$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ea86508-ec46-3873-9fe1-5336ed0f72e0.roa File: 3ea86508-ec46-3873-9fe1-5336ed0f72e0.roa (raw, json) Hash identifier: 25ncWM8h/Od8wOpmGcpdl5ZrYaEZmv0utZaXkOsG3JM= Subject key identifier: 32:8B:DB:72:51:4F:BD:44:34:F3:9D:4E:4A:1B:4D:BF:D4:35:37:73 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6305BF3FCF1EDBC6C500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ea86508-ec46-3873-9fe1-5336ed0f72e0.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:63:05:bf:3f:cf:1e:db:c6:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=85d506ee-cf6c-476f-931e-745d400ff624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:39:74:85:e4:90:72:c8:f1:fb:12:4a:fc:29: 6b:0c:e0:f9:4e:0f:0c:61:c4:0e:d1:11:d3:08:e2: 02:09:27:b6:3e:49:83:2a:f3:3f:9e:70:00:3d:39: 66:7a:ca:bf:f0:0d:21:c7:44:a2:85:6a:54:00:d4: 87:75:0d:e1:e5:79:5c:6a:46:92:12:df:0f:b1:75: 30:c9:60:a2:df:dc:63:ed:f8:40:1f:16:6c:44:f7: 70:98:71:75:c4:4a:2d:0f:50:4e:67:8b:41:ed:8e: 15:b4:b1:6d:85:ea:ea:be:fe:90:f9:83:7d:46:f4: fa:04:c9:bb:4d:77:2b:68:28:9c:06:bc:6e:07:4f: 0c:e7:93:02:d5:38:7d:86:81:3a:b9:20:63:09:f8: 7c:d3:a5:db:d9:eb:c3:6d:0d:9b:4e:0c:ed:78:79: 0d:e7:40:99:95:7d:21:79:3a:f6:d1:77:51:86:93: 41:7d:65:a2:41:54:f3:ef:7d:86:35:0c:bd:fb:06: 8b:b4:68:83:97:32:6b:dc:6b:0d:c4:87:7c:8a:20: a5:42:26:c6:2b:b0:ad:a4:29:a2:ca:42:9d:38:db: 56:33:84:8a:23:90:11:62:28:44:de:ee:2b:54:e3: 15:be:c3:c1:0e:c4:35:e6:a5:8b:d5:38:ad:8d:c0: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8B:DB:72:51:4F:BD:44:34:F3:9D:4E:4A:1B:4D:BF:D4:35:37:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ea86508-ec46-3873-9fe1-5336ed0f72e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:9d:20:27:87:90:ed:ee:f0:3c:13:a1:70:d3:35:89:0e:8e: 8f:ba:01:08:4b:10:9a:42:b6:3f:03:9c:46:8a:65:ee:23:46: 1c:93:8d:5a:ff:d8:26:79:dc:79:c6:93:f4:53:2c:f5:56:50: a8:6f:38:34:5a:71:1b:e2:21:88:82:05:18:d6:1f:6c:ed:ac: 9b:07:7f:6f:8a:bf:5e:44:57:4a:03:c1:6c:c9:a2:a9:bf:0d: d9:f3:56:0e:a1:4e:23:8f:4d:ae:f0:b9:e9:b7:21:b1:72:42: ce:d9:76:4c:47:f7:3c:c3:b8:0b:6b:ef:7b:57:b9:51:9b:8c: 98:b5:99:b6:c9:ca:22:56:1d:aa:1c:a5:f2:1a:59:5d:bb:a5: cb:a8:f7:2e:4d:c3:82:e0:05:45:86:fb:f4:b5:19:41:cc:14: 1f:af:64:cb:37:da:e2:f5:f0:db:42:94:a5:57:ea:15:d9:ca: 8e:f7:06:f3:aa:89:0c:c2:b5:c1:f7:c1:93:bc:e5:27:88:4d: b6:50:23:4c:c7:5d:44:51:2a:56:e5:49:1f:2d:7d:98:ba:da: 5a:bd:8f:37:46:08:c2:fb:6e:e7:e3:0b:2e:eb:82:14:fd:f8: 17:36:af:d0:63:48:69:f0:81:e1:ef:1c:13:42:c1:a9:99:18: 14:e2:f0:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWMFvz/PHtvGxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODVkNTA2ZWUtY2Y2Yy00NzZmLTkzMWUtNzQ1ZDQwMGZmNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTl0heSQcsjx+xJK/ClrDOD5Tg8MYcQO0RHT COICCSe2PkmDKvM/nnAAPTlmesq/8A0hx0SihWpUANSHdQ3h5XlcakaSEt8PsXUw yWCi39xj7fhAHxZsRPdwmHF1xEotD1BOZ4tB7Y4VtLFtherqvv6Q+YN9RvT6BMm7 TXcraCicBrxuB08M55MC1Th9hoE6uSBjCfh806Xb2evDbQ2bTgzteHkN50CZlX0h eTr20XdRhpNBfWWiQVTz732GNQy9+waLtGiDlzJr3GsNxId8iiClQibGK7CtpCmi ykKdONtWM4SKI5ARYihE3u4rVOMVvsPBDsQ15qWL1TitjcC+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKL23JRT71ENPOdTkobTb/UNTdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2VhODY1MDgtZWM0Ni0z ODczLTlmZTEtNTMzNmVkMGY3MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6dICeHkO3u8DwToXDTNYkOjo+6AQhLEJpCtj8DnEaKZe4jRhyTjVr/ 2CZ53HnGk/RTLPVWUKhvODRacRviIYiCBRjWH2ztrJsHf2+Kv15EV0oDwWzJoqm/ DdnzVg6hTiOPTa7wuem3IbFyQs7ZdkxH9zzDuAtr73tXuVGbjJi1mbbJyiJWHaoc pfIaWV27pcuo9y5Nw4LgBUWG+/S1GUHMFB+vZMs32uL18NtClKVX6hXZyo73BvOq iQzCtcH3wZO85SeITbZQI0zHXURRKlblSR8tfZi62lq9jzdGCML7bufjCy7rghT9 +Bc2r9BjSGnwgeHvHBNCwamZGBTi8J4= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:21 2025 by rpki-client