$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa File: dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa (raw, json) Hash identifier: Jw2CzZcQJTlaNmvCDX9t7u0mLaGA+5I20r40AkjEjeM= Subject key identifier: 6D:EB:D0:6D:4D:0B:06:39:29:0F:D4:C2:7C:B0:80:E8:EF:57:1D:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497F72FC344A1ED70E226080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:72:fc:34:4a:1e:d7:0e:22:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dbc3c148-3b8b-4f28-b139-95cea3932094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:a9:a2:2e:13:bb:ab:eb:67:87:54:b7:05: 26:e3:2c:89:ec:60:09:b8:03:ac:0a:7e:7d:9f:75: d5:7f:16:a7:ba:31:f5:f7:13:61:8f:11:e9:d9:29: 90:69:6a:04:bc:cb:2e:73:15:e5:10:b7:17:ae:46: e5:af:fd:36:55:d4:87:e5:1e:10:c8:49:f2:f9:1a: b5:3f:ef:9e:49:65:57:00:24:48:68:1c:6b:36:24: b9:af:94:d7:67:e3:49:d1:37:89:9e:5d:f9:cf:b3: 50:4b:39:e6:e4:31:30:f7:86:fa:0e:4f:26:f3:31: 17:4f:86:11:5c:eb:36:52:31:03:61:98:43:dd:43: 04:c5:2c:b6:39:cc:04:9c:10:3b:93:af:e4:71:23: 33:c2:f8:29:9e:c3:7a:36:06:15:b6:47:21:e9:ea: 57:be:21:e9:f3:24:8a:8e:f9:77:cc:eb:91:3c:9b: 9b:8b:e0:ec:ad:07:d2:ce:77:ab:7b:c2:9a:c8:40: e4:0d:e5:bc:5a:68:9e:0d:59:80:05:8b:96:23:9f: 57:92:1a:2a:66:33:8e:69:84:a4:52:98:63:ed:76: 96:8b:d0:c5:ca:5c:27:f1:70:5f:a4:d8:fd:fe:db: 80:d4:71:26:c8:23:8a:c5:7a:52:ae:77:bf:c4:a5: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:D0:6D:4D:0B:06:39:29:0F:D4:C2:7C:B0:80:E8:EF:57:1D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:17:57:5c:20:f3:3c:01:33:8a:30:40:59:aa:7b:6f:59:4f: 3b:dd:28:4f:63:72:ee:32:31:fc:3c:3b:99:62:e5:b9:89:3a: 65:c1:82:c6:3b:d1:26:e4:a0:c9:ef:69:5f:70:28:b8:3f:41: c4:13:1e:5b:47:46:cf:7e:7f:b5:02:9d:a6:d6:f0:b7:3e:54: 77:c7:d4:8a:fc:72:c1:54:be:79:fe:28:e3:54:ad:2f:a2:20: 6b:36:70:a7:2a:b7:89:59:fc:5f:2b:a4:9f:6c:cd:58:c6:5d: ce:bd:e2:75:52:6e:cb:08:1c:4d:48:e3:56:94:06:c3:48:ad: 98:df:84:63:87:16:7c:ed:01:db:a9:5f:8b:fc:90:54:83:b1: 79:04:b8:6e:5f:da:0b:5f:ae:1a:a2:49:2f:a2:94:e7:4b:df: fd:ce:d3:ce:bf:ca:71:fd:0a:8b:7e:dd:8c:db:a4:a1:dd:bf: 60:c2:24:a7:65:1b:66:b1:e8:6d:05:bf:15:ff:ac:66:c6:8c: e1:94:11:ae:c9:28:6c:81:16:82:dd:46:d6:15:94:aa:90:29: a7:8e:0a:b6:aa:5b:a2:dc:ac:8e:36:e6:e3:43:d8:a6:ba:d6: 7f:ff:8b:d1:74:b0:aa:ea:98:6e:31:72:00:ce:31:ee:a6:a2: a5:3b:da:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf3L8NEoe1w4iYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGJjM2MxNDgtM2I4Yi00ZjI4LWIxMzktOTVjZWEzOTMyMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVypoi4Tu6vrZ4dUtwUm4yyJ7GAJuAOsCn59 n3XVfxanujH19xNhjxHp2SmQaWoEvMsucxXlELcXrkblr/02VdSH5R4QyEny+Rq1 P++eSWVXACRIaBxrNiS5r5TXZ+NJ0TeJnl35z7NQSznm5DEw94b6Dk8m8zEXT4YR XOs2UjEDYZhD3UMExSy2OcwEnBA7k6/kcSMzwvgpnsN6NgYVtkch6epXviHp8ySK jvl3zOuRPJubi+DsrQfSznere8KayEDkDeW8WmieDVmABYuWI59XkhoqZjOOaYSk Uphj7XaWi9DFylwn8XBfpNj9/tuA1HEmyCOKxXpSrne/xKWcKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3r0G1NCwY5KQ/UwnywgOjvVx1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZiOGM1ZmYtNDA0NS0z NzJmLWJiMzEtOTNmNTE2NTFjMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQXV1wg8zwBM4owQFmqe29ZTzvdKE9jcu4yMfw8O5li5bmJOmXBgsY7 0SbkoMnvaV9wKLg/QcQTHltHRs9+f7UCnabW8Lc+VHfH1Ir8csFUvnn+KONUrS+i IGs2cKcqt4lZ/F8rpJ9szVjGXc694nVSbssIHE1I41aUBsNIrZjfhGOHFnztAdup X4v8kFSDsXkEuG5f2gtfrhqiSS+ilOdL3/3O086/ynH9Cot+3YzbpKHdv2DCJKdl G2ax6G0FvxX/rGbGjOGUEa7JKGyBFoLdRtYVlKqQKaeOCraqW6LcrI425uND2Ka6 1n//i9F0sKrqmG4xcgDOMe6moqU72j8= -----END CERTIFICATE-----Generated at Sat Sep 26 16:40:35 2026 by rpki-client