$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c585935b-4b6c-3334-9d39-bd1900ad7dca.roa File: c585935b-4b6c-3334-9d39-bd1900ad7dca.roa (raw, json) Hash identifier: MMk+u3gxu6sdiNPKFbEy/GWQSNJT91WhXp5pm+UHwsU= Subject key identifier: 48:4B:54:A6:3A:93:D8:5C:D9:A9:0C:51:50:D2:1C:5A:8C:9B:2C:A3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4972F5912F70862186131C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c585935b-4b6c-3334-9d39-bd1900ad7dca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:f5:91:2f:70:86:21:86:13:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a590b7a5-deb0-4a00-ba07-a3f241118aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:59:72:07:97:1f:ff:e3:e9:18:dd:d9:18: dc:89:95:0b:e4:35:77:bd:62:6d:ac:ea:67:7c:87: 36:a2:6b:6f:d2:0b:ae:6f:17:e6:ef:ab:09:fd:1b: 72:91:a2:0c:15:27:cc:66:ef:55:07:36:77:50:f0: 19:a0:8f:cb:83:55:b6:cb:44:5d:48:c1:3d:b9:03: b1:e1:b1:0c:8f:8b:49:0f:e7:59:ea:3e:7f:d4:a0: 75:19:b5:9f:54:a3:a6:f1:fa:41:c6:38:86:49:b2: 0b:20:c0:be:85:31:39:cd:64:15:ae:e8:bf:86:7b: 6f:b9:a0:43:f0:5c:cb:6e:a4:ef:94:26:0c:7f:a6: 63:37:17:2c:1a:8e:73:6f:22:48:2f:24:86:6e:f0: 54:14:1f:3e:a5:95:ee:a5:29:e2:45:30:8d:68:80: a5:7c:08:98:00:9c:b8:63:8b:5a:72:d2:cf:7f:45: 4d:d6:23:02:60:66:9c:f1:e9:02:94:80:52:87:ef: 5a:5a:2d:0a:dd:cd:f7:8b:fb:c8:0b:d7:59:2d:1e: 16:4e:9e:4e:3a:50:e2:fe:63:ac:8c:06:29:95:ec: 5b:d3:0a:b7:67:8f:6d:af:a5:27:87:85:13:e7:0c: ba:ca:28:3f:3a:2e:51:48:ce:c6:8a:87:a9:85:90: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4B:54:A6:3A:93:D8:5C:D9:A9:0C:51:50:D2:1C:5A:8C:9B:2C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c585935b-4b6c-3334-9d39-bd1900ad7dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:62:f3:ae:5c:d3:e5:b0:f0:8d:9b:15:b8:f1:d4:e5:d0:70: 29:db:9c:13:4a:27:c0:e7:6b:c8:74:26:2f:39:8a:0b:24:7f: f5:28:7d:58:41:30:4d:cf:77:58:a6:09:bc:ea:d7:2a:ba:8c: 8b:17:e0:b7:3d:1b:9b:e6:66:54:16:43:a5:e9:ad:22:25:27: 6c:63:c0:44:c6:f0:b6:3e:0d:f2:54:c1:61:10:4c:0b:cd:49: 2a:f7:60:50:fa:01:c3:b9:30:b9:94:40:28:9e:d2:34:57:43: 1f:4f:a2:7a:e9:ae:71:9b:60:45:46:8b:63:02:1d:e5:ff:76: a0:9a:65:97:4b:7b:f2:33:1d:70:a5:6f:42:6d:8e:0e:e5:c6: 73:5f:c6:86:b2:e1:c7:12:39:03:f6:b4:5d:f4:d2:62:cc:4a: 50:aa:69:a6:83:02:b3:8e:9a:4c:21:d2:94:8a:83:d8:53:e5: 67:9e:bb:0c:8b:8f:95:e4:2f:a5:81:11:87:fd:27:a0:05:59: fb:cf:e8:99:e6:2d:80:bc:9c:57:a9:3d:fb:8f:b8:d8:f0:e7: a3:29:35:d1:7b:43:e6:3b:5d:65:05:a5:12:27:8e:8b:86:86: b5:26:91:cf:8c:d1:8e:be:3c:8e:2c:0f:27:32:ea:8d:cc:07: 68:bb:df:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcvWRL3CGIYYTHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTU5MGI3YTUtZGViMC00YTAwLWJhMDctYTNmMjQxMTE4YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2dZcgeXH//j6Rjd2RjciZUL5DV3vWJtrOpn fIc2omtv0guubxfm76sJ/RtykaIMFSfMZu9VBzZ3UPAZoI/Lg1W2y0RdSME9uQOx 4bEMj4tJD+dZ6j5/1KB1GbWfVKOm8fpBxjiGSbILIMC+hTE5zWQVrui/hntvuaBD 8FzLbqTvlCYMf6ZjNxcsGo5zbyJILySGbvBUFB8+pZXupSniRTCNaIClfAiYAJy4 Y4tactLPf0VN1iMCYGac8ekClIBSh+9aWi0K3c33i/vIC9dZLR4WTp5OOlDi/mOs jAYplexb0wq3Z49tr6Unh4UT5wy6yig/Oi5RSM7GioephZCYzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhLVKY6k9hc2akMUVDSHFqMmyyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzU4NTkzNWItNGI2Yy0z MzM0LTlkMzktYmQxOTAwYWQ3ZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJi865c0+Ww8I2bFbjx1OXQcCnbnBNKJ8Dna8h0Ji85igskf/UofVhB ME3Pd1imCbzq1yq6jIsX4Lc9G5vmZlQWQ6XprSIlJ2xjwETG8LY+DfJUwWEQTAvN SSr3YFD6AcO5MLmUQCie0jRXQx9PonrprnGbYEVGi2MCHeX/dqCaZZdLe/IzHXCl b0Jtjg7lxnNfxoay4ccSOQP2tF300mLMSlCqaaaDArOOmkwh0pSKg9hT5WeeuwyL j5XkL6WBEYf9J6AFWfvP6JnmLYC8nFepPfuPuNjw56MpNdF7Q+Y7XWUFpRInjouG hrUmkc+M0Y6+PI4sDycy6o3MB2i7318= -----END CERTIFICATE-----Generated at Fri Sep 25 19:04:58 2026 by rpki-client