$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc4b1bf7-0638-31b3-9501-a836559812b6.roa File: fc4b1bf7-0638-31b3-9501-a836559812b6.roa (raw, json) Hash identifier: 0WrkRYFDnvUvsAwGCprUPfdtnnttp9BncpgfVaiTotw= Subject key identifier: 16:C9:50:96:A7:B4:8C:C7:A9:87:AA:83:23:A4:FD:08:06:EF:FF:4D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498B4198CAD8600EF27ED200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc4b1bf7-0638-31b3-9501-a836559812b6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:41:98:ca:d8:60:0e:f2:7e:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=07d7188e-48ab-4d46-9e28-0e8253a612a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ad:4f:10:d6:63:c0:27:43:11:cd:80:68:5f: 10:b8:e8:72:75:a0:17:7b:1e:ed:e1:10:8b:91:19: c8:6d:c4:f5:be:db:18:43:89:71:51:03:42:a8:38: 7f:83:ea:28:18:e2:a9:e3:28:fe:23:f3:12:8d:5f: 8a:87:33:cb:29:ad:6d:b7:57:bb:48:de:af:7c:41: 30:7f:8e:5b:4c:e6:e2:48:91:72:cd:c0:1c:21:73: 45:51:17:d1:ec:c2:4c:a7:8a:89:87:e3:74:d6:db: 78:76:e1:8d:09:0c:5e:e1:f4:c6:08:7e:97:39:54: 97:37:bf:74:52:a6:49:9e:d4:60:0d:f1:a9:92:8b: 35:c1:4f:3e:6d:58:63:d4:24:29:ab:ae:5a:e7:60: 43:25:d2:4c:60:5c:dd:35:b6:89:f7:85:54:55:eb: 76:40:b3:d6:01:57:d7:05:10:98:c4:3e:3b:df:7a: da:e0:9c:48:36:ad:cf:a3:fa:35:f1:cb:29:c8:29: 1c:d7:a0:d3:b6:2c:3a:ab:31:e7:44:eb:55:bb:7a: 57:ef:68:f1:9c:8d:af:87:03:5f:48:55:68:de:cd: bf:fa:ec:9a:00:0b:d3:26:88:f5:5d:46:9b:d6:a3: e8:31:62:51:3c:8d:4f:86:bc:e5:18:c9:ab:4b:40: d5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C9:50:96:A7:B4:8C:C7:A9:87:AA:83:23:A4:FD:08:06:EF:FF:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc4b1bf7-0638-31b3-9501-a836559812b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:46:bc:e8:af:69:41:b3:41:a0:4e:14:2f:63:d0:10:67:97: 89:56:7c:89:4d:e4:83:1d:63:6e:53:b0:68:e0:51:5a:a2:6a: f8:9a:94:ed:0f:2d:80:68:0d:80:3c:30:c4:95:06:67:08:7c: b2:38:ba:87:7b:ef:be:78:29:78:ad:88:1d:df:32:80:37:64: 93:f5:9d:24:2d:66:f1:96:e5:42:3e:34:da:d3:44:70:7e:a4: 9c:78:53:77:ea:f4:c0:8e:06:b6:31:2a:10:ba:93:cc:7f:da: 42:6c:4f:c8:eb:39:4d:86:1f:bc:72:76:43:eb:77:e2:24:c1: bc:50:c6:de:63:34:55:1f:9b:b9:a8:1e:b2:d4:70:d5:5a:38: 1b:ef:a8:9d:aa:1e:eb:ba:a8:0b:18:c1:f4:6b:40:28:e3:15: 00:8f:04:56:9f:96:38:c7:b4:41:68:d3:d6:b8:38:04:88:c1: 9d:53:79:7c:98:a6:6d:5f:3f:9e:7a:fe:33:62:b7:83:7a:20: 82:22:cb:d1:f7:d1:d2:38:18:37:4a:f2:32:68:2b:0b:34:52: c6:15:6a:2a:29:54:6a:48:4f:36:a2:a8:4a:be:f4:ed:9c:be: a3:79:65:33:65:54:e1:12:b3:fa:e5:06:8a:aa:63:28:f8:c8: d3:66:ec:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji0GYythgDvJ+0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDdkNzE4OGUtNDhhYi00ZDQ2LTllMjgtMGU4MjUzYTYxMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq1PENZjwCdDEc2AaF8QuOhydaAXex7t4RCL kRnIbcT1vtsYQ4lxUQNCqDh/g+ooGOKp4yj+I/MSjV+KhzPLKa1tt1e7SN6vfEEw f45bTObiSJFyzcAcIXNFURfR7MJMp4qJh+N01tt4duGNCQxe4fTGCH6XOVSXN790 UqZJntRgDfGpkos1wU8+bVhj1CQpq65a52BDJdJMYFzdNbaJ94VUVet2QLPWAVfX BRCYxD4733ra4JxINq3Po/o18cspyCkc16DTtiw6qzHnROtVu3pX72jxnI2vhwNf SFVo3s2/+uyaAAvTJoj1XUab1qPoMWJRPI1PhrzlGMmrS0DVswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbJUJantIzHqYeqgyOk/QgG7/9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmM0YjFiZjctMDYzOC0z MWIzLTk1MDEtYTgzNjU1OTgxMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlGvOivaUGzQaBOFC9j0BBnl4lWfIlN5IMdY25TsGjgUVqiavialO0P LYBoDYA8MMSVBmcIfLI4uod77754KXitiB3fMoA3ZJP1nSQtZvGW5UI+NNrTRHB+ pJx4U3fq9MCOBrYxKhC6k8x/2kJsT8jrOU2GH7xydkPrd+IkwbxQxt5jNFUfm7mo HrLUcNVaOBvvqJ2qHuu6qAsYwfRrQCjjFQCPBFafljjHtEFo09a4OASIwZ1TeXyY pm1fP556/jNit4N6IIIiy9H30dI4GDdK8jJoKws0UsYVaiopVGpITzaiqEq+9O2c vqN5ZTNlVOESs/rlBoqqYyj4yNNm7PQ= -----END CERTIFICATE-----Generated at Fri Sep 25 14:54:22 2026 by rpki-client