$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa File: 3be7d533-8374-34e8-8ae6-527bb38f1d34.roa (raw, json) Hash identifier: wLzrranujtvxkhySDnBjEaRp4i6qw0osILWqUrYQSBg= Subject key identifier: 8F:C2:D3:92:5D:70:C9:10:30:CF:A1:B1:28:B1:58:57:56:D3:FD:A8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EC77A599238E9CF3351E Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.217.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ec:77:a5:99:23:8e:9c:f3:35:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=d7b6edf1-cb30-4da6-a42a-6f2fb5a02a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:d9:ca:62:19:6f:0b:71:42:77:b1:47:78: 7a:82:8f:e5:36:ad:df:da:ab:4c:71:34:5d:8d:82: 02:bb:0a:27:87:35:c2:a0:e9:ce:3d:16:df:d5:d0: ca:43:2c:e9:83:45:c6:9f:b9:ab:0a:5c:c4:d3:c1: dd:75:71:69:ea:3e:aa:ef:e2:84:3c:66:92:f2:a2: 84:2a:52:21:d5:f0:7f:ef:56:46:8d:da:fd:b9:4b: ed:4a:d0:5b:e8:f0:30:03:74:d7:03:8c:e5:2a:78: a2:28:4e:67:b9:6b:87:67:53:90:84:9d:95:61:01: a4:2e:20:38:e0:66:f0:3b:62:ae:ae:8d:ee:a1:dc: 72:f8:eb:ef:c7:c9:ac:9f:91:2d:84:6e:ce:ab:fa: 90:17:74:cc:30:50:f7:65:fd:b5:b7:38:0b:ea:d7: 40:89:99:34:e0:d6:88:6e:e0:25:48:c6:8c:f9:a9: 5b:07:ad:1f:39:cc:d7:88:bd:2f:b9:de:19:2d:0c: ac:e7:14:02:2e:7a:6e:9f:38:2f:bb:a1:92:de:b8: c9:0d:fe:71:44:2c:7c:35:74:82:fc:08:bd:09:ae: 24:f2:cf:c7:36:ca:3f:da:e5:c4:a6:e0:12:75:ff: cd:59:46:77:ae:92:e9:38:b2:03:d7:56:c7:d6:ac: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C2:D3:92:5D:70:C9:10:30:CF:A1:B1:28:B1:58:57:56:D3:FD:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:be:9d:a6:aa:3c:b3:c1:16:15:07:38:33:6d:98:e7:43:2e: 5e:35:da:00:8c:7a:11:cd:aa:f5:2f:a8:4f:0f:30:4e:08:bf: 6c:84:09:0d:f1:4a:1c:39:de:e1:ef:d9:33:ea:1e:78:74:f8: 64:d1:e9:3e:10:d5:c8:90:7e:50:dc:3d:34:ca:dc:39:0b:50: 9e:b9:dd:33:c6:e8:62:8d:bc:a2:74:aa:31:85:da:c0:b5:64: 8f:9b:f9:1b:ab:78:38:fe:65:b2:da:b7:4c:bc:78:9d:58:85: f2:02:ff:08:b1:0c:6d:52:94:6e:4d:5b:4a:d4:5f:11:ef:19: ac:2b:12:4f:a6:16:28:fb:df:b2:53:31:4f:d3:05:5f:b1:3d: a8:fb:00:de:d1:1f:c3:75:37:ec:b5:4e:92:47:5d:42:f3:96: ed:21:cd:35:04:fd:2e:9b:34:91:ac:2d:40:b6:6f:d9:75:26: 67:21:ec:9e:16:4a:7d:f1:14:ed:02:6e:0e:7f:8c:df:0f:b6: 9d:8c:d8:69:7f:eb:68:a8:a2:31:00:3e:ef:10:48:ca:65:fd: c0:af:40:b4:50:45:7a:39:84:63:d3:8a:63:db:ad:3a:e7:48: 17:41:41:8d:c4:9c:9b:da:43:a2:86:61:49:be:19:e1:d9:27: aa:6b:51:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikux3pZkjjpzzNR4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDdiNmVkZjEtY2IzMC00ZGE2LWE0MmEtNmYyZmI1YTAyYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzULZymIZbwtxQnexR3h6go/lNq3f2qtMcTRd jYICuwonhzXCoOnOPRbf1dDKQyzpg0XGn7mrClzE08HddXFp6j6q7+KEPGaS8qKE KlIh1fB/71ZGjdr9uUvtStBb6PAwA3TXA4zlKniiKE5nuWuHZ1OQhJ2VYQGkLiA4 4GbwO2Kuro3uodxy+Ovvx8msn5EthG7Oq/qQF3TMMFD3Zf21tzgL6tdAiZk04NaI buAlSMaM+albB60fOczXiL0vud4ZLQys5xQCLnpunzgvu6GS3rjJDf5xRCx8NXSC /Ai9Ca4k8s/HNso/2uXEpuASdf/NWUZ3rpLpOLID11bH1qxEnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/C05JdcMkQMM+hsSixWFdW0/2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2JlN2Q1MzMtODM3NC0z NGU4LThhZTYtNTI3YmIzOGYxZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK+naaqPLPBFhUHODNtmOdDLl412gCMehHNqvUvqE8PME4Iv2yECQ3x Shw53uHv2TPqHnh0+GTR6T4Q1ciQflDcPTTK3DkLUJ653TPG6GKNvKJ0qjGF2sC1 ZI+b+RureDj+ZbLat0y8eJ1YhfIC/wixDG1SlG5NW0rUXxHvGawrEk+mFij737JT MU/TBV+xPaj7AN7RH8N1N+y1TpJHXULzlu0hzTUE/S6bNJGsLUC2b9l1Jmch7J4W Sn3xFO0Cbg5/jN8Ptp2M2Gl/62ioojEAPu8QSMpl/cCvQLRQRXo5hGPTimPbrTrn SBdBQY3EnJvaQ6KGYUm+GeHZJ6prUaU= -----END CERTIFICATE-----Generated at Sun Nov 15 20:48:12 2026 by rpki-client