$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa File: 311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa (raw, json) Hash identifier: eM+DisElqn7WbydbyMYG4nVEqPWAWgqgJ1bl7jydFBA= Subject key identifier: 39:83:7C:F7:A3:DD:A9:90:37:5C:CF:37:0C:41:B2:76:79:FE:58:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984FAB26B290E139BB5C8C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:fa:b2:6b:29:0e:13:9b:b5:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c758a5f2-1adf-4a52-9d61-e50745692787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:d1:ab:3c:47:29:2b:89:b6:24:dc:03:f6: d4:fa:87:80:cd:79:31:5d:09:e3:b2:fc:2b:fa:95: 4c:46:07:2c:bd:10:c4:1a:de:89:e2:95:51:1b:3b: 44:4c:4d:09:e0:45:8a:6c:ac:1d:2a:31:00:7f:21: 36:c1:dd:ff:36:56:63:22:ff:30:64:65:a8:b8:b8: 2c:97:d8:fb:76:3a:8e:4b:55:73:09:a5:be:9a:3e: 90:b7:7c:6d:99:8d:75:20:e6:c1:d8:1e:c8:3d:93: 6d:0d:0e:b6:32:0c:09:23:32:c1:eb:af:b1:ae:15: 09:bf:cf:b7:98:3f:11:2c:2c:93:de:df:f6:a3:99: 63:a5:57:29:c4:e3:ce:f7:74:0c:a6:e3:f8:99:fe: 4e:b1:c4:0f:a7:c5:b9:0d:aa:11:f8:97:7c:92:03: 35:6c:ef:70:46:af:49:31:6f:b0:06:d4:01:df:3a: dc:b8:49:6c:86:9e:0d:ac:91:0a:50:c6:eb:eb:64: 0c:43:e7:64:76:fb:76:1d:c4:85:fb:4f:66:a7:63: 89:20:bf:5b:d7:6b:45:43:be:23:25:7a:ba:44:e5: 1c:cd:da:8c:f0:94:d4:a4:1e:4c:d3:44:18:a7:38: 5f:f8:4b:52:ba:25:00:12:35:d4:c7:ad:5a:f5:75: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:83:7C:F7:A3:DD:A9:90:37:5C:CF:37:0C:41:B2:76:79:FE:58:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ab:c8:86:e1:09:db:93:a1:9a:04:bc:f5:a5:c8:9f:7f:9c: 1c:8c:5e:f9:fc:a7:67:42:cc:83:13:80:16:96:df:42:ed:c8: cb:f3:9b:42:db:c1:b8:2e:c1:cc:45:52:32:ff:32:19:a7:40: 42:99:d8:d0:00:0c:48:dc:09:1a:72:9f:fc:db:1c:46:8b:79: 65:32:99:cd:3d:1d:d4:5e:b3:34:1a:b9:2a:29:cc:13:45:9f: 28:df:21:8f:31:b2:83:87:cf:b5:e3:fe:b5:75:d2:13:4d:e9: c9:d6:ce:1c:6c:dc:d9:7d:bb:16:40:9d:8a:b1:67:01:de:cf: 9c:cb:df:27:9d:59:bd:bb:7a:b1:7c:a9:8d:1b:17:1d:ee:93: 81:4f:58:b8:c1:1f:92:d2:0e:3d:d8:23:a1:46:26:83:e2:a6: b7:1a:bf:16:59:18:3f:e2:2b:dd:6a:74:82:da:d9:da:af:a9: c9:20:97:a0:06:0e:f2:0d:06:5c:09:6a:5c:2d:aa:5b:4d:36: 05:a8:b1:6d:78:84:ff:f4:0e:b6:3f:c0:9a:6b:16:55:a7:a7: be:2b:0c:3b:5b:45:b2:1f:d3:e5:b1:8c:c1:0b:ef:ff:4e:04: f9:9f:42:36:ec:dd:ed:e7:9c:c5:dc:92:e9:e1:42:9c:6e:11: 9f:ca:13:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPqyaykOE5u1yMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzc1OGE1ZjItMWFkZi00YTUyLTlkNjEtZTUwNzQ1NjkyNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiDRqzxHKSuJtiTcA/bU+oeAzXkxXQnjsvwr +pVMRgcsvRDEGt6J4pVRGztETE0J4EWKbKwdKjEAfyE2wd3/NlZjIv8wZGWouLgs l9j7djqOS1VzCaW+mj6Qt3xtmY11IObB2B7IPZNtDQ62MgwJIzLB66+xrhUJv8+3 mD8RLCyT3t/2o5ljpVcpxOPO93QMpuP4mf5OscQPp8W5DaoR+Jd8kgM1bO9wRq9J MW+wBtQB3zrcuElshp4NrJEKUMbr62QMQ+dkdvt2HcSF+09mp2OJIL9b12tFQ74j JXq6ROUczdqM8JTUpB5M00QYpzhf+EtSuiUAEjXUx61a9XVmkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmDfPej3amQN1zPNwxBsnZ5/lgUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzExZWRkMzQtYzIxZS0z NmE3LWE2Y2ItMmZlNGNiNjNkNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeryIbhCduToZoEvPWlyJ9/nByMXvn8p2dCzIMTgBaW30LtyMvzm0Lb wbguwcxFUjL/MhmnQEKZ2NAADEjcCRpyn/zbHEaLeWUymc09HdReszQauSopzBNF nyjfIY8xsoOHz7Xj/rV10hNN6cnWzhxs3Nl9uxZAnYqxZwHez5zL3yedWb27erF8 qY0bFx3uk4FPWLjBH5LSDj3YI6FGJoPiprcavxZZGD/iK91qdILa2dqvqckgl6AG DvINBlwJalwtqltNNgWosW14hP/0DrY/wJprFlWnp74rDDtbRbIf0+WxjMEL7/9O BPmfQjbs3e3nnMXckunhQpxuEZ/KE8w= -----END CERTIFICATE-----Generated at Sat Sep 26 02:55:42 2026 by rpki-client