$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa File: 4788700d-5f68-32af-b8a9-fbb0558d4b24.roa (raw, json) Hash identifier: 50RG536eEGa+h2hVkNx6MOMF+0QF7Vez+50ZQ4c5DPg= Subject key identifier: DE:09:70:19:CC:A8:C4:62:2E:67:7B:DA:01:FB:32:B3:05:A2:E8:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE1760803161E6AD9EE580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:17:60:80:31:61:e6:ad:9e:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0172b777-370a-4303-9b4f-a16692942232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7b:ad:b1:22:61:58:fe:b0:76:73:f5:16:16: 6c:2c:91:28:7d:07:d2:fc:33:5b:d9:53:67:29:2b: b2:16:e6:5b:dc:ec:e3:f2:52:5f:09:42:eb:14:5c: 7d:89:bb:14:3b:cb:15:60:86:d6:ec:ac:10:12:06: 05:d8:0a:7d:8a:54:af:75:16:21:d1:7d:a4:6c:10: d4:4c:77:20:e8:3f:26:3f:38:d1:f4:5f:59:0d:09: e9:54:a6:62:07:79:22:cb:04:96:0f:9f:ba:6c:6c: 51:57:62:b8:a9:72:f7:17:83:3d:4c:b2:09:0b:ce: 43:77:95:25:9a:b7:1c:42:be:e0:1c:47:92:55:61: 72:2e:05:f6:9f:c3:94:64:db:df:e3:8c:74:7c:5d: 56:d0:23:ad:d7:ac:df:f1:2a:7e:5d:17:36:5d:2b: df:f7:9a:08:d7:80:e5:89:7e:cd:24:d0:5b:78:a5: ff:e5:a0:73:04:fb:c2:97:a1:eb:b0:5d:0f:b0:d7: b8:5f:85:57:4b:5d:db:14:d6:97:5c:93:97:3e:6f: 4f:2b:eb:72:56:aa:33:fc:57:c6:43:22:0b:e1:84: 7c:1f:30:ba:1d:e6:80:71:9d:aa:c3:37:18:1d:a5: 97:a1:b1:7b:7a:e3:71:ef:5f:46:8d:bc:d0:e9:8e: 14:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:09:70:19:CC:A8:C4:62:2E:67:7B:DA:01:FB:32:B3:05:A2:E8:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:04:cd:e4:42:1d:91:49:b5:f6:d2:16:a5:29:3a:bd:1b:de: dc:86:1b:8d:9d:e2:f2:d0:6f:e1:c4:6b:10:cd:14:b0:cf:58: f7:40:e2:ea:dc:20:1a:b6:07:9e:35:20:35:51:28:5b:46:44: cb:7b:67:60:89:9f:4d:32:e8:5a:a0:15:72:8d:f2:65:be:b2: 3e:63:10:24:a6:87:63:1f:5b:bb:be:17:85:cc:16:c6:d0:5e: 03:c1:10:8d:a8:dd:cf:d2:13:8d:fc:d9:b2:08:a7:9c:b4:d8: 8f:99:13:25:73:5a:54:d6:07:91:f8:48:9a:25:16:82:c4:69: b8:fd:d2:34:d9:0a:37:10:c7:ed:12:15:1d:d6:73:31:7f:80: 3c:ba:a7:7d:b4:67:8d:96:77:b8:ae:36:a8:04:8b:4b:36:6d: 4a:c9:8b:d5:57:7e:65:47:3d:b8:18:f8:9f:6d:8a:d4:bd:f8: 3c:3c:ae:94:fa:1f:c4:de:b0:0b:87:0e:64:49:76:aa:1d:4d: 61:b5:63:81:74:ab:e4:ab:30:fc:2c:6a:e5:b6:e0:26:e5:be: e2:88:03:3b:55:37:e3:fa:75:d8:1d:56:8b:40:4c:6f:14:5d: c1:c4:39:9e:5e:a0:a0:34:21:91:bb:5a:1f:7a:d2:25:9e:47: 1a:16:6b:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhdggDFh5q2e5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDE3MmI3NzctMzcwYS00MzAzLTliNGYtYTE2NjkyOTQyMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinutsSJhWP6wdnP1FhZsLJEofQfS/DNb2VNn KSuyFuZb3Ozj8lJfCULrFFx9ibsUO8sVYIbW7KwQEgYF2Ap9ilSvdRYh0X2kbBDU THcg6D8mPzjR9F9ZDQnpVKZiB3kiywSWD5+6bGxRV2K4qXL3F4M9TLIJC85Dd5Ul mrccQr7gHEeSVWFyLgX2n8OUZNvf44x0fF1W0COt16zf8Sp+XRc2XSvf95oI14Dl iX7NJNBbeKX/5aBzBPvCl6HrsF0PsNe4X4VXS13bFNaXXJOXPm9PK+tyVqoz/FfG QyIL4YR8HzC6HeaAcZ2qwzcYHaWXobF7euNx719GjbzQ6Y4UzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4JcBnMqMRiLmd72gH7MrMFoujWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDc4ODcwMGQtNWY2OC0z MmFmLWI4YTktZmJiMDU1OGQ0YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkEzeRCHZFJtfbSFqUpOr0b3tyGG42d4vLQb+HEaxDNFLDPWPdA4urc IBq2B541IDVRKFtGRMt7Z2CJn00y6FqgFXKN8mW+sj5jECSmh2MfW7u+F4XMFsbQ XgPBEI2o3c/SE4382bIIp5y02I+ZEyVzWlTWB5H4SJolFoLEabj90jTZCjcQx+0S FR3WczF/gDy6p320Z42Wd7iuNqgEi0s2bUrJi9VXfmVHPbgY+J9titS9+Dw8rpT6 H8TesAuHDmRJdqodTWG1Y4F0q+SrMPwsauW24CblvuKIAztVN+P6ddgdVotATG8U XcHEOZ5eoKA0IZG7Wh960iWeRxoWa5U= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:05 2025 by rpki-client