$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa File: 069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa (raw, json) Hash identifier: AXYktz4eHLvDWx0VHSZunyW7g1l7ZoCGm8WSk0uhh80= Subject key identifier: A9:9E:EF:D3:8C:84:C7:9E:18:AF:0A:63:60:BA:B2:41:A7:CF:AE:03 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD4D384266996E7A1BEA40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 209.85.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4d:38:42:66:99:6e:7a:1b:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1ea4966c-f6e7-42f6-b6e4-a797e45315b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a1:30:4a:0a:11:fe:4a:20:ec:a2:9d:fe:da: a5:2b:24:b1:5f:bd:00:21:39:c2:54:9a:4c:8d:03: 03:95:34:08:c8:bb:4b:65:55:c2:49:84:a9:16:42: a0:21:b3:cd:4b:de:a8:0b:39:c0:64:ad:de:1f:92: 1a:28:34:b4:fd:3c:d2:d5:ec:c2:93:cc:fa:0e:83: 09:4a:6b:e3:c6:d4:ee:ef:13:85:3e:8a:a0:0a:3e: ac:ba:c0:19:4f:44:b8:22:9f:c8:89:51:99:0d:f2: 57:09:ca:38:cb:d4:71:cb:49:93:98:f3:98:90:0f: df:c2:b6:92:dd:e9:1a:d3:8b:e3:82:ac:f6:0a:7b: 4c:a9:cb:2f:fd:6f:be:50:df:b9:1e:14:c0:cf:ce: 33:cf:83:7a:da:61:a7:52:77:1d:32:5b:ad:ed:ec: 19:be:65:db:10:a1:db:e8:2f:38:c8:04:50:d2:e0: 7d:cb:4c:cc:23:db:b3:3e:c9:f8:75:52:a4:57:36: d0:fa:f9:36:5d:6e:fd:d3:e8:fd:dc:21:22:88:69: 2a:e7:fb:77:e9:a8:f5:c5:44:80:9b:91:b9:54:d5: 3f:bf:96:be:98:b3:20:1c:52:d1:db:27:2c:b2:24: 87:fa:c7:8f:a2:06:e4:cb:71:5f:99:d4:44:16:aa: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9E:EF:D3:8C:84:C7:9E:18:AF:0A:63:60:BA:B2:41:A7:CF:AE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c1:cc:6d:58:20:51:09:95:4f:76:47:cf:61:6b:fc:b5:4f: 8d:b2:93:46:ca:b8:5e:75:d8:61:35:63:84:13:54:e4:d8:87: 8b:ad:d4:46:4e:ee:40:da:1e:2c:44:c2:9f:ce:ae:93:8a:c8: 36:4a:16:30:3f:86:85:e8:68:a0:75:a0:4b:f9:47:1f:77:e5: 6d:84:86:0b:bb:05:8e:18:10:60:c4:95:1d:6d:7b:61:c1:89: e9:3c:8a:be:ea:22:d5:c5:17:ac:f7:44:a0:c0:f0:7c:be:81: 7f:a5:66:d1:72:dc:ef:66:bd:4f:b8:44:ec:e1:64:d7:2f:6e: 23:57:9a:15:8f:51:99:e5:1e:46:5f:94:a9:0a:d1:76:e6:a2: 45:98:97:d4:8c:62:0c:19:f4:8c:32:76:9b:22:0b:77:2d:4a: fd:f9:bd:54:ad:1c:ad:25:90:cc:63:2a:29:48:78:ce:cf:b6: 67:8c:ae:af:e7:50:51:44:c6:ce:fd:b8:f0:40:7e:ed:4b:8d: bf:70:45:35:c0:4e:b5:43:f0:35:1e:1c:da:ca:2c:aa:03:28: bd:ce:9e:6c:15:0d:8d:8e:e0:33:63:96:d6:ad:19:a3:8b:ac: 88:36:0e:72:04:79:ef:92:05:89:e2:6c:02:cc:42:1e:ef:ca: ad:c3:90:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzU04QmaZbnob6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWVhNDk2NmMtZjZlNy00MmY2LWI2ZTQtYTc5N2U0NTMxNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KEwSgoR/kog7KKd/tqlKySxX70AITnCVJpM jQMDlTQIyLtLZVXCSYSpFkKgIbPNS96oCznAZK3eH5IaKDS0/TzS1ezCk8z6DoMJ SmvjxtTu7xOFPoqgCj6susAZT0S4Ip/IiVGZDfJXCco4y9Rxy0mTmPOYkA/fwraS 3eka04vjgqz2CntMqcsv/W++UN+5HhTAz84zz4N62mGnUncdMlut7ewZvmXbEKHb 6C84yARQ0uB9y0zMI9uzPsn4dVKkVzbQ+vk2XW790+j93CEiiGkq5/t36aj1xUSA m5G5VNU/v5a+mLMgHFLR2ycssiSH+sePogbky3FfmdREFqqrbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKme79OMhMeeGK8KY2C6skGnz64DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDY5YTZmYWEtYTNjYy0z MGM3LTllYzItZmZkYTc4ZTE4MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHBzG1YIFEJlU92R89ha/y1T42yk0bKuF512GE1Y4QTVOTYh4ut1EZO 7kDaHixEwp/OrpOKyDZKFjA/hoXoaKB1oEv5Rx935W2Ehgu7BY4YEGDElR1te2HB iek8ir7qItXFF6z3RKDA8Hy+gX+lZtFy3O9mvU+4ROzhZNcvbiNXmhWPUZnlHkZf lKkK0XbmokWYl9SMYgwZ9IwydpsiC3ctSv35vVStHK0lkMxjKilIeM7PtmeMrq/n UFFExs79uPBAfu1Ljb9wRTXATrVD8DUeHNrKLKoDKL3OnmwVDY2O4DNjltatGaOL rIg2DnIEee+SBYnibALMQh7vyq3DkO4= -----END CERTIFICATE-----Generated at Fri Oct 17 10:49:32 2025 by rpki-client