$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa File: 2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa (raw, json) Hash identifier: EQG4Z24qPm7KYcq2KwgT+48Z1R+1ExqzA2xH+2k4A+c= Subject key identifier: 7F:97:F7:18:86:A5:49:CE:05:2A:BD:A5:84:00:8A:85:4B:95:31:63 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE177150F1E599F12B3B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:17:71:50:f1:e5:99:f1:2b:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b669dd4f-e28d-4f94-be3c-a84d5679190b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:df:29:30:06:9d:3e:19:02:30:53:23:2b:5a: 91:99:b1:b8:69:26:bf:8f:9a:e6:5c:10:47:b3:97: 44:14:8a:25:60:a3:d6:02:bd:48:78:78:d7:d4:47: bf:b9:53:11:e1:3e:1b:5d:84:a6:da:55:07:bf:42: 9c:ec:17:9a:b2:ae:b9:59:bc:6f:6d:e0:6e:ff:7f: 00:63:d5:88:05:64:4b:fa:e4:aa:75:cc:b4:6a:4b: 3e:a8:9a:5b:28:75:bb:88:e8:e1:2a:88:1e:2d:40: 1f:cb:49:65:b6:7d:bf:15:97:e2:22:a3:89:8c:aa: 2e:01:59:7b:3c:a7:be:c0:3f:2e:73:fe:4d:ee:76: 1e:df:63:ed:73:71:6b:c6:53:00:4e:20:55:97:ad: f7:29:e0:4c:4d:e6:1b:4d:fe:1f:85:56:76:53:71: e7:e8:7e:5e:20:c6:ba:9a:55:42:56:c5:59:fc:dc: 16:b7:9a:7b:0a:96:4b:66:f0:62:b2:c4:cc:8a:58: 30:ad:bf:3c:ee:bc:47:2e:2e:f7:86:67:8a:f4:d2: a9:aa:11:4a:ef:a6:aa:f2:d3:32:3b:64:ad:55:73: b1:d8:1c:67:52:b7:cf:eb:e0:ef:3d:ab:17:9e:cf: 32:88:a1:e2:91:1d:4d:1d:01:c1:63:ea:c0:ae:51: 63:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:97:F7:18:86:A5:49:CE:05:2A:BD:A5:84:00:8A:85:4B:95:31:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:fe:72:05:53:a1:76:31:17:c8:11:36:40:b8:65:73:4e:0b: 87:78:95:22:86:ed:f2:95:32:50:af:2f:d2:6a:25:99:3e:c2: 66:73:ca:32:11:ed:16:de:31:1a:9a:7b:e5:db:19:a3:e5:29: 1a:74:c3:2b:d9:3a:0e:ae:34:a5:06:ab:6a:3b:da:9a:af:98: 55:cf:4f:02:72:fa:50:c4:5e:97:0c:e8:9c:00:5b:bf:75:55: f0:fc:43:1f:2b:3a:8b:20:0c:1c:af:0a:90:67:f1:19:4c:27: f6:7e:60:6d:0c:7d:98:c3:08:fe:9b:46:63:c8:5e:b0:20:13: b0:3c:98:a5:6b:eb:a4:eb:fa:5b:a2:ae:a0:90:bf:d4:93:04: bc:ad:30:ee:2a:22:7d:48:f1:14:24:8b:8f:92:01:73:b6:f3: 3c:9d:01:0d:41:8c:b5:3b:de:ae:1c:ac:b2:3e:ed:b6:22:2e: 81:47:da:83:3e:73:3e:3e:a2:b9:d3:bb:bf:1e:71:75:6b:f5: 3d:20:79:75:36:85:a2:1b:11:be:9c:19:f4:1f:c4:fe:24:fa: 11:f5:c1:14:32:4a:cb:d9:02:a5:59:0c:1a:61:9d:4f:f8:17: f5:22:11:c1:e5:37:c8:3e:8d:54:95:d6:77:20:6d:48:60:04: c9:71:e8:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhdxUPHlmfErOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjY2OWRkNGYtZTI4ZC00Zjk0LWJlM2MtYTg0ZDU2NzkxOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t8pMAadPhkCMFMjK1qRmbG4aSa/j5rmXBBH s5dEFIolYKPWAr1IeHjX1Ee/uVMR4T4bXYSm2lUHv0Kc7Beasq65WbxvbeBu/38A Y9WIBWRL+uSqdcy0aks+qJpbKHW7iOjhKogeLUAfy0lltn2/FZfiIqOJjKouAVl7 PKe+wD8uc/5N7nYe32Ptc3FrxlMATiBVl633KeBMTeYbTf4fhVZ2U3Hn6H5eIMa6 mlVCVsVZ/NwWt5p7CpZLZvBissTMilgwrb887rxHLi73hmeK9NKpqhFK76aq8tMy O2StVXOx2BxnUrfP6+DvPasXns8yiKHikR1NHQHBY+rArlFjpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+X9xiGpUnOBSq9pYQAioVLlTFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg5MmQ1ZTItZDhiMy0z ZWI4LWFiODEtOTcyMDQ2ZmQyOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3+cgVToXYxF8gRNkC4ZXNOC4d4lSKG7fKVMlCvL9JqJZk+wmZzyjIR 7RbeMRqae+XbGaPlKRp0wyvZOg6uNKUGq2o72pqvmFXPTwJy+lDEXpcM6JwAW791 VfD8Qx8rOosgDByvCpBn8RlMJ/Z+YG0MfZjDCP6bRmPIXrAgE7A8mKVr66Tr+lui rqCQv9STBLytMO4qIn1I8RQki4+SAXO28zydAQ1BjLU73q4crLI+7bYiLoFH2oM+ cz4+ornTu78ecXVr9T0geXU2haIbEb6cGfQfxP4k+hH1wRQySsvZAqVZDBphnU/4 F/UiEcHlN8g+jVSV1ncgbUhgBMlx6Io= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:35 2025 by rpki-client