$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa File: 1cd548a2-3f0a-3bae-b690-0b2164300b26.roa (raw, json) Hash identifier: I4HbzisRGOCLwKAjv5Mr7B2qVQtpVWuetVGt8qRa8DI= Subject key identifier: D9:0C:8E:68:EC:23:12:D4:FB:D6:68:E0:3A:10:C7:5B:AE:29:7F:D7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE0E2126F6B82CE5D7B580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 209.85.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0e:21:26:f6:b8:2c:e5:d7:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=29eac6db-324d-4161-9078-ae8d0a6ea1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:17:c3:ba:21:d5:71:fa:ee:63:2f:1f:a6: 6b:0c:cd:84:65:83:13:e5:97:9a:ca:b2:77:55:80: d1:ad:9e:a1:56:41:fb:6f:19:92:29:50:3a:be:0f: d1:be:99:4f:77:83:0a:0e:f3:e7:3b:ff:e2:d1:ea: 93:0b:24:af:84:0e:15:3b:e5:52:29:b2:49:d3:80: d1:26:0d:05:2f:f2:ca:a8:24:c5:97:d1:0e:35:e9: 52:95:43:71:ba:cc:7f:21:f1:11:38:b4:bd:3c:88: 71:63:61:0d:29:06:80:5f:05:45:0d:5e:58:42:39: 08:b8:b2:34:79:f1:ac:25:6f:d3:34:95:ea:33:4b: ee:d4:fe:e8:5d:2f:79:43:c7:8e:6b:30:e9:41:f7: c1:03:d1:40:b5:29:64:3e:f9:00:bc:bb:22:28:b4: 71:23:32:e7:a2:e0:f3:b1:4e:35:a4:26:d4:6c:33: 4f:4e:e7:df:7d:84:3a:bb:d9:89:f0:2c:85:e6:e2: 48:fc:07:11:4d:ba:6d:66:ee:28:6b:a6:3d:fa:19: 40:7d:40:9a:14:83:34:2f:fb:a5:4f:f3:52:eb:57: c4:81:ef:7c:3b:cf:2d:81:94:ef:8f:0c:51:ee:75: 7d:35:91:1b:0f:f0:e6:1c:9a:ed:19:61:64:4f:86: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0C:8E:68:EC:23:12:D4:FB:D6:68:E0:3A:10:C7:5B:AE:29:7F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:1a:42:b2:13:a3:76:a0:be:01:fc:4b:fa:09:a7:06:b9:c3: 2b:2b:d8:41:e5:c9:0a:0e:f9:29:99:32:66:6f:63:db:97:ae: 63:6d:d6:c3:3a:b4:70:45:17:cb:be:af:05:36:95:f4:40:84: 91:d6:ac:0b:25:e6:1d:55:d1:98:37:65:88:f9:08:64:1f:17: 1b:10:0a:95:23:0f:65:37:53:78:d0:97:6e:8d:6b:99:05:7e: 2d:6c:f4:c1:e4:a6:20:de:2c:3b:7b:b4:f8:ee:f6:5b:e3:b0: 68:ac:b4:4b:21:d1:f2:69:1c:b2:6f:c8:82:10:96:66:46:a5: 31:76:72:88:82:59:9b:15:ae:11:c9:ac:45:d8:62:db:14:52: ac:26:a2:1f:73:6f:a1:ee:d3:d4:09:06:b2:9c:37:7a:75:14: 95:a9:47:9f:41:10:51:38:c6:af:0f:ba:c7:c0:fe:96:6a:c9: cf:58:ba:40:40:0f:6f:40:72:ab:34:b2:e1:37:c0:9c:42:79: de:d6:85:00:8d:74:f2:b6:f9:97:69:5c:b4:ce:01:72:1c:f1: 77:64:4f:0d:66:5d:a5:64:b6:2b:af:3c:00:54:ec:cd:9c:40: 38:54:be:9e:b5:61:f2:4c:16:84:6a:30:08:e0:86:66:d4:07: 6f:4c:2e:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzg4hJva4LOXXtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjllYWM2ZGItMzI0ZC00MTYxLTkwNzgtYWU4ZDBhNmVhMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBkXw7oh1XH67mMvH6ZrDM2EZYMT5ZeayrJ3 VYDRrZ6hVkH7bxmSKVA6vg/RvplPd4MKDvPnO//i0eqTCySvhA4VO+VSKbJJ04DR Jg0FL/LKqCTFl9EONelSlUNxusx/IfEROLS9PIhxY2ENKQaAXwVFDV5YQjkIuLI0 efGsJW/TNJXqM0vu1P7oXS95Q8eOazDpQffBA9FAtSlkPvkAvLsiKLRxIzLnouDz sU41pCbUbDNPTufffYQ6u9mJ8CyF5uJI/AcRTbptZu4oa6Y9+hlAfUCaFIM0L/ul T/NS61fEge98O88tgZTvjwxR7nV9NZEbD/DmHJrtGWFkT4YOhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkMjmjsIxLU+9Zo4DoQx1uuKX/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWNkNTQ4YTItM2YwYS0z YmFlLWI2OTAtMGIyMTY0MzAwYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0VWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQaQrITo3agvgH8S/oJpwa5wysr2EHlyQoO+SmZMmZvY9uXrmNt1sM6 tHBFF8u+rwU2lfRAhJHWrAsl5h1V0Zg3ZYj5CGQfFxsQCpUjD2U3U3jQl26Na5kF fi1s9MHkpiDeLDt7tPju9lvjsGistEsh0fJpHLJvyIIQlmZGpTF2coiCWZsVrhHJ rEXYYtsUUqwmoh9zb6Hu09QJBrKcN3p1FJWpR59BEFE4xq8PusfA/pZqyc9YukBA D29Acqs0suE3wJxCed7WhQCNdPK2+ZdpXLTOAXIc8XdkTw1mXaVktiuvPABU7M2c QDhUvp61YfJMFoRqMAjghmbUB29MLpQ= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:36 2025 by rpki-client