$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a2a03652-f939-3732-82ab-b433b3d88216.roa File: a2a03652-f939-3732-82ab-b433b3d88216.roa (raw, json) Hash identifier: etetvYhueJOTNO0dWYkQVuV12h54K4RCiWyoXS0oWjs= Subject key identifier: C8:0B:19:92:4C:AC:A4:47:32:6E:A2:ED:BD:8B:79:ED:34:A5:44:E3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6CE58F1D8D36F4066280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a2a03652-f939-3732-82ab-b433b3d88216.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6c:e5:8f:1d:8d:36:f4:06:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=21d7e96f-81a8-4e90-99aa-b9ce08be8018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:61:44:eb:2e:d7:5e:8e:63:35:07:51:28: 10:a3:66:08:0c:ed:ad:d7:10:1a:2d:d5:8c:35:af: 77:c2:3c:87:4a:7b:79:ad:bc:a1:32:f6:f4:2c:4b: a5:2f:c8:ed:fd:09:10:a1:a3:51:6f:eb:d5:2d:d4: 84:84:11:2a:02:40:ce:a1:25:11:fa:96:47:5b:b0: 69:96:3a:c3:f7:a5:80:d8:ae:cd:e7:90:e5:9d:5e: f0:05:ac:75:7c:c7:89:26:07:a8:50:8a:c4:38:da: 6a:68:87:1f:6c:bf:1f:30:0f:92:92:07:56:7b:8a: 3e:ef:53:f1:4a:e0:56:b5:a7:09:ac:38:0e:2b:f2: ec:01:73:96:1e:60:ec:50:99:af:57:90:49:5c:34: 56:54:a5:18:c6:7b:38:75:2f:f7:55:bc:9b:31:1d: 10:0c:ba:e2:1e:af:20:38:31:89:a9:ba:1c:87:a2: b1:00:81:23:27:2c:29:8a:f3:d1:ef:e3:2e:17:47: c1:1a:96:93:4a:57:8e:46:51:b3:e8:27:24:58:3b: 26:c4:5c:f8:12:e4:cd:4b:29:e4:d1:14:fe:40:c2: e4:ac:ba:af:30:5d:ad:db:20:09:e9:21:af:e0:7b: 67:10:35:4d:77:0e:18:e0:20:b2:38:ca:62:24:a4: 2f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0B:19:92:4C:AC:A4:47:32:6E:A2:ED:BD:8B:79:ED:34:A5:44:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a2a03652-f939-3732-82ab-b433b3d88216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3e:e9:63:c2:67:2b:2b:dc:51:c0:4f:f1:5c:8a:55:9a:f9: 8e:ea:a8:eb:f7:bb:7e:6c:b5:f5:66:13:73:64:e1:5d:44:bc: 54:39:21:d3:38:66:c9:fe:07:67:5c:d3:e5:77:d9:b0:56:16: f5:2c:b3:2a:89:e6:a9:c6:47:85:8a:ef:6a:f0:97:1c:2e:f9: b6:54:84:3a:c5:58:d8:1d:f9:05:54:83:79:f6:2e:58:08:73: c3:b2:07:07:d7:b7:d0:cc:41:ca:27:50:a6:11:f4:e9:17:c9: 4c:e2:38:2a:d4:48:02:ce:03:d2:df:8d:b8:7a:bd:32:f7:72: cb:be:d2:4d:96:c1:9b:0e:91:08:f9:ae:86:5a:32:90:2e:9f: d6:de:a2:c0:62:c4:0c:ee:5e:4e:2f:4a:d5:ad:bd:2d:d2:f5: 4f:ea:a9:9d:bc:dd:db:b6:42:99:3a:ac:7d:78:ef:c6:20:38: 84:2c:1a:c7:f5:2a:90:08:f2:20:ec:26:6f:84:0b:b0:16:56: e8:8a:f6:25:14:dc:3a:bc:d7:80:c4:0b:a3:b0:ba:a7:3b:88: e0:fe:5b:90:03:21:55:37:ad:b5:77:f8:e7:23:c8:81:29:bb: 61:ba:f4:16:aa:96:d6:cb:9f:ed:74:5f:3b:1f:62:e5:10:53: f0:96:6f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWzljx2NNvQGYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjFkN2U5NmYtODFhOC00ZTkwLTk5YWEtYjljZTA4YmU4MDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKdhROsu116OYzUHUSgQo2YIDO2t1xAaLdWM Na93wjyHSnt5rbyhMvb0LEulL8jt/QkQoaNRb+vVLdSEhBEqAkDOoSUR+pZHW7Bp ljrD96WA2K7N55DlnV7wBax1fMeJJgeoUIrEONpqaIcfbL8fMA+SkgdWe4o+71Px SuBWtacJrDgOK/LsAXOWHmDsUJmvV5BJXDRWVKUYxns4dS/3VbybMR0QDLriHq8g ODGJqboch6KxAIEjJywpivPR7+MuF0fBGpaTSleORlGz6CckWDsmxFz4EuTNSynk 0RT+QMLkrLqvMF2t2yAJ6SGv4HtnEDVNdw4Y4CCyOMpiJKQv3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgLGZJMrKRHMm6i7b2Lee00pUTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTJhMDM2NTItZjkzOS0z NzMyLTgyYWItYjQzM2IzZDg4MjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI+6WPCZysr3FHAT/FcilWa+Y7qqOv3u35stfVmE3Nk4V1EvFQ5IdM4 Zsn+B2dc0+V32bBWFvUssyqJ5qnGR4WK72rwlxwu+bZUhDrFWNgd+QVUg3n2LlgI c8OyBwfXt9DMQconUKYR9OkXyUziOCrUSALOA9Lfjbh6vTL3csu+0k2WwZsOkQj5 roZaMpAun9beosBixAzuXk4vStWtvS3S9U/qqZ283du2Qpk6rH1478YgOIQsGsf1 KpAI8iDsJm+EC7AWVuiK9iUU3Dq814DEC6Owuqc7iOD+W5ADIVU3rbV3+OcjyIEp u2G69BaqltbLn+10XzsfYuUQU/CWb6c= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:05 2025 by rpki-client