$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa File: 29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa (raw, json) Hash identifier: i0lL6JDuG3AmOf2HF8VR7yj8GUG3IcpK5hbwhi6yBBM= Subject key identifier: 7F:0E:1F:41:F0:0E:6B:68:D2:03:46:89:64:F2:1C:25:02:19:8E:00 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE195CF7A32F29DEE70240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.217.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:19:5c:f7:a3:2f:29:de:e7:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4354ada2-f67f-445a-a288-208f80156d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:bb:12:e9:c2:d9:6d:dd:8d:83:28:91:22: 59:34:ff:6a:99:fc:75:c1:fd:cf:25:6a:c7:37:97: 7f:ae:d5:be:1f:29:3b:c1:f8:df:d4:73:48:87:ad: 8a:5a:1d:09:3f:9f:e0:f6:e4:0f:d6:8d:d5:0b:e1: 77:48:59:91:6b:ca:56:21:54:dc:cb:c4:28:1e:42: 01:3e:5e:93:e4:66:37:96:2a:a0:5a:e0:7d:26:15: 32:ba:f5:2c:6c:ef:27:46:ce:94:1b:af:2c:5a:11: 0a:73:44:d5:67:cd:4c:3c:73:b3:da:b7:57:5a:bf: 40:05:a0:23:87:7a:48:8a:9a:4c:0f:b8:0f:fe:8d: 27:73:54:a4:c3:b9:76:7a:7c:47:5e:93:a7:96:11: 4a:60:c6:32:bf:3a:fe:ce:fd:47:19:92:d3:03:99: 01:71:04:5a:37:79:93:4b:fd:b1:b1:a1:f7:d4:88: da:68:03:cd:5a:fc:23:e0:c4:cd:3c:74:45:82:06: 61:20:e9:2e:67:c1:bb:a1:77:87:90:0e:59:cc:04: 3f:7a:42:a5:07:5a:5b:aa:03:e1:e9:57:0d:50:8b: 14:e1:75:5c:64:52:5e:fd:12:5b:7e:1b:d5:2c:57: 88:ea:63:9d:79:0e:22:e4:37:cd:3d:2e:1b:f3:00: 20:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0E:1F:41:F0:0E:6B:68:D2:03:46:89:64:F2:1C:25:02:19:8E:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:58:17:34:b6:e6:67:17:fa:17:3b:49:3a:5e:d1:6c:ef:2e: 77:d1:2f:59:df:ef:4f:0c:c3:12:df:de:4d:ff:0e:74:f3:96: 00:bf:a0:52:cc:bc:4a:d0:d2:59:28:5e:cb:14:ba:35:0e:95: 2d:c8:2e:b5:8d:e2:da:9b:65:5e:ed:c9:7f:d0:1b:cf:7e:48: be:fc:72:05:4c:be:e2:fa:ae:85:71:c8:3f:70:e0:30:a0:66: 36:7c:51:f1:21:c2:b6:64:a3:11:b7:c0:33:9e:77:2c:7f:e1: 8e:ab:cc:3a:db:50:d8:f6:5f:c7:6b:e9:05:ea:cb:9f:94:78: 39:dd:19:37:af:b8:cd:b0:91:a0:16:95:5c:9c:dc:dd:f2:22: 13:60:9b:5e:29:ba:c4:7c:2d:d2:f3:67:d1:74:c6:40:65:6b: 76:9f:88:10:38:f8:66:9d:ff:ec:e2:47:3d:be:e1:86:96:e3: 0f:68:90:78:16:3d:7b:2d:4d:60:87:6f:e0:a5:2c:c5:c6:3b: 22:79:0e:f6:a4:87:af:6d:0d:bc:40:f2:38:46:e1:4c:a9:df: a1:9b:d0:83:b4:b6:7e:0a:ba:72:2a:bb:4c:09:f9:35:8a:73: 5a:15:02:0c:8e:e4:d5:30:1d:8d:d4:9b:09:b9:ec:92:c5:c8: 4b:41:b0:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhlc96MvKd7nAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDM1NGFkYTItZjY3Zi00NDVhLWEyODgtMjA4ZjgwMTU2ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4a7EunC2W3djYMokSJZNP9qmfx1wf3PJWrH N5d/rtW+Hyk7wfjf1HNIh62KWh0JP5/g9uQP1o3VC+F3SFmRa8pWIVTcy8QoHkIB Pl6T5GY3liqgWuB9JhUyuvUsbO8nRs6UG68sWhEKc0TVZ81MPHOz2rdXWr9ABaAj h3pIippMD7gP/o0nc1Skw7l2enxHXpOnlhFKYMYyvzr+zv1HGZLTA5kBcQRaN3mT S/2xsaH31IjaaAPNWvwj4MTNPHRFggZhIOkuZ8G7oXeHkA5ZzAQ/ekKlB1pbqgPh 6VcNUIsU4XVcZFJe/RJbfhvVLFeI6mOdeQ4i5DfNPS4b8wAgXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8OH0HwDmto0gNGiWTyHCUCGY4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjliZTU3NTQtNjNjNS0z YzFlLTk3ZmYtN2YyZmU3OGIwMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINYFzS25mcX+hc7STpe0WzvLnfRL1nf708MwxLf3k3/DnTzlgC/oFLM vErQ0lkoXssUujUOlS3ILrWN4tqbZV7tyX/QG89+SL78cgVMvuL6roVxyD9w4DCg ZjZ8UfEhwrZkoxG3wDOedyx/4Y6rzDrbUNj2X8dr6QXqy5+UeDndGTevuM2wkaAW lVyc3N3yIhNgm14pusR8LdLzZ9F0xkBla3afiBA4+Gad/+ziRz2+4YaW4w9okHgW PXstTWCHb+ClLMXGOyJ5Dvakh69tDbxA8jhG4Uyp36Gb0IO0tn4KunIqu0wJ+TWK c1oVAgyO5NUwHY3Umwm57JLFyEtBsA0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:35 2025 by rpki-client