$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d2bfa6d-f368-3589-bda1-46463fd6657c.roa File: 6d2bfa6d-f368-3589-bda1-46463fd6657c.roa (raw, json) Hash identifier: 42qgGR2tojwusaoTWxFRNIE0LEnxMZhxYCh9/RMjhTs= Subject key identifier: 48:15:26:BA:4A:6A:51:A9:A6:63:86:77:4C:DE:F9:D2:DC:73:B3:C4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE214CCA36A953EB20B480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d2bfa6d-f368-3589-bda1-46463fd6657c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:21:4c:ca:36:a9:53:eb:20:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f3bad645-5f75-4d65-b8cd-45e14bb67d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:5f:66:e0:10:bb:d4:ba:f6:aa:ff:00:17: 56:17:60:1d:4d:f8:6a:ba:bc:5c:94:77:d5:f8:cc: 46:4d:64:e4:0e:1a:9c:2d:3f:3d:60:fa:1c:4f:3c: 2f:3f:f4:40:3a:65:a2:90:7c:4b:bd:71:b8:fc:c5: 49:3e:54:5d:ad:d7:1c:5b:69:a3:d1:77:a8:5e:dc: 70:42:c2:05:c6:f9:1d:ff:93:0e:dc:6e:56:b5:ec: 04:5a:b5:13:d1:76:f1:8a:85:af:d1:a0:eb:84:12: 37:3b:2e:c6:04:e1:e1:70:76:57:48:60:5d:bd:ae: e2:65:33:d9:16:53:e7:b5:5b:61:21:af:22:0e:1e: 1a:3e:4d:61:0f:e6:10:91:f9:98:f3:53:e5:02:e0: 2b:ae:29:80:96:6c:26:6c:91:80:7c:02:b0:35:a7: 4a:12:74:8b:b2:3f:bc:21:fa:a0:cc:a4:df:6c:bd: c0:9b:c0:d7:e4:5f:ae:e5:59:76:cc:41:02:19:73: a1:5b:36:7c:54:ce:29:76:f2:ab:b0:df:76:7c:6a: 17:1b:25:8a:df:72:8e:c7:73:40:fa:3a:5d:ea:2c: a4:6c:44:e3:97:1a:ae:55:45:1f:54:6e:b8:46:97: 3c:0a:17:f7:13:ad:fe:a0:2b:13:c9:16:8a:2a:4e: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:15:26:BA:4A:6A:51:A9:A6:63:86:77:4C:DE:F9:D2:DC:73:B3:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d2bfa6d-f368-3589-bda1-46463fd6657c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:70:58:27:f2:1b:30:0b:70:a2:25:53:e0:e9:9b:b9:0f:59: ba:c8:29:a9:22:1a:33:e5:a2:65:a1:fb:3a:b9:09:be:6e:9c: c6:71:62:e5:b3:c5:2b:7b:79:3e:08:f0:77:d3:d8:0b:28:71: a5:d2:aa:89:c7:f9:6a:f9:8f:6e:f1:26:86:4c:7b:93:73:3c: 8c:0c:ca:3e:cf:72:24:35:eb:0c:4f:22:31:1b:99:4b:ac:5d: db:71:d1:0c:98:39:bf:34:27:4d:7e:46:83:00:4a:a1:81:ea: df:bc:ec:a7:c8:68:ab:a4:c8:9c:ce:53:32:e0:9f:3c:b1:37: 51:6e:d4:8f:15:e0:03:e2:8f:20:11:5d:f7:9c:7c:84:52:dc: 8c:59:1d:62:e1:1c:61:ce:d0:87:d3:fb:bb:67:b9:41:0e:79: 99:f4:8c:ae:61:d1:33:de:bc:c1:3c:74:69:de:de:98:fd:1f: b4:a1:b4:38:d8:80:42:64:88:8a:6f:a3:3b:14:99:7e:a7:f3: 6c:9a:cd:7d:fd:60:47:2e:66:46:ac:27:9a:41:28:a1:47:2a: ff:e3:79:b1:fb:28:d1:05:fa:f7:94:ff:b4:c5:01:bb:46:0d: e3:73:18:65:17:79:39:84:32:4d:e9:51:ab:dd:26:ad:3a:2c: f1:3c:83:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziFMyjapU+sgtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjNiYWQ2NDUtNWY3NS00ZDY1LWI4Y2QtNDVlMTRiYjY3ZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxNfZuAQu9S69qr/ABdWF2AdTfhqurxclHfV +MxGTWTkDhqcLT89YPocTzwvP/RAOmWikHxLvXG4/MVJPlRdrdccW2mj0XeoXtxw QsIFxvkd/5MO3G5WtewEWrUT0XbxioWv0aDrhBI3Oy7GBOHhcHZXSGBdva7iZTPZ FlPntVthIa8iDh4aPk1hD+YQkfmY81PlAuArrimAlmwmbJGAfAKwNadKEnSLsj+8 IfqgzKTfbL3Am8DX5F+u5Vl2zEECGXOhWzZ8VM4pdvKrsN92fGoXGyWK33KOx3NA +jpd6iykbETjlxquVUUfVG64Rpc8Chf3E63+oCsTyRaKKk4D/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgVJrpKalGppmOGd0ze+dLcc7PEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmQyYmZhNmQtZjM2OC0z NTg5LWJkYTEtNDY0NjNmZDY2NTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrcIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZwWCfyGzALcKIlU+Dpm7kPWbrIKakiGjPlomWh+zq5Cb5unMZxYuWz xSt7eT4I8HfT2AsocaXSqonH+Wr5j27xJoZMe5NzPIwMyj7PciQ16wxPIjEbmUus Xdtx0QyYOb80J01+RoMASqGB6t+87KfIaKukyJzOUzLgnzyxN1Fu1I8V4APijyAR XfecfIRS3IxZHWLhHGHO0IfT+7tnuUEOeZn0jK5h0TPevME8dGne3pj9H7ShtDjY gEJkiIpvozsUmX6n82yazX39YEcuZkasJ5pBKKFHKv/jebH7KNEF+veU/7TFAbtG DeNzGGUXeTmEMk3pUavdJq06LPE8g+c= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:26 2025 by rpki-client