$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa File: ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa (raw, json) Hash identifier: O9NNuucVPGN2LSVDpS6o54gJ7g5ZM9TQ1Utq6gbxWXc= Subject key identifier: 89:89:8F:F2:27:18:31:19:96:2A:5A:AF:57:64:6C:E5:7A:3E:51:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F5E62E95BCF7EF65C50C93D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 15169 IP address blocks: 172.217.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e9:5b:cf:7e:f6:5c:50:c9:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=8097e20c-d43e-4690-af66-d93b34fb5c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d6:68:7a:5a:42:3a:d5:d1:03:f6:6b:0e:3f: ae:d0:63:af:43:5a:20:71:a8:c3:5a:d4:2a:04:ac: f5:d8:22:74:1d:65:64:3d:25:e6:6c:04:e9:33:c7: 19:a0:95:61:08:20:3a:bf:97:d0:6e:c5:f3:a3:98: 01:4c:c6:24:a0:22:3b:ea:f6:0c:af:68:dc:71:65: 59:d1:55:e9:ad:e8:72:17:19:66:cd:a3:db:97:cd: e2:4e:82:dd:79:e9:ce:7e:11:b4:09:b3:4f:d7:7c: f9:4c:a4:91:32:3d:13:18:a9:98:8c:01:4e:67:fc: 9d:dc:13:d1:57:14:8c:5c:4d:03:8c:e3:14:aa:81: f9:75:60:50:4d:28:ea:07:20:83:ef:09:01:88:52: dc:0c:fc:56:d6:6c:34:ed:20:e7:79:2e:62:84:a8: 20:3b:bc:c8:e9:5d:ce:ab:c7:a1:71:80:57:f4:2a: e9:90:ed:03:f7:11:a2:6d:14:80:5b:f2:1b:73:e1: 11:61:25:93:b4:ff:46:03:04:ff:92:9c:a4:18:7a: bf:18:8d:eb:ee:38:d6:d9:35:cf:b8:83:8a:bd:8a: fe:39:ac:82:bb:15:0b:4e:dc:28:34:64:83:16:8e: c3:14:0c:88:da:80:31:b4:ad:4f:ce:63:a3:f8:c3: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:89:8F:F2:27:18:31:19:96:2A:5A:AF:57:64:6C:E5:7A:3E:51:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a5:10:f7:09:1b:01:46:9b:12:08:83:4b:8b:d9:a1:ee:99: f5:70:06:49:55:f8:4f:c3:28:93:db:7b:cf:09:ec:eb:b4:0c: 34:fe:ba:62:a1:8d:d9:50:ce:4f:8f:39:f7:99:6c:3f:77:4d: 72:80:23:e4:f0:18:5f:f7:0f:d0:9b:93:06:fb:a5:99:21:2b: ac:3a:e8:8c:08:83:1d:31:ac:08:0e:59:28:dd:a5:05:8e:33: fe:50:a5:a3:f0:06:72:5a:b7:9f:6c:9c:2c:6d:f2:48:a2:bf: 09:1e:1c:e5:0e:5c:a2:81:5c:be:d2:b8:99:3d:a6:ad:8a:6a: 11:96:90:3e:88:57:87:c4:07:c7:a2:bc:69:c4:97:36:b6:f2: 75:b2:be:39:05:0d:5f:16:66:2c:67:ce:4b:61:a0:06:40:b1: 0a:8c:bb:36:1b:09:c6:aa:03:7e:94:cb:98:ca:0e:1b:1b:fa: 12:bd:ec:55:a5:fb:70:1e:d2:cd:ad:5a:da:2e:29:49:29:77: 69:c7:0d:36:d6:f3:4d:0a:3c:1c:f2:77:14:a9:8d:ed:f0:25: 3a:01:da:f7:56:98:4f:25:98:f4:05:d9:f1:1c:80:f7:48:21: 6d:97:8e:d0:de:28:2e:41:06:28:b6:51:95:dd:be:84:61:ce: 98:94:c7:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYulbz372XFDJPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ODA5N2UyMGMtZDQzZS00NjkwLWFmNjYtZDkzYjM0ZmI1YzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNZoelpCOtXRA/ZrDj+u0GOvQ1ogcajDWtQq BKz12CJ0HWVkPSXmbATpM8cZoJVhCCA6v5fQbsXzo5gBTMYkoCI76vYMr2jccWVZ 0VXprehyFxlmzaPbl83iToLdeenOfhG0CbNP13z5TKSRMj0TGKmYjAFOZ/yd3BPR VxSMXE0DjOMUqoH5dWBQTSjqByCD7wkBiFLcDPxW1mw07SDneS5ihKggO7zI6V3O q8ehcYBX9CrpkO0D9xGibRSAW/Ibc+ERYSWTtP9GAwT/kpykGHq/GI3r7jjW2TXP uIOKvYr+OayCuxULTtwoNGSDFo7DFAyI2oAxtK1PzmOj+MN1NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImJj/InGDEZlipar1dkbOV6PlEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmEwNjlmZjQtZjU1Zi0z NGE0LWJlNjktYTY4Y2YxNWJmNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKlEPcJGwFGmxIIg0uL2aHumfVwBklV+E/DKJPbe88J7Ou0DDT+umKh jdlQzk+POfeZbD93TXKAI+TwGF/3D9Cbkwb7pZkhK6w66IwIgx0xrAgOWSjdpQWO M/5QpaPwBnJat59snCxt8kiivwkeHOUOXKKBXL7SuJk9pq2KahGWkD6IV4fEB8ei vGnElza28nWyvjkFDV8WZixnzkthoAZAsQqMuzYbCcaqA36Uy5jKDhsb+hK97FWl +3Ae0s2tWtouKUkpd2nHDTbW800KPBzydxSpje3wJToB2vdWmE8lmPQF2fEcgPdI IW2XjtDeKC5BBii2UZXdvoRhzpiUx/I= -----END CERTIFICATE-----Generated at Sun Nov 15 11:38:14 2026 by rpki-client