$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/471e2af9-c75d-3e1d-b4a3-b0cced7519dc.roa File: 471e2af9-c75d-3e1d-b4a3-b0cced7519dc.roa (raw, json) Hash identifier: WHvQ2FWypK9sCuDhaFU3p5tw7nsxMOc/HuUvGFzVDUU= Subject key identifier: 1B:CD:78:22:0E:6A:64:F3:19:B1:4D:CB:03:24:AE:9D:9F:04:73:EE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD545873D35CB0B736D180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/471e2af9-c75d-3e1d-b4a3-b0cced7519dc.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:54:58:73:d3:5c:b0:b7:36:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=dd61fa4c-04a7-4d8d-991f-bbd6071d6971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:a9:72:66:35:f8:ce:30:8a:21:d9:a9:04: 4f:08:b6:91:da:2f:b7:7e:14:cb:76:3c:aa:cc:ad: ee:11:4a:15:bd:60:2d:ea:09:26:85:62:6e:17:ff: 35:92:37:e2:03:4c:17:a9:ac:43:2d:8c:b1:8d:1e: 7c:19:72:26:38:46:05:51:76:49:6f:a0:05:62:4f: a0:ec:e4:82:4a:da:99:81:46:14:de:fd:9e:79:02: a5:3f:30:3f:8d:69:35:88:ff:c9:13:17:2d:eb:50: 86:7f:cd:b6:c1:f2:44:f7:e2:2e:2f:e8:79:e4:4b: bd:cd:6f:ea:a4:fe:40:32:05:5b:d3:4d:0e:d6:bb: 88:a7:58:6b:28:14:97:fa:bb:44:68:bb:da:4d:2d: a8:c0:e3:f8:ad:70:11:59:72:9e:8e:40:f3:da:13: 79:73:9a:79:91:56:d0:9b:9c:0a:0d:6c:62:cb:06: 7f:5e:0d:15:8c:d1:c8:57:48:09:51:1a:f0:7d:2e: 24:0f:f1:c5:2c:a5:16:2d:bd:b2:c9:8d:b1:4e:33: 38:b0:e1:49:2e:6a:8a:80:c0:cc:6a:98:62:de:5b: a0:c9:7f:00:07:65:c2:45:83:24:f9:8d:24:9b:f1: 35:f2:c4:bd:e1:7b:2a:cf:7d:c7:ac:06:8c:c5:c1: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:78:22:0E:6A:64:F3:19:B1:4D:CB:03:24:AE:9D:9F:04:73:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/471e2af9-c75d-3e1d-b4a3-b0cced7519dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f7:c1:2c:3d:6d:4c:de:af:28:31:95:54:ed:27:aa:55:ed: c8:ec:71:7f:0f:24:df:cb:14:a9:f1:2d:57:b7:8a:20:4c:db: a3:1c:4e:76:91:e4:6c:e2:99:14:40:51:61:0e:9c:18:41:78: f5:0f:a1:51:94:2b:50:a4:50:3a:e5:67:52:5b:ae:66:e5:e9: ce:29:2b:20:e1:7a:88:12:10:0d:6b:01:f4:84:15:d6:72:99: d2:2b:26:d7:17:98:c7:d8:0e:c6:b3:49:99:0f:01:60:28:a4: e0:0b:a1:0e:92:c9:09:54:36:10:b4:3c:8b:66:96:76:73:9d: 8a:fb:71:d0:80:db:58:23:4d:c4:99:02:34:c7:e3:d4:19:98: 7e:06:76:36:4c:1b:78:34:c8:34:3a:52:ff:f4:ca:26:20:8b: fc:17:c7:90:18:8f:5a:ff:9c:fb:45:ef:25:85:6c:5b:db:bf: 06:39:40:6b:51:df:b1:f8:8f:f5:90:c2:bf:db:6f:45:ec:20: 5e:e5:e5:0a:a7:ad:a5:d1:ce:b1:ba:a6:12:3b:c4:6c:e7:ef: 96:54:34:24:36:d0:09:13:2f:28:9b:5a:2c:6a:df:91:69:b0: 8e:9b:1e:6c:7f:8f:43:b8:c3:13:55:87:cc:a2:d5:fc:c1:33: 99:8b:b5:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVRYc9NcsLc20YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGQ2MWZhNGMtMDRhNy00ZDhkLTk5MWYtYmJkNjA3MWQ2OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncKpcmY1+M4wiiHZqQRPCLaR2i+3fhTLdjyq zK3uEUoVvWAt6gkmhWJuF/81kjfiA0wXqaxDLYyxjR58GXImOEYFUXZJb6AFYk+g 7OSCStqZgUYU3v2eeQKlPzA/jWk1iP/JExct61CGf822wfJE9+IuL+h55Eu9zW/q pP5AMgVb000O1ruIp1hrKBSX+rtEaLvaTS2owOP4rXARWXKejkDz2hN5c5p5kVbQ m5wKDWxiywZ/Xg0VjNHIV0gJURrwfS4kD/HFLKUWLb2yyY2xTjM4sOFJLmqKgMDM aphi3lugyX8AB2XCRYMk+Y0km/E18sS94Xsqz33HrAaMxcHdUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvNeCIOamTzGbFNywMkrp2fBHPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDcxZTJhZjktYzc1ZC0z ZTFkLWI0YTMtYjBjY2VkNzUxOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj3wSw9bUzerygxlVTtJ6pV7cjscX8PJN/LFKnxLVe3iiBM26McTnaR 5GzimRRAUWEOnBhBePUPoVGUK1CkUDrlZ1Jbrmbl6c4pKyDheogSEA1rAfSEFdZy mdIrJtcXmMfYDsazSZkPAWAopOALoQ6SyQlUNhC0PItmlnZznYr7cdCA21gjTcSZ AjTH49QZmH4GdjZMG3g0yDQ6Uv/0yiYgi/wXx5AYj1r/nPtF7yWFbFvbvwY5QGtR 37H4j/WQwr/bb0XsIF7l5QqnraXRzrG6phI7xGzn75ZUNCQ20AkTLyibWixq35Fp sI6bHmx/j0O4wxNVh8yi1fzBM5mLtbY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:36 2025 by rpki-client