$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa File: 3c656b6b-cda2-308f-9d04-80808e67e293.roa (raw, json) Hash identifier: 9XFmUQ7R+TQ3ABWow+jwZahOG61a5af3dFznyN8E+Ww= Subject key identifier: B9:DB:A8:71:99:2B:86:37:6C:35:B6:D2:9F:28:D5:1E:90:04:72:EB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE23811ECCA43163329080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 216.58.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:23:81:1e:cc:a4:31:63:32:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=9df059d1-d27f-46ed-81dc-65097fdd3b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7f:b8:df:e6:74:32:ad:46:6c:3d:32:0e:a4: cc:61:c1:a5:16:42:80:d6:ec:83:2a:7e:7c:d9:c1: 3f:57:da:b5:86:ab:02:d6:b4:ab:73:34:62:50:5d: 89:9b:49:be:00:3b:7f:79:19:f5:1f:0b:5f:2f:cc: 35:e3:68:c9:87:52:92:9b:64:08:1f:79:04:5f:de: 29:23:c3:b6:f6:3a:66:71:fc:b0:5a:2f:16:7d:3e: 45:71:de:8c:56:5e:39:5f:62:f5:17:8e:1b:78:2f: 20:ad:75:62:6c:ca:3e:f6:22:3b:eb:0a:15:e7:05: e9:3a:0b:b2:5a:65:96:bc:d4:eb:c0:03:56:97:dc: 32:08:67:d8:18:63:e8:12:f7:e7:b9:df:82:15:46: 7e:6b:55:a7:34:00:94:07:c2:d7:54:95:76:bd:4f: bb:a3:33:32:63:d6:07:f0:24:f4:51:13:2a:8d:c3: 44:3d:b0:f1:8a:79:39:60:16:a1:a0:63:b4:19:11: 83:e7:a0:96:34:68:6a:4a:90:6b:de:3d:f9:3c:1c: 70:52:4d:cc:2c:14:fe:82:04:5b:4f:4d:b5:76:d5: d4:7f:bb:a8:55:be:1a:4f:3e:99:e6:89:7b:15:68: a9:16:5b:65:08:2d:6f:8f:3c:84:1e:02:4d:71:65: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DB:A8:71:99:2B:86:37:6C:35:B6:D2:9F:28:D5:1E:90:04:72:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ea:c8:13:c9:2c:5a:90:f8:a1:48:dd:88:66:29:08:dd:70: 77:08:15:98:48:1c:50:cd:a5:55:c5:01:5c:07:7c:56:9c:06: a7:e4:2f:37:a3:c4:57:4a:34:14:3b:78:4c:40:f0:02:b0:1a: 00:74:ee:62:fc:b4:eb:ad:55:95:e1:ad:7c:dd:3f:6f:13:1c: 2e:6a:2c:c7:ad:d7:3c:66:83:aa:d4:b4:74:fe:6e:1f:a5:11: 6f:f5:dc:dc:50:cb:12:16:00:2d:fe:52:d5:5b:cc:22:3a:9e: 54:10:6e:d7:e3:58:17:0d:e1:0a:58:cd:0d:b7:7a:6a:65:26: f6:6c:61:4e:02:04:27:15:29:8e:49:7c:b2:1f:0e:16:93:fd: cb:f7:b0:45:b5:04:3c:90:2e:8a:41:d2:a7:3f:9a:26:40:78: 4f:71:52:77:e5:bd:20:01:e0:d9:fa:94:60:d5:b4:2d:5d:47: 53:1b:8e:83:4e:42:a3:d5:fb:34:46:9b:c5:c3:43:85:cf:0d: d3:d4:8e:e6:41:e7:f9:b5:55:cf:6c:15:c2:29:85:10:42:bd: c7:b1:22:5a:4d:b2:9a:a6:73:2a:99:11:76:dd:3d:9d:83:6f: 17:c4:52:55:3c:09:0f:4c:0e:34:3a:ea:94:50:b6:20:d7:e3: cc:6b:56:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziOBHsykMWMykIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OWRmMDU5ZDEtZDI3Zi00NmVkLTgxZGMtNjUwOTdmZGQzYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH+43+Z0Mq1GbD0yDqTMYcGlFkKA1uyDKn58 2cE/V9q1hqsC1rSrczRiUF2Jm0m+ADt/eRn1HwtfL8w142jJh1KSm2QIH3kEX94p I8O29jpmcfywWi8WfT5Fcd6MVl45X2L1F44beC8grXVibMo+9iI76woV5wXpOguy WmWWvNTrwANWl9wyCGfYGGPoEvfnud+CFUZ+a1WnNACUB8LXVJV2vU+7ozMyY9YH 8CT0URMqjcNEPbDxink5YBahoGO0GRGD56CWNGhqSpBr3j35PBxwUk3MLBT+ggRb T021dtXUf7uoVb4aTz6Z5ol7FWipFltlCC1vjzyEHgJNcWXYLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnbqHGZK4Y3bDW20p8o1R6QBHLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2M2NTZiNmItY2RhMi0z MDhmLTlkMDQtODA4MDhlNjdlMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2DrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7qyBPJLFqQ+KFI3YhmKQjdcHcIFZhIHFDNpVXFAVwHfFacBqfkLzej xFdKNBQ7eExA8AKwGgB07mL8tOutVZXhrXzdP28THC5qLMet1zxmg6rUtHT+bh+l EW/13NxQyxIWAC3+UtVbzCI6nlQQbtfjWBcN4QpYzQ23emplJvZsYU4CBCcVKY5J fLIfDhaT/cv3sEW1BDyQLopB0qc/miZAeE9xUnflvSAB4Nn6lGDVtC1dR1MbjoNO QqPV+zRGm8XDQ4XPDdPUjuZB5/m1Vc9sFcIphRBCvcexIlpNspqmcyqZEXbdPZ2D bxfEUlU8CQ9MDjQ66pRQtiDX48xrVlk= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:06 2025 by rpki-client