$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa File: 1b60dea6-b796-375b-92fa-3d1691aacc51.roa (raw, json) Hash identifier: ynbuRGafdnumOPl20k7stMTdtRDH9BkS1M5iU6PmVMc= Subject key identifier: 08:5D:2C:98:B9:AE:73:66:6B:44:2C:DB:61:36:CE:21:98:9E:52:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7B2200B737E68C77E177DA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.217.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:00:b7:37:e6:8c:77:e1:77:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=45240b1f-0879-40e4-a8b5-aaa77162560c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:a0:3a:8a:3a:bd:08:ed:a6:e3:31:21:98: f8:9e:0e:88:78:35:44:61:7b:60:74:bb:c0:88:1a: 0c:a4:13:98:4c:12:82:5d:f0:f9:60:cb:d1:d8:02: c1:3a:5b:48:0f:79:1b:67:75:d1:92:69:1b:95:ff: 5a:75:81:39:29:a0:05:9d:71:ac:ed:3c:af:57:43: 1c:b9:db:95:6b:7b:f8:01:08:b6:ce:e7:7e:39:0b: 56:d3:41:87:4d:87:95:ad:04:31:ac:c0:de:c4:e9: be:1e:32:82:40:bb:af:e2:74:57:3a:5d:27:cd:1a: 8c:44:f6:92:74:c3:c4:80:7f:45:1b:7d:18:0a:c4: d5:d7:84:9a:31:5f:07:da:19:5c:53:84:47:17:24: 81:6c:42:fc:69:a1:91:09:ac:3d:44:86:6e:57:0b: 7b:ca:ba:f4:5e:71:b8:18:6c:76:78:06:ac:83:68: 16:f5:cc:f5:85:ed:7f:10:09:99:fe:19:97:4b:44: 9a:ae:c7:02:08:0c:4c:b4:fd:e4:ce:0a:5a:81:7d: 5f:12:d8:d5:b1:1e:e4:58:9d:41:e6:eb:a0:9c:5e: b9:af:f6:d7:b2:32:6b:36:c4:61:69:1a:6a:b3:17: 89:35:4c:cb:f2:c1:3d:d8:4f:0a:f0:e8:4b:56:93: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5D:2C:98:B9:AE:73:66:6B:44:2C:DB:61:36:CE:21:98:9E:52:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:be:99:91:2f:fe:a7:ae:92:5e:2c:27:00:54:4d:55:e5:ed: ba:26:6e:cc:73:f7:ab:8b:0f:97:37:12:68:20:a2:13:f6:25: 52:ae:27:b3:d9:89:be:33:3e:90:56:1f:04:56:90:6b:94:c5: e1:ec:4f:fd:a2:dc:8a:70:c0:33:6f:7e:db:83:9e:a1:e8:f0: 48:7d:00:64:49:93:ae:c1:8f:4f:ce:ef:e5:14:b1:53:52:aa: f7:53:11:81:4b:a0:3a:ea:0a:33:bc:cb:09:10:b2:29:15:c4: 61:80:f0:64:1c:cb:ea:1a:d2:d8:c4:73:23:5a:1b:ea:8a:28: 14:c9:35:ca:c0:c5:c8:11:5a:c3:c1:27:3b:a4:87:d6:37:0e: c5:02:7b:fd:b2:fb:37:05:a2:5b:45:31:41:c5:03:af:b8:60: 8f:49:cd:b6:fe:d0:e9:44:d3:2d:55:da:eb:85:f0:b4:71:b1: b0:94:85:38:94:12:ea:a7:e8:ff:96:4c:03:97:88:0d:75:7b: da:ef:48:86:ce:55:ee:29:c0:f3:4d:15:79:a0:8b:0c:4c:7c: 2b:0f:df:c4:65:bf:f6:67:1b:a5:5a:ad:3d:74:ee:f5:b4:4b: 0c:eb:f6:4e:6f:09:e8:fd:f3:0c:62:d4:65:43:e4:2f:7a:05: 53:f7:60:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgC3N+aMd+F32gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk NDUyNDBiMWYtMDg3OS00MGU0LWE4YjUtYWFhNzcxNjI1NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNugOoo6vQjtpuMxIZj4ng6IeDVEYXtgdLvA iBoMpBOYTBKCXfD5YMvR2ALBOltID3kbZ3XRkmkblf9adYE5KaAFnXGs7TyvV0Mc uduVa3v4AQi2zud+OQtW00GHTYeVrQQxrMDexOm+HjKCQLuv4nRXOl0nzRqMRPaS dMPEgH9FG30YCsTV14SaMV8H2hlcU4RHFySBbEL8aaGRCaw9RIZuVwt7yrr0XnG4 GGx2eAasg2gW9cz1he1/EAmZ/hmXS0SarscCCAxMtP3kzgpagX1fEtjVsR7kWJ1B 5uugnF65r/bXsjJrNsRhaRpqsxeJNUzL8sE92E8K8OhLVpPaYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhdLJi5rnNma0Qs22E2ziGYnlJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWI2MGRlYTYtYjc5Ni0z NzViLTkyZmEtM2QxNjkxYWFjYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW+mZEv/qeukl4sJwBUTVXl7bombsxz96uLD5c3EmggohP2JVKuJ7PZ ib4zPpBWHwRWkGuUxeHsT/2i3IpwwDNvftuDnqHo8Eh9AGRJk67Bj0/O7+UUsVNS qvdTEYFLoDrqCjO8ywkQsikVxGGA8GQcy+oa0tjEcyNaG+qKKBTJNcrAxcgRWsPB Jzukh9Y3DsUCe/2y+zcFoltFMUHFA6+4YI9Jzbb+0OlE0y1V2uuF8LRxsbCUhTiU Euqn6P+WTAOXiA11e9rvSIbOVe4pwPNNFXmgiwxMfCsP38Rlv/ZnG6VarT107vW0 Swzr9k5vCej98wxi1GVD5C96BVP3YNg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:51 2025 by rpki-client