$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa File: 847d8ab5-2804-3989-95b6-9f3006588f5a.roa (raw, json) Hash identifier: rDAq6V/M6r6YAQgZkPmpMugZeQgmJ4dlfXEKujjiZH0= Subject key identifier: F9:CF:84:F4:25:FA:C6:53:19:D4:10:F2:46:54:36:C6:CD:53:7C:38 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6A9F57F422A5CFF2EE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6a:9f:57:f4:22:a5:cf:f2:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=efdd3445-4f78-4e0e-917f-7e436103dcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1b:30:b9:9c:e0:8e:36:f7:e5:69:db:8e:98: 9b:2f:3c:55:58:47:ed:9d:a8:6c:e8:6e:db:69:bc: 34:37:bc:4a:41:89:dd:83:b7:cf:27:30:44:8a:39: 3d:f0:2a:8c:63:b0:08:81:a7:6d:37:7d:0f:be:34: 22:fe:f8:df:3f:85:4e:39:5d:06:70:a9:28:6d:df: 0b:09:c0:b6:af:be:d0:69:7e:16:ba:05:35:68:a1: 23:7d:71:04:45:e3:53:f2:c8:8f:f1:82:8b:41:8b: 14:a1:61:c1:2c:c0:9e:bc:af:ea:3b:23:16:66:cc: 6c:71:1c:1f:72:03:e2:5c:bd:ad:c8:26:39:14:b2: c7:8d:b0:fa:f8:4a:db:fc:3e:aa:f7:1c:b4:07:40: 8a:71:1f:b8:a2:62:64:6b:41:5d:12:27:25:2e:68: 40:73:55:58:80:f0:86:d6:2f:12:f9:2e:15:ec:36: be:b9:c3:b5:1e:b9:cd:d1:80:12:9c:1f:d7:11:bf: 6a:a4:c5:bd:64:76:8a:7c:21:a8:5e:d9:f1:c3:b3: d8:2b:a7:b2:95:28:cf:d8:a8:90:5c:f6:63:6c:15: d6:29:92:64:73:b1:39:84:43:f7:4e:26:c2:55:cb: 4f:03:99:6b:b1:37:9c:f3:6f:e2:29:86:5e:fd:0d: 1d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:84:F4:25:FA:C6:53:19:D4:10:F2:46:54:36:C6:CD:53:7C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b3:65:6e:02:44:d0:34:53:99:ab:8a:00:1f:c2:86:20:43: 90:b7:c3:bb:37:92:c3:a1:e4:2c:94:88:b2:66:99:43:96:75: 67:db:c8:02:54:2b:71:fc:b1:08:87:5a:51:c2:35:14:82:f0: 8f:9b:f7:ff:e0:a7:d7:d3:43:5a:c4:20:84:61:34:5c:fb:1d: 33:d8:c7:0a:d6:e2:89:69:89:dd:a1:ac:c7:78:12:72:4c:79: 99:42:66:94:17:f6:f2:87:ed:29:e3:fe:ed:5c:15:8c:d7:b7: 18:3e:5c:d3:67:cb:6e:cc:ed:1c:a7:1e:c3:42:09:bb:99:17: d2:98:2f:ca:3f:da:b9:82:1e:1a:25:3a:8b:30:79:c7:18:49: 86:9f:a0:62:90:5f:b0:3d:cc:2f:39:27:02:60:5e:19:ec:3f: 64:60:e0:1e:e9:5e:90:72:30:94:7c:c6:57:1b:62:af:34:a5: cd:78:03:cf:3d:bd:e4:12:57:72:67:a5:16:43:89:cd:be:68: 1f:be:7f:7d:1a:3c:a3:d3:35:17:97:c3:be:01:b4:da:a1:64: e9:2d:ae:90:30:76:88:3b:16:8d:b4:c9:41:19:48:22:44:59: c1:95:44:e2:17:60:4e:5b:4e:b1:e9:d5:b1:b8:93:5a:1b:01: 82:c0:b1:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWqfV/Qipc/y7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWZkZDM0NDUtNGY3OC00ZTBlLTkxN2YtN2U0MzYxMDNkY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixswuZzgjjb35WnbjpibLzxVWEftnahs6G7b abw0N7xKQYndg7fPJzBEijk98CqMY7AIgadtN30PvjQi/vjfP4VOOV0GcKkobd8L CcC2r77QaX4WugU1aKEjfXEEReNT8siP8YKLQYsUoWHBLMCevK/qOyMWZsxscRwf cgPiXL2tyCY5FLLHjbD6+Erb/D6q9xy0B0CKcR+4omJka0FdEiclLmhAc1VYgPCG 1i8S+S4V7Da+ucO1HrnN0YASnB/XEb9qpMW9ZHaKfCGoXtnxw7PYK6eylSjP2KiQ XPZjbBXWKZJkc7E5hEP3TibCVctPA5lrsTec82/iKYZe/Q0ddQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnPhPQl+sZTGdQQ8kZUNsbNU3w4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODQ3ZDhhYjUtMjgwNC0z OTg5LTk1YjYtOWYzMDA2NTg4ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuzZW4CRNA0U5mrigAfwoYgQ5C3w7s3ksOh5CyUiLJmmUOWdWfbyAJU K3H8sQiHWlHCNRSC8I+b9//gp9fTQ1rEIIRhNFz7HTPYxwrW4olpid2hrMd4EnJM eZlCZpQX9vKH7Snj/u1cFYzXtxg+XNNny27M7RynHsNCCbuZF9KYL8o/2rmCHhol OosweccYSYafoGKQX7A9zC85JwJgXhnsP2Rg4B7pXpByMJR8xlcbYq80pc14A889 veQSV3JnpRZDic2+aB++f30aPKPTNReXw74BtNqhZOktrpAwdog7Fo20yUEZSCJE WcGVROIXYE5bTrHp1bG4k1obAYLAsSg= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:08 2025 by rpki-client