$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4013574-3584-3d13-8561-b1935a5229a8.roa File: e4013574-3584-3d13-8561-b1935a5229a8.roa (raw, json) Hash identifier: tAOj0Zuwg4Rt5Cnkj4CMv/b2hMooVliIW7oi0SdQd30= Subject key identifier: E9:BA:8E:A8:3C:DF:C6:38:6C:EE:F4:8E:65:11:03:12:1B:07:F3:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EA7A12EAF65AE572C9F0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4013574-3584-3d13-8561-b1935a5229a8.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.217.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ea:7a:12:ea:f6:5a:e5:72:c9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=0c7e2bf3-694b-4fb5-8658-cac6c06eec51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:74:d4:f4:20:df:94:00:b2:4d:ba:b1:51: 96:f9:ca:a9:47:81:45:de:98:58:d4:73:01:47:93: c5:7b:de:f2:e3:60:46:06:0f:58:70:c5:9e:b9:f1: 52:3d:f3:61:b5:7b:fd:84:eb:aa:ae:59:95:01:65: fb:74:da:f7:2a:37:eb:71:ee:76:92:97:56:67:61: 34:32:1f:cd:f0:cd:16:d8:65:ab:e3:cf:75:95:ea: f4:26:64:de:78:0f:dd:84:cd:1d:f1:ab:f1:39:94: ec:47:98:5a:27:4d:9d:d9:7b:56:10:a5:5b:59:c7: 9f:81:d7:f2:02:26:8d:eb:1b:41:b1:8c:cd:3a:22: 5f:a2:d4:8f:a9:b9:1e:ac:ec:f2:80:49:db:fa:d9: c3:d3:0a:84:a7:32:bf:31:24:21:01:02:71:e9:43: 79:7c:dc:1f:99:38:8e:5c:62:84:f1:c1:09:95:2d: f3:17:50:4e:9f:c7:0d:0c:c7:cd:4e:99:af:a1:ed: 67:74:a3:19:1d:4b:e9:d8:30:8c:a5:a1:23:3f:49: 99:22:10:8c:cd:3b:1b:62:d5:7a:44:bf:b4:0f:72: fa:a5:08:ab:bd:9f:92:72:61:49:3f:6a:f9:bc:72: 02:5d:1a:38:9a:81:7d:27:09:d7:8f:7b:83:61:4f: 89:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BA:8E:A8:3C:DF:C6:38:6C:EE:F4:8E:65:11:03:12:1B:07:F3:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4013574-3584-3d13-8561-b1935a5229a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:20:25:b7:0e:53:30:89:7f:84:bc:7d:fc:a9:da:f6:8c:e7: d1:d4:40:8f:37:db:4a:30:ba:5e:dd:d3:ea:98:9f:34:c8:71: a4:c4:ea:ee:b0:23:2d:ca:b5:0c:25:ce:cb:ae:7c:22:14:1c: 51:4c:b1:b8:44:26:7d:02:36:a1:0e:a8:98:42:1e:2b:32:4d: 84:65:0e:56:5f:cc:a5:5b:c4:aa:f4:12:cb:10:88:4c:08:7b: ad:83:9b:fb:c3:d8:3d:5a:21:d5:b9:f2:77:15:28:a9:28:94: ba:5a:0e:67:ee:06:4d:cb:fa:2b:a5:b9:46:a5:e4:fb:4e:9b: 6c:bb:68:74:9a:37:81:ae:16:ac:bc:0d:76:94:5e:ef:4a:7c: e0:d6:87:57:46:0e:2a:55:db:04:a9:2e:49:10:8e:e5:59:80: 58:6b:40:52:a4:3c:13:58:27:21:d6:ba:8f:ce:61:97:2b:5b: a6:b6:0e:68:d7:8a:90:d5:df:91:b3:a4:a8:b8:02:28:a7:a2: e2:5e:6e:24:01:9e:8e:13:36:04:78:e8:3d:f2:67:63:2a:5e: cd:a7:b4:d6:49:a4:f1:9c:26:b6:1a:35:43:65:1b:ae:1a:e4: 37:d8:79:77:73:15:de:52:fa:35:38:99:61:0c:e8:cf:d9:e7: 55:d1:f2:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikup6Eur2WuVyyfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MGM3ZTJiZjMtNjk0Yi00ZmI1LTg2NTgtY2FjNmMwNmVlYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lx01PQg35QAsk26sVGW+cqpR4FF3phY1HMB R5PFe97y42BGBg9YcMWeufFSPfNhtXv9hOuqrlmVAWX7dNr3Kjfrce52kpdWZ2E0 Mh/N8M0W2GWr4891ler0JmTeeA/dhM0d8avxOZTsR5haJ02d2XtWEKVbWcefgdfy AiaN6xtBsYzNOiJfotSPqbkerOzygEnb+tnD0wqEpzK/MSQhAQJx6UN5fNwfmTiO XGKE8cEJlS3zF1BOn8cNDMfNTpmvoe1ndKMZHUvp2DCMpaEjP0mZIhCMzTsbYtV6 RL+0D3L6pQirvZ+ScmFJP2r5vHICXRo4moF9JwnXj3uDYU+JsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm6jqg838Y4bO70jmURAxIbB/OQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTQwMTM1NzQtMzU4NC0z ZDEzLTg1NjEtYjE5MzVhNTIyOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACogJbcOUzCJf4S8ffyp2vaM59HUQI8320owul7d0+qYnzTIcaTE6u6w Iy3KtQwlzsuufCIUHFFMsbhEJn0CNqEOqJhCHisyTYRlDlZfzKVbxKr0EssQiEwI e62Dm/vD2D1aIdW58ncVKKkolLpaDmfuBk3L+iuluUal5PtOm2y7aHSaN4GuFqy8 DXaUXu9KfODWh1dGDipV2wSpLkkQjuVZgFhrQFKkPBNYJyHWuo/OYZcrW6a2DmjX ipDV35GzpKi4AiinouJebiQBno4TNgR46D3yZ2MqXs2ntNZJpPGcJrYaNUNlG64a 5DfYeXdzFd5S+jU4mWEM6M/Z51XR8i8= -----END CERTIFICATE-----Generated at Sun Nov 15 19:30:52 2026 by rpki-client