fd:da:9d:25:13:a3: e4:3f:de:71:d5:9a:d3:04:85:0e:45:bf:52:a9:3c:88:c0:86: dd:2a:83:cf:8b:d8:75:a8:23:e0:60:8b:64:9b:a9:12:e0:51: 58:54:f2:d3:6c:34:d6:11:37:21:0c:7e:6b:6d:76:87:61:3f: d7:0c:51:9f:4d:99:cb:cf:dd:0d:37:1a:1d:89:ad:01:72:7b: 69:bc:f3:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfRSxnL/KWr3q1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2M5NWNkNTAtZWUwYi00MzJjLTk1MzUtNzdkODNkYmI5ODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4KHlrCiVHZx/vMO6eqPFJYSmMxHH9fKR0PY /TxQhZfziMTS2iKYShhh/bAa/nYJfnXM6/a+5KZVwOw48o0quu8IuKLnHhAa5IcH UdaryDLE/I2ykHSogS2knpQ2lToudmjSr7j+LcGirW7ICZTjmzLRh+GH6kyS0QMf z3sVcQnxTcZZJi+AgVdPbVqD8rSvY+7FNiJxbZnWptHQWndooktzaHZ+nUPABvjB HMx5kHn3qB06rW+J60yTGbkETeDt4n/Sr8bO7giQt+iiY//UtLE2iBhPLfx+gQYg z4BwuFQP1sOICmzGH9tM3B3K8T6OLeDb9dKg3uUTtwJJcReMhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCoHavu12chuKZ0uvO0HIBgZc5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTY3MjgyZGMtZWY0Yi0z NDI0LWIxNGEtZDdjYzg1ZjU0OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVFcIzc6wgIrHWwliJPm22KaIXDl8dHqdRoYhTEOanRpTBockmMrQUh mPXeeyCBowsOToPMJztPVWj8lw7qHGXLZbEmTXUOTb2BQ1iFBJD2wWofaT+XIZcG objQQAtXoxD17eJL7QLcdZyjVl4kY7MmB3yZokfKVqA2lBEYRHDcNUOFHwjCVP9g k7Y7ukg3NCbFA4bioM/t97WilnJHKphZxObVxar9HyP0CvMqvP3anSUTo+Q/3nHV mtMEhQ5Fv1KpPIjAht0qg8+L2HWoI+Bgi2SbqRLgUVhU8tNsNNYRNyEMfmttdodh P9cMUZ9NmcvP3Q03Gh2JrQFye2m887A= -----END CERTIFICATE-----Generated at Fri Sep 25 18:19:33 2026 by rpki-client