$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef569e35-124a-375e-9b52-74342d4393a2.roa File: ef569e35-124a-375e-9b52-74342d4393a2.roa (raw, json) Hash identifier: U7fkE6BgdfKUpLugps9Ldyp3hpr6wLSo6hkG/uVzq58= Subject key identifier: 05:EB:ED:BD:D7:51:3A:A8:EA:55:4B:C1:28:2B:8E:E4:84:DE:96:BB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D298BB6F936043607CE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef569e35-124a-375e-9b52-74342d4393a2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.217.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:29:8b:b6:f9:36:04:36:07:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5ace3036-9255-4e99-aff6-d340b5818c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:10:d6:5f:ce:26:09:b3:ee:40:4a:a3:03: 91:1d:29:93:dc:7b:42:c1:f2:a1:6f:2d:42:1b:ac: 89:0d:8f:88:89:6a:17:da:eb:3d:10:dc:7a:0a:48: a1:ad:68:d5:91:4b:e0:12:b6:0e:56:3f:35:22:2a: 39:a2:50:1b:03:bc:41:8e:9c:5d:9e:11:8b:b6:2b: 98:4e:7b:15:16:6a:4f:80:0f:7b:7b:4d:7f:0f:5c: ef:ff:e0:91:57:c7:3b:f0:17:23:45:28:29:3c:ce: 07:2b:99:f0:c0:da:e5:b1:ae:5b:55:43:ac:2b:bc: e0:83:54:a8:7d:17:2e:83:76:b0:e4:5c:d7:26:f4: e5:c2:b0:ce:33:b1:c7:57:66:c3:15:2f:4f:d0:72: 9c:c5:73:ad:a4:e1:52:ba:b9:27:58:11:25:f3:33: e2:a3:92:81:19:8d:cf:8f:dd:6b:42:b7:9b:91:69: c4:90:32:a6:2e:34:a9:c9:64:c6:99:0d:3c:33:b6: 23:66:f5:51:a9:3f:4a:96:e9:80:f8:d9:9c:8a:32: bd:51:99:0f:b0:89:4d:d0:65:a7:59:bd:0d:9d:97: 8a:d4:4f:9b:ec:fb:8c:67:02:eb:93:a1:29:ca:b8: 8f:42:ae:18:a1:0f:ac:61:02:b0:71:a9:73:50:7a: a1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EB:ED:BD:D7:51:3A:A8:EA:55:4B:C1:28:2B:8E:E4:84:DE:96:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef569e35-124a-375e-9b52-74342d4393a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d2:49:d9:3e:d5:a9:96:1d:87:49:8e:c1:cd:81:d2:60:72: 50:14:75:1f:b5:64:ab:46:80:4c:5a:45:8c:54:ae:38:db:d3: 01:44:0f:5a:0e:e9:a3:f2:a6:b3:b6:65:89:d3:97:82:63:6f: 04:b2:9a:9e:78:b9:65:3a:19:50:13:0c:21:6e:51:ce:fd:73: 77:2c:6e:70:9b:30:58:e9:43:ef:5a:ba:17:9f:8d:3e:c0:47: 2f:e4:da:4d:c4:98:ba:22:ba:9b:4f:2b:9b:87:e0:cf:50:ce: 37:6f:de:d9:e5:6b:3b:19:2a:50:54:ae:41:72:f1:2b:cb:06: 95:32:32:b3:8f:da:89:8a:10:75:d7:73:88:d2:b7:1d:13:cc: 60:cd:26:b2:4f:e7:32:89:4b:48:24:48:01:0e:60:f0:0d:5d: d0:38:c7:8a:3b:bc:78:be:16:b7:f8:34:50:22:81:22:49:54: 9f:64:60:94:0a:35:ce:e5:81:66:d1:5a:c3:bd:13:87:b6:68: b0:97:6e:72:1b:59:4a:52:9d:87:9d:51:5a:48:5b:50:5d:d9: 3b:a0:86:54:26:e5:65:a2:a0:93:24:a2:9c:7a:ef:f0:4c:c0: 50:f8:bb:ea:56:b8:9e:97:fe:83:60:28:46:15:02:5c:41:bf: 7f:af:12:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfSmLtvk2BDYHzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWFjZTMwMzYtOTI1NS00ZTk5LWFmZjYtZDM0MGI1ODE4YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCoQ1l/OJgmz7kBKowORHSmT3HtCwfKhby1C G6yJDY+IiWoX2us9ENx6CkihrWjVkUvgErYOVj81Iio5olAbA7xBjpxdnhGLtiuY TnsVFmpPgA97e01/D1zv/+CRV8c78BcjRSgpPM4HK5nwwNrlsa5bVUOsK7zgg1So fRcug3aw5FzXJvTlwrDOM7HHV2bDFS9P0HKcxXOtpOFSurknWBEl8zPio5KBGY3P j91rQrebkWnEkDKmLjSpyWTGmQ08M7YjZvVRqT9KlumA+NmcijK9UZkPsIlN0GWn Wb0NnZeK1E+b7PuMZwLrk6EpyriPQq4YoQ+sYQKwcalzUHqhTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXr7b3XUTqo6lVLwSgrjuSE3pa7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWY1NjllMzUtMTI0YS0z NzVlLTliNTItNzQzNDJkNDM5M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXSSdk+1amWHYdJjsHNgdJgclAUdR+1ZKtGgExaRYxUrjjb0wFED1oO 6aPyprO2ZYnTl4JjbwSymp54uWU6GVATDCFuUc79c3csbnCbMFjpQ+9auhefjT7A Ry/k2k3EmLoiuptPK5uH4M9Qzjdv3tnlazsZKlBUrkFy8SvLBpUyMrOP2omKEHXX c4jStx0TzGDNJrJP5zKJS0gkSAEOYPANXdA4x4o7vHi+Frf4NFAigSJJVJ9kYJQK Nc7lgWbRWsO9E4e2aLCXbnIbWUpSnYedUVpIW1Bd2TughlQm5WWioJMkopx67/BM wFD4u+pWuJ6X/oNgKEYVAlxBv3+vEnM= -----END CERTIFICATE-----Generated at Fri Sep 25 19:14:18 2026 by rpki-client