$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/583c2d68-57d4-3290-860f-ece3aee003ff.roa File: 583c2d68-57d4-3290-860f-ece3aee003ff.roa (raw, json) Hash identifier: m6U6bkAJNdzt4qfGoMnvKZkYJGWDEkeVm7Zm1UOiCLI= Subject key identifier: BC:64:A0:A1:B4:5F:54:EF:C4:B3:CE:5C:33:34:45:D9:B2:3A:CC:11 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498A9F56D446E038EA1A0980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/583c2d68-57d4-3290-860f-ece3aee003ff.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:9f:56:d4:46:e0:38:ea:1a:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2e7b3f2d-759f-4053-99d5-407faeb47762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:c4:fd:5c:24:4a:87:1f:5f:8d:47:dd:82: 4b:b3:f8:42:9e:b1:6d:b3:da:72:69:88:31:a4:b0: 4b:15:24:ea:d4:14:e2:b1:c9:f7:4a:75:58:9e:eb: 80:8e:6d:97:48:4e:30:26:68:96:23:34:49:8f:6c: 96:e4:11:35:ac:2a:ac:d0:01:db:d3:c8:33:bf:f8: 6b:1e:34:a8:e1:72:93:24:f7:40:d2:ba:6e:51:69: 1c:ad:87:6f:c5:87:36:e4:af:a4:f3:bd:9c:15:92: 9e:ab:db:29:b7:c9:d8:a1:9f:4c:4b:de:3d:cc:56: a3:22:ab:1d:6b:9c:9b:5b:dd:fd:06:fd:7d:e3:fe: b8:26:41:59:10:e0:60:25:5d:6f:a8:90:ef:63:88: 5b:ff:c4:59:ce:de:48:e0:61:91:71:d2:7a:99:62: 97:e9:c3:d9:3e:80:a7:a3:e6:8b:cb:59:2d:f2:ce: b9:8f:f0:cc:7e:c6:82:87:51:e2:69:4c:b6:92:3a: 36:51:ce:1e:66:0c:28:b8:98:e9:20:7c:88:ae:f9: b1:12:35:7f:ab:ce:a0:08:06:e2:6f:a7:f3:2d:23: dc:16:a1:93:b4:a0:52:02:34:9a:3f:b5:02:89:64: 2e:3f:6f:86:ed:29:dd:d2:40:9d:00:91:98:b7:dd: 63:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:64:A0:A1:B4:5F:54:EF:C4:B3:CE:5C:33:34:45:D9:B2:3A:CC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/583c2d68-57d4-3290-860f-ece3aee003ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e3:13:2a:8e:2d:d3:c1:bc:6d:49:d4:f0:45:20:56:8d:c3: 06:a0:83:2b:cd:89:98:9a:85:ee:33:9d:6b:dc:21:60:89:07: 7f:27:3b:6d:49:39:20:06:57:d2:0c:04:9d:a7:81:81:c7:d4: e8:c3:cf:09:87:6b:4d:3c:9e:cd:ac:ac:9c:7f:cb:ae:d8:35: 69:d3:92:6b:40:f0:b2:96:a6:9c:29:95:73:ff:dd:27:b8:04: da:59:35:68:33:55:11:ef:03:8f:a8:95:ac:1e:1e:88:a6:60: 10:ab:62:0f:0a:35:fb:99:5b:a4:33:92:61:11:76:2e:19:05: 0d:da:fe:b3:13:56:50:6a:d8:5e:9a:06:d7:df:a7:87:38:08: 45:51:3c:6f:0d:9b:7d:28:a9:5e:59:8b:10:82:40:02:8a:8c: d0:63:b7:2a:bf:72:ab:00:dd:19:fc:51:23:c7:dd:f0:e2:2b: 1e:27:6e:28:90:da:8a:df:ad:62:5e:a0:f6:57:4f:13:fb:ee: 73:93:ba:1d:0d:a7:bc:c7:f5:9a:de:14:ab:7f:9e:86:a5:ab: 54:a9:0f:94:8c:bd:9c:71:ba:15:24:48:e7:0d:cd:a2:bc:8f: b7:7b:c7:58:3b:16:f3:9d:2a:f6:d1:4d:d9:f5:d1:85:3a:5f: 74:67:ad:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jip9W1EbgOOoaCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmU3YjNmMmQtNzU5Zi00MDUzLTk5ZDUtNDA3ZmFlYjQ3NzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzjE/VwkSocfX41H3YJLs/hCnrFts9pyaYgx pLBLFSTq1BTiscn3SnVYnuuAjm2XSE4wJmiWIzRJj2yW5BE1rCqs0AHb08gzv/hr HjSo4XKTJPdA0rpuUWkcrYdvxYc25K+k872cFZKeq9spt8nYoZ9MS949zFajIqsd a5ybW939Bv194/64JkFZEOBgJV1vqJDvY4hb/8RZzt5I4GGRcdJ6mWKX6cPZPoCn o+aLy1kt8s65j/DMfsaCh1HiaUy2kjo2Uc4eZgwouJjpIHyIrvmxEjV/q86gCAbi b6fzLSPcFqGTtKBSAjSaP7UCiWQuP2+G7Snd0kCdAJGYt91j3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxkoKG0X1TvxLPOXDM0RdmyOswRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTgzYzJkNjgtNTdkNC0z MjkwLTg2MGYtZWNlM2FlZTAwM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLjEyqOLdPBvG1J1PBFIFaNwwaggyvNiZiahe4znWvcIWCJB38nO21J OSAGV9IMBJ2ngYHH1OjDzwmHa008ns2srJx/y67YNWnTkmtA8LKWppwplXP/3Se4 BNpZNWgzVRHvA4+olaweHoimYBCrYg8KNfuZW6QzkmERdi4ZBQ3a/rMTVlBq2F6a Btffp4c4CEVRPG8Nm30oqV5ZixCCQAKKjNBjtyq/cqsA3Rn8USPH3fDiKx4nbiiQ 2orfrWJeoPZXTxP77nOTuh0Np7zH9ZreFKt/noalq1SpD5SMvZxxuhUkSOcNzaK8 j7d7x1g7FvOdKvbRTdn10YU6X3RnrRA= -----END CERTIFICATE-----Generated at Fri Sep 25 14:51:02 2026 by rpki-client