$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47c53405-00ff-30ef-9681-07bd496100de.roa File: 47c53405-00ff-30ef-9681-07bd496100de.roa (raw, json) Hash identifier: yHNZoEwlaxapIO1IywXqs/khA9mWcqpgezcKTXIdON4= Subject key identifier: 21:6B:2C:C5:9C:64:04:30:70:8E:25:29:46:4F:12:C9:50:D3:8E:C2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F62930760B5535BA0DC2B7280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47c53405-00ff-30ef-9681-07bd496100de.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.217.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:07:60:b5:53:5b:a0:dc:2b:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=c65b8b3c-1b43-46c0-99d8-21219094bb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:68:94:45:c6:7d:47:b2:b0:2a:8c:9e:f9: b4:3a:83:e9:2d:dd:7f:8a:3f:cb:f2:dd:94:ef:9e: 1d:a9:3e:39:dc:7c:16:3e:ae:04:42:86:33:85:cc: ce:ea:32:96:b6:7e:ab:0e:f7:29:33:ab:4e:a9:44: 9e:e2:af:f7:e7:94:01:1b:8a:d5:3f:20:4d:93:d2: 0d:34:af:6a:47:b0:29:2d:32:32:16:0f:9c:0d:34: e8:4d:58:aa:5b:73:af:f3:46:0c:1b:d3:a5:ce:c6: 0f:a2:c1:c0:ba:76:95:cf:9d:4b:c1:92:17:cd:bf: 3c:d4:28:0f:c0:f3:49:49:b7:bc:35:c8:d1:aa:2f: 03:0e:80:0e:6e:e7:96:f2:ae:67:33:8b:06:86:52: f1:59:02:ce:fc:f2:c7:03:ae:e5:ef:a9:91:d1:bb: 4b:88:e6:8d:36:ec:b8:f5:db:5f:f8:3e:07:be:a1: 4a:19:83:55:27:31:34:6d:b8:f1:c6:44:4c:32:10: 33:df:46:59:5b:ce:9c:92:02:a0:88:9e:63:7a:ab: 8e:9f:9e:81:b4:93:39:63:d2:d9:dd:0a:5c:ac:da: 35:89:0a:1d:8d:74:d7:bb:27:72:15:00:47:a2:2a: d3:97:71:2c:d5:1c:e9:a6:6c:7e:d5:2e:66:1b:bc: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6B:2C:C5:9C:64:04:30:70:8E:25:29:46:4F:12:C9:50:D3:8E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47c53405-00ff-30ef-9681-07bd496100de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a8:4c:9f:9a:f5:79:f0:a9:6a:e1:ef:00:ed:1a:4f:5f:29: 4c:e1:d6:10:c2:31:18:da:2a:6b:24:8e:b8:dc:7d:8b:f0:30: a8:54:d9:cc:e2:f9:d7:63:05:79:44:68:3d:71:dc:38:2d:16: df:f3:71:eb:69:c0:5b:ea:2a:23:c1:0c:04:86:f3:b2:ff:36: d4:da:1c:b1:7b:8b:3b:29:62:0c:06:39:c3:26:5f:1e:45:3d: 24:9d:aa:cf:44:22:09:8a:0c:c6:8e:2e:e0:9a:d2:86:71:aa: df:e2:ea:d5:67:2f:93:c5:a4:4d:7b:19:37:65:a6:b1:fd:77: cc:2c:13:33:38:35:86:a6:f9:85:27:ce:35:4f:d1:4d:c3:27: 03:82:f6:a7:3e:f4:23:ec:12:ea:b0:45:d1:26:cc:e9:90:67: 8c:f8:7b:01:62:a9:bc:b8:79:05:8d:e4:45:f9:28:0b:07:bc: 98:84:8b:04:db:53:b8:b7:04:dd:8a:2b:03:c1:c5:cd:b4:6e: 11:b4:fc:47:73:b8:bc:7c:40:cf:fd:ce:6b:40:7d:75:74:33: 0a:66:c2:34:57:a8:66:a1:87:22:15:46:f4:a2:3e:54:b7:b9: 34:2b:14:8a:7d:ed:fb:27:46:dd:f6:37:c8:a1:4d:1e:57:09: 94:c4:db:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwdgtVNboNwrcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YzY1YjhiM2MtMWI0My00NmMwLTk5ZDgtMjEyMTkwOTRiYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV9olEXGfUeysCqMnvm0OoPpLd1/ij/L8t2U 754dqT453HwWPq4EQoYzhczO6jKWtn6rDvcpM6tOqUSe4q/355QBG4rVPyBNk9IN NK9qR7ApLTIyFg+cDTToTViqW3Ov80YMG9OlzsYPosHAunaVz51LwZIXzb881CgP wPNJSbe8NcjRqi8DDoAObueW8q5nM4sGhlLxWQLO/PLHA67l76mR0btLiOaNNuy4 9dtf+D4HvqFKGYNVJzE0bbjxxkRMMhAz30ZZW86ckgKgiJ5jequOn56BtJM5Y9LZ 3QpcrNo1iQodjXTXuydyFQBHoirTl3Es1Rzppmx+1S5mG7z4FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFrLMWcZAQwcI4lKUZPEslQ047CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDdjNTM0MDUtMDBmZi0z MGVmLTk2ODEtMDdiZDQ5NjEwMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuoTJ+a9XnwqWrh7wDtGk9fKUzh1hDCMRjaKmskjrjcfYvwMKhU2czi +ddjBXlEaD1x3DgtFt/zcetpwFvqKiPBDASG87L/NtTaHLF7izspYgwGOcMmXx5F PSSdqs9EIgmKDMaOLuCa0oZxqt/i6tVnL5PFpE17GTdlprH9d8wsEzM4NYam+YUn zjVP0U3DJwOC9qc+9CPsEuqwRdEmzOmQZ4z4ewFiqby4eQWN5EX5KAsHvJiEiwTb U7i3BN2KKwPBxc20bhG0/EdzuLx8QM/9zmtAfXV0MwpmwjRXqGahhyIVRvSiPlS3 uTQrFIp97fsnRt32N8ihTR5XCZTE2+A= -----END CERTIFICATE-----Generated at Sun Nov 15 20:48:17 2026 by rpki-client