$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa File: 21512194-aac9-3b75-b614-eb08260f717b.roa (raw, json) Hash identifier: ifDtI2C7KU1he5ZJb5/5oJrxDc/o6X/C2qNnbMIZE40= Subject key identifier: 25:2A:87:09:CA:8C:CC:69:48:AF:52:B9:96:77:C6:41:54:60:C9:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CDF576195DF5DD10746C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:df:57:61:95:df:5d:d1:07:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=97316122-07a6-4a69-9ea4-9b8ab0ad9c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:3f:95:12:42:d9:6f:eb:0c:7f:d6:32:d6: 9d:4b:57:55:1d:b6:94:2b:ac:7c:f3:2d:7c:e9:a7: 2d:b0:b2:8d:4d:7a:ca:57:bd:55:fe:d0:8a:ca:67: 33:51:ff:10:d6:7d:6c:81:65:56:49:46:8b:64:88: ea:48:78:a3:38:e6:0c:33:2b:7a:74:48:4d:b3:d7: 3d:b5:ad:38:e9:3c:04:14:72:af:3a:52:d5:68:39: a1:20:04:bb:70:6d:98:da:d5:fe:57:cc:1f:75:c4: 35:d1:e3:64:d0:6b:f8:2c:68:0a:cb:8b:32:59:a4: 14:f2:b9:3d:6d:e0:dd:1e:cc:90:f9:bd:e2:6a:52: d3:1d:f7:04:ea:f8:64:f1:7b:55:1b:be:b3:2f:1d: e4:e8:65:e2:98:b3:e3:79:b3:53:17:1e:e9:16:6f: 0f:2c:f3:1c:45:6a:a6:7d:aa:6c:31:90:88:e8:a9: 9c:1d:de:2e:ba:de:4e:32:5e:54:52:c7:bb:22:a9: 37:7e:35:f0:2d:5a:d1:56:75:e1:cc:b3:17:71:9e: 78:c4:7b:cc:bd:69:7a:a5:86:cd:25:57:46:75:8c: 36:24:1d:eb:71:7b:71:b4:1e:e1:b1:03:d4:11:f6: 59:30:f2:be:6e:a2:6a:7d:f0:97:42:63:e0:74:7a: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2A:87:09:CA:8C:CC:69:48:AF:52:B9:96:77:C6:41:54:60:C9:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ea:73:7d:38:12:6a:c0:4a:27:ed:ce:95:9a:95:e0:c7:fa: 39:6b:e1:3c:40:79:ac:e5:f8:ae:ba:ed:79:21:ac:79:e8:a3: fe:ec:4c:d9:b9:b0:b2:ff:b8:a2:b6:55:ad:61:e4:85:4a:ee: 41:49:c6:01:bb:1f:0d:f3:7f:8b:03:54:2b:a2:81:6f:f1:27: 61:32:2b:ba:5e:14:ff:38:15:3c:53:44:29:ae:28:29:d4:d0: 95:b8:ba:1c:e9:39:15:ba:20:f4:51:63:d0:b4:01:ce:83:23: e0:69:70:04:9c:49:41:03:b3:3f:0d:a1:98:88:b4:1e:55:76: 30:2a:4f:84:a6:e2:46:c0:b7:1c:00:79:6d:69:a1:c0:28:45: 49:75:39:1e:7f:f7:00:99:38:75:db:a2:55:ba:98:63:56:31: 66:79:a0:23:8d:c5:9f:5e:73:3a:57:93:5d:ac:06:0e:d5:bd: de:c6:db:86:55:8c:0b:bf:5a:06:7a:c7:12:b4:4b:dd:92:a4: e9:88:08:05:99:c3:ac:06:c1:ee:aa:2d:92:86:65:44:b5:80: 23:f6:b2:e8:18:f2:2a:fa:5b:3c:e8:db:d5:00:de:aa:17:bb: 84:b1:cc:a6:1c:40:d9:7d:ab:c2:3f:1b:61:fe:eb:5e:f8:0a: b8:86:83:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfN9XYZXfXdEHRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTczMTYxMjItMDdhNi00YTY5LTllYTQtOWI4YWIwYWQ5YzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYQ/lRJC2W/rDH/WMtadS1dVHbaUK6x88y18 6actsLKNTXrKV71V/tCKymczUf8Q1n1sgWVWSUaLZIjqSHijOOYMMyt6dEhNs9c9 ta046TwEFHKvOlLVaDmhIAS7cG2Y2tX+V8wfdcQ10eNk0Gv4LGgKy4syWaQU8rk9 beDdHsyQ+b3ialLTHfcE6vhk8XtVG76zLx3k6GXimLPjebNTFx7pFm8PLPMcRWqm fapsMZCI6KmcHd4uut5OMl5UUse7Iqk3fjXwLVrRVnXhzLMXcZ54xHvMvWl6pYbN JVdGdYw2JB3rcXtxtB7hsQPUEfZZMPK+bqJqffCXQmPgdHpurQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUqhwnKjMxpSK9SuZZ3xkFUYMmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjE1MTIxOTQtYWFjOS0z Yjc1LWI2MTQtZWIwODI2MGY3MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPqc304EmrASiftzpWaleDH+jlr4TxAeazl+K667XkhrHnoo/7sTNm5 sLL/uKK2Va1h5IVK7kFJxgG7Hw3zf4sDVCuigW/xJ2EyK7peFP84FTxTRCmuKCnU 0JW4uhzpORW6IPRRY9C0Ac6DI+BpcAScSUEDsz8NoZiItB5VdjAqT4Sm4kbAtxwA eW1pocAoRUl1OR5/9wCZOHXbolW6mGNWMWZ5oCONxZ9eczpXk12sBg7Vvd7G24ZV jAu/WgZ6xxK0S92SpOmICAWZw6wGwe6qLZKGZUS1gCP2sugY8ir6Wzzo29UA3qoX u4SxzKYcQNl9q8I/G2H+6174CriGgxU= -----END CERTIFICATE-----Generated at Fri Sep 25 21:33:03 2026 by rpki-client