$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa File: 52ab951c-a52a-33ca-832a-3433fe906f80.roa (raw, json) Hash identifier: Rg3HqC3HChmHYKou5jh6BC715SR5Ra9jHtUoe2VcZvo= Subject key identifier: 4C:5A:D6:70:83:9E:6F:C3:20:96:36:99:32:FB:57:95:5F:A2:67:AE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4986A91DDEE0B2D89F47779C Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:a9:1d:de:e0:b2:d8:9f:47:77:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a9474b56-69b9-4204-9389-c03d87a2d990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:30:36:03:85:ad:21:4b:5a:e9:18:6f:42: e0:a4:6b:a8:b2:8f:7a:0d:c8:97:2d:9c:a1:2b:ef: 82:c7:f0:54:c2:d7:fc:9d:bc:6f:2b:cc:2b:46:23: 23:af:dc:03:cc:4e:4d:aa:6a:6b:af:68:7d:33:62: db:1b:14:78:01:89:6a:b9:56:79:0a:bc:78:d1:ee: 08:39:63:2b:e9:37:9b:4d:72:a1:e1:db:e8:3b:20: c5:09:ca:06:f0:a3:4c:a9:70:be:c6:0e:77:b8:c3: 21:d3:b0:6a:45:ec:7c:2b:d7:5a:f6:64:44:b7:de: ea:3d:9f:30:6e:5c:5c:e2:1b:56:bb:75:08:d3:0c: dd:1c:ca:ec:24:a9:99:10:a2:38:05:4b:73:d0:4a: 0d:bc:5d:16:63:7c:ab:90:ae:02:f9:53:13:da:da: d0:cd:ab:6e:2a:2f:18:be:a6:54:a8:76:e5:79:d5: fd:b6:19:20:3a:f1:5e:ac:95:40:13:28:f7:ab:85: ea:3f:19:45:85:22:bc:86:8c:e0:dc:06:d1:06:dd: 97:cf:85:13:64:44:2c:35:4a:2e:65:b8:ed:7c:9d: 87:2b:6b:17:26:02:a5:94:9d:cd:be:8e:77:8a:5c: 43:2d:51:bc:99:2a:08:c2:7c:b5:7b:d8:50:d3:16: c1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5A:D6:70:83:9E:6F:C3:20:96:36:99:32:FB:57:95:5F:A2:67:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:20:87:99:ff:21:62:d3:50:1e:8d:2b:46:c4:7e:34:99:0e: 30:92:35:46:20:51:c9:10:4a:45:68:e0:8a:cd:c5:f8:dd:3f: 42:1e:a6:7e:fa:bf:8d:eb:a1:3d:55:8b:de:01:73:5a:76:fb: fc:23:c5:07:d3:76:96:e9:9d:d0:cc:2a:cf:cb:81:60:0e:ac: 99:15:dc:81:4f:56:0c:af:c4:04:f1:2b:f0:19:f5:8b:2d:fa: 14:3a:57:28:a2:f9:6a:3c:7a:ed:93:15:fd:a7:84:9f:ea:d8: 99:d0:65:e3:45:4a:a7:1b:43:95:a9:37:5d:8a:fc:40:eb:6f: 15:71:6f:fa:32:fa:a8:14:09:f0:c1:8c:d7:62:0e:0b:d3:a1: 3b:2a:a4:77:7d:cf:90:f4:49:a0:f6:8e:20:db:bb:17:99:aa: 76:61:04:77:8b:5f:bf:a9:91:55:0d:df:23:32:8d:b4:60:45: 40:37:eb:7e:ad:2f:97:29:b2:a4:1f:e3:9b:7a:17:6b:c4:9c: 54:ae:73:1f:fa:58:ab:bf:fa:55:19:a9:3c:a0:6c:ed:77:a6: 56:f3:41:f0:4b:f5:74:f8:87:a8:47:86:17:e5:91:05:6b:a4: ee:59:1a:da:7e:9c:5d:75:82:84:fe:df:50:6f:cd:68:e3:3c: 47:a5:bf:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhqkd3uCy2J9Hd5wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTk0NzRiNTYtNjliOS00MjA0LTkzODktYzAzZDg3YTJkOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnMwNgOFrSFLWukYb0LgpGuoso96DciXLZyh K++Cx/BUwtf8nbxvK8wrRiMjr9wDzE5Nqmprr2h9M2LbGxR4AYlquVZ5Crx40e4I OWMr6TebTXKh4dvoOyDFCcoG8KNMqXC+xg53uMMh07BqRex8K9da9mREt97qPZ8w blxc4htWu3UI0wzdHMrsJKmZEKI4BUtz0EoNvF0WY3yrkK4C+VMT2trQzatuKi8Y vqZUqHbledX9thkgOvFerJVAEyj3q4XqPxlFhSK8hozg3AbRBt2Xz4UTZEQsNUou ZbjtfJ2HK2sXJgKllJ3Nvo53ilxDLVG8mSoIwny1e9hQ0xbBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExa1nCDnm/DIJY2mTL7V5VfomeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTJhYjk1MWMtYTUyYS0z M2NhLTgzMmEtMzQzM2ZlOTA2ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcgh5n/IWLTUB6NK0bEfjSZDjCSNUYgUckQSkVo4IrNxfjdP0Iepn76 v43roT1Vi94Bc1p2+/wjxQfTdpbpndDMKs/LgWAOrJkV3IFPVgyvxATxK/AZ9Yst +hQ6Vyii+Wo8eu2TFf2nhJ/q2JnQZeNFSqcbQ5WpN12K/EDrbxVxb/oy+qgUCfDB jNdiDgvToTsqpHd9z5D0SaD2jiDbuxeZqnZhBHeLX7+pkVUN3yMyjbRgRUA3636t L5cpsqQf45t6F2vEnFSucx/6WKu/+lUZqTygbO13plbzQfBL9XT4h6hHhhflkQVr pO5ZGtp+nF11goT+31BvzWjjPEelv2I= -----END CERTIFICATE-----Generated at Fri Sep 25 13:53:12 2026 by rpki-client