$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/896c1764-be24-3bf8-8415-b2e89ca224dc.roa File: 896c1764-be24-3bf8-8415-b2e89ca224dc.roa (raw, json) Hash identifier: qKr+a9bZS9XoVO/lDDaML814ZwRnNTZdbDka/3QoJ9M= Subject key identifier: 0A:F1:C2:30:31:CB:D5:2F:64:D9:28:70:1F:22:68:2E:46:2B:8B:8E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67978955ABDCCACDE87339C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/896c1764-be24-3bf8-8415-b2e89ca224dc.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 66.249.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:89:55:ab:dc:ca:cd:e8:73:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=0abd505d-4e50-4c01-a7f1-649d24f86771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:11:4f:3e:18:f0:2f:8c:b0:8e:e0:9b:f3: 00:49:05:33:40:ec:7b:95:6f:5d:c5:72:f9:c8:c8: 47:dc:0e:a4:a6:0f:13:6c:45:66:82:82:c6:a3:f6: 19:8f:28:bf:34:ef:14:42:cd:6d:b3:79:02:25:8e: a7:aa:b9:f2:42:92:59:f6:ef:0c:fc:48:e5:3e:77: e1:af:ce:3d:8f:24:3e:d6:26:f9:91:b4:56:03:41: a9:1e:e0:e4:c5:fd:1d:08:8e:16:1a:da:bd:7a:fe: 5b:40:f7:53:ac:91:1c:2e:dc:90:ae:8e:18:dc:cd: 44:a0:09:64:17:49:99:d7:66:78:02:ed:e3:56:87: 7f:b0:1b:65:fb:6e:78:f3:38:9d:c2:52:b8:29:05: e2:02:5c:bf:fa:1d:85:a9:28:62:fe:17:66:49:c1: 0c:dc:a3:e9:23:ee:6e:91:f4:ac:67:27:71:ec:46: 5a:d5:46:9e:50:59:78:df:3f:3f:7d:1c:4c:9b:aa: 39:f5:dc:e3:f1:76:3e:76:5f:21:ca:a3:16:43:25: 2e:4d:94:28:55:7e:71:91:0b:f2:43:a1:a9:57:32: 18:4f:5d:c3:e7:65:6e:f4:ae:7f:1e:7e:a0:7d:c8: a5:55:ae:58:32:35:04:f4:12:ad:73:f4:69:13:b3: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F1:C2:30:31:CB:D5:2F:64:D9:28:70:1F:22:68:2E:46:2B:8B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/896c1764-be24-3bf8-8415-b2e89ca224dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9a:cc:bb:27:5f:2c:69:44:97:df:7b:a2:35:e8:ba:25:6b: 7c:9c:54:e9:1c:f5:e7:f5:70:9f:0f:c7:4a:19:5e:c7:de:8d: 73:58:32:d0:a6:10:27:ab:74:6a:67:70:ba:b2:0e:df:ad:22: f4:77:19:68:30:da:7e:ba:06:30:22:ec:d8:2f:d4:73:2b:d7: 98:68:22:d4:23:44:38:9d:3b:56:d5:29:8f:17:73:2a:d1:15: 1e:45:fa:09:a3:69:13:f5:7c:63:c0:3d:8c:e9:97:af:79:92: 77:32:b5:27:e1:76:92:4e:55:ff:09:fc:57:43:84:e6:a9:b4: fc:27:ae:bb:93:0e:f9:6c:3d:0b:86:2f:e3:7e:34:ce:0c:55: 08:53:be:9c:24:13:af:ab:53:13:20:f3:4e:e5:d7:cc:39:60: 3d:e2:74:08:ce:d5:47:d0:d2:0a:f3:bd:ba:0e:19:e3:00:6d: 4e:ae:6e:21:9a:31:e5:20:8e:ff:8f:4a:35:30:db:5c:75:31: a2:87:b3:b7:92:83:3a:17:91:5a:8a:53:41:a8:11:e2:60:e3: 31:b6:5e:fb:73:01:a8:a8:39:77:e1:06:34:a7:a2:77:79:a6: ef:39:95:34:79:e0:7e:e5:2a:00:62:17:4b:17:e2:80:4c:06: 6a:6b:6c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4lVq9zKzehzOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MGFiZDUwNWQtNGU1MC00YzAxLWE3ZjEtNjQ5ZDI0Zjg2NzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfERTz4Y8C+MsI7gm/MASQUzQOx7lW9dxXL5 yMhH3A6kpg8TbEVmgoLGo/YZjyi/NO8UQs1ts3kCJY6nqrnyQpJZ9u8M/EjlPnfh r849jyQ+1ib5kbRWA0GpHuDkxf0dCI4WGtq9ev5bQPdTrJEcLtyQro4Y3M1EoAlk F0mZ12Z4Au3jVod/sBtl+2548zidwlK4KQXiAly/+h2FqShi/hdmScEM3KPpI+5u kfSsZydx7EZa1UaeUFl43z8/fRxMm6o59dzj8XY+dl8hyqMWQyUuTZQoVX5xkQvy Q6GpVzIYT13D52Vu9K5/Hn6gfcilVa5YMjUE9BKtc/RpE7O9aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArxwjAxy9UvZNkocB8iaC5GK4uOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODk2YzE3NjQtYmUyNC0z YmY4LTg0MTUtYjJlODljYTIyNGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQvlUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmazLsnXyxpRJffe6I16Lola3ycVOkc9ef1cJ8Px0oZXsfejXNYMtCm ECerdGpncLqyDt+tIvR3GWgw2n66BjAi7Ngv1HMr15hoItQjRDidO1bVKY8XcyrR FR5F+gmjaRP1fGPAPYzpl695kncytSfhdpJOVf8J/FdDhOaptPwnrruTDvlsPQuG L+N+NM4MVQhTvpwkE6+rUxMg807l18w5YD3idAjO1UfQ0grzvboOGeMAbU6ubiGa MeUgjv+PSjUw21x1MaKHs7eSgzoXkVqKU0GoEeJg4zG2XvtzAaioOXfhBjSnond5 pu85lTR54H7lKgBiF0sX4oBMBmprbEk= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:59 2025 by rpki-client