$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa File: 4a004332-dbeb-38d1-8166-bb9de0e699b7.roa (raw, json) Hash identifier: N1aEbed4lH2+/RWQiqEIMgWh4OLyE81ULOTPNAPnDRQ= Subject key identifier: 2C:E4:D8:FF:3A:7A:55:D4:3F:96:39:5D:E6:2F:68:9F:43:DB:FE:4D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629305F8BA2A2F2DF4964AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.217.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:05:f8:ba:2a:2f:2d:f4:96:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=9b7af935-1a17-4e79-b7e1-decde3c44651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:74:2f:8e:17:1c:6b:4d:50:85:4e:2f:5e: 14:fa:11:12:a9:06:c9:2b:1d:f0:fa:b7:2e:e6:9e: db:85:15:79:5c:e5:d6:2c:94:2b:64:f3:eb:b9:89: ef:f7:67:c4:58:9b:3a:48:bc:bb:78:c3:74:2c:36: b4:18:8c:7b:95:b4:61:90:89:85:7e:f9:1c:92:57: a9:bb:73:63:1e:d8:0b:87:43:55:ea:a5:0b:9d:7c: 05:95:4c:8b:a9:71:a7:72:da:84:a9:93:59:79:26: 92:2e:8f:05:a3:8b:cc:7d:8e:61:fc:a2:02:fe:91: a6:8c:9b:06:50:00:82:66:cb:06:14:ff:95:8e:f5: 9a:d3:5a:e4:54:b0:50:1c:b3:5e:c0:2a:cd:ff:ef: a8:b9:8a:cb:c5:80:10:d4:da:7f:0e:04:3d:04:17: bd:ba:1f:f1:72:99:e5:d3:60:41:c4:51:40:c9:cc: 2c:55:0d:e9:fe:62:1c:81:f4:b0:63:33:e8:09:d0: 98:4a:06:f3:2e:ef:e4:9f:d8:78:62:72:64:87:59: b7:f8:7d:02:13:c4:d6:4e:ec:1d:c7:be:7a:6a:39: d9:b6:6f:92:63:6e:c4:f4:3a:02:04:1f:31:a2:9b: 18:aa:6d:c8:8b:3f:36:74:93:ea:30:a0:0f:99:e7: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E4:D8:FF:3A:7A:55:D4:3F:96:39:5D:E6:2F:68:9F:43:DB:FE:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0c:7a:99:bc:d7:b3:bc:42:1f:35:66:ec:e6:2c:89:eb:ef: 4f:7a:b0:58:8d:ec:21:b7:80:3d:c9:4e:9d:05:b4:69:ef:81: 28:f0:de:2f:20:59:b3:5a:70:b5:3a:68:b5:5b:e2:a3:fe:29: f5:9d:d7:62:04:03:d9:3a:73:74:3a:e3:ab:42:32:e6:8c:50: e1:35:32:22:bf:fe:92:ce:8e:80:32:03:a9:42:7b:90:04:70: ca:1e:49:3c:ed:da:5d:00:05:83:99:42:5d:be:75:07:34:01: f0:fd:bf:ae:37:d7:91:54:10:ac:c2:0b:6e:41:69:30:3d:77: 99:8c:a8:ac:81:1b:b6:39:09:80:75:05:a0:82:29:a1:62:71: 30:f9:d4:6d:fd:59:3f:8b:b8:f3:c7:53:3c:60:6c:a1:80:99: bf:e5:09:a7:11:c4:a6:59:da:8e:68:0c:07:bf:9f:f2:a1:a9: c2:00:ee:b9:48:f2:50:51:c1:1f:d6:a6:05:25:fd:93:bc:7b: 30:13:cf:23:b4:23:2b:c1:94:f6:fa:40:28:9e:ef:a4:cf:7f: 54:1e:d3:5c:97:9a:56:29:a4:fe:f4:e4:5f:d0:ad:65:cd:c6: 29:3b:a1:8c:46:19:ff:09:1f:5b:0e:d0:26:eb:6c:b0:b7:7f: 5f:28:fd:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwX4uiovLfSWSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OWI3YWY5MzUtMWExNy00ZTc5LWI3ZTEtZGVjZGUzYzQ0NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdp0L44XHGtNUIVOL14U+hESqQbJKx3w+rcu 5p7bhRV5XOXWLJQrZPPruYnv92fEWJs6SLy7eMN0LDa0GIx7lbRhkImFfvkcklep u3NjHtgLh0NV6qULnXwFlUyLqXGnctqEqZNZeSaSLo8Fo4vMfY5h/KIC/pGmjJsG UACCZssGFP+VjvWa01rkVLBQHLNewCrN/++ouYrLxYAQ1Np/DgQ9BBe9uh/xcpnl 02BBxFFAycwsVQ3p/mIcgfSwYzPoCdCYSgbzLu/kn9h4YnJkh1m3+H0CE8TWTuwd x756ajnZtm+SY27E9DoCBB8xopsYqm3Iiz82dJPqMKAPmef7vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzk2P86elXUP5Y5XeYvaJ9D2/5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGEwMDQzMzItZGJlYi0z OGQxLTgxNjYtYmI5ZGUwZTY5OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcMepm817O8Qh81ZuzmLInr7096sFiN7CG3gD3JTp0FtGnvgSjw3i8g WbNacLU6aLVb4qP+KfWd12IEA9k6c3Q646tCMuaMUOE1MiK//pLOjoAyA6lCe5AE cMoeSTzt2l0ABYOZQl2+dQc0AfD9v64315FUEKzCC25BaTA9d5mMqKyBG7Y5CYB1 BaCCKaFicTD51G39WT+LuPPHUzxgbKGAmb/lCacRxKZZ2o5oDAe/n/KhqcIA7rlI 8lBRwR/WpgUl/ZO8ezATzyO0IyvBlPb6QCie76TPf1Qe01yXmlYppP705F/QrWXN xik7oYxGGf8JH1sO0CbrbLC3f18o/Y8= -----END CERTIFICATE-----Generated at Sun Nov 15 11:22:42 2026 by rpki-client