$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa File: a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa (raw, json) Hash identifier: exqpe1f/k3hOgyICUti5s9Dt8Njkq/uMHaPbKXnjAow= Subject key identifier: E9:0C:41:E9:03:FA:97:EB:DC:29:FD:32:64:D6:FA:3A:B4:7B:3F:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6ABFE0211B02BE8ED700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6a:bf:e0:21:1b:02:be:8e:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=9bf3aa48-1c5c-49cc-88c4-9c6d1172437b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f2:08:37:5e:22:f1:eb:fd:ba:34:60:a6:ef: b6:f6:55:8c:c8:8a:fa:c1:8b:b3:5c:c2:ef:0b:a2: c0:b3:1e:fa:b5:30:0c:d5:03:fc:2e:a5:5a:e5:36: 67:f9:18:e1:2c:37:67:1c:e1:da:00:03:87:83:06: 8d:2a:0b:e9:f6:ea:f5:68:20:a6:b0:d2:4e:78:5f: af:96:65:8f:f8:0e:fe:4f:95:ee:8f:de:c0:b4:d7: 1c:d1:70:c3:89:9f:31:7f:d1:6b:55:72:e5:41:f1: 0c:00:89:c6:22:ed:41:47:14:da:88:e0:ab:3f:78: 70:e5:db:55:21:70:8f:9b:b8:6e:9b:be:82:eb:f0: b1:c6:47:7e:20:2d:ed:7f:3b:fa:ba:82:c1:61:5c: da:69:60:4c:22:97:65:3d:c3:97:f1:1e:ec:88:82: 0a:04:df:48:75:ed:a4:79:05:ce:c0:43:2c:0b:62: 79:23:7b:a3:c6:af:44:6e:d6:d2:58:44:c0:cc:58: c1:c7:72:55:e3:0d:37:98:fb:a9:9a:86:00:a4:af: d7:82:28:8d:0a:76:b7:79:bb:6e:10:a2:6f:fa:d3: f1:93:c6:66:f7:ab:08:3f:f2:9f:dc:8f:3d:28:ce: 8f:7e:1d:8d:cb:6a:b7:a9:53:b7:48:16:81:c8:ca: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0C:41:E9:03:FA:97:EB:DC:29:FD:32:64:D6:FA:3A:B4:7B:3F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:55:b0:6d:1c:dd:8a:8d:90:72:7d:ec:0c:1b:a3:85:04:65: aa:32:1f:a9:01:c3:2b:37:c8:7b:8b:7f:20:d2:8a:91:f8:d1: ca:47:a9:09:61:38:01:b1:ac:9b:5c:86:ab:92:ce:92:a1:da: 25:c6:88:8e:09:41:90:68:d9:4c:5c:df:6a:77:89:16:53:44: ca:03:88:23:aa:14:20:4d:ea:ef:99:c1:e6:93:f3:82:0b:f1: b1:9b:29:2e:ef:d8:58:f6:ad:ad:f6:78:3f:6c:78:f5:c0:bf: 4b:54:a7:cf:30:df:12:84:9f:7e:f9:0f:e6:0c:ba:ea:d3:5b: 6c:fa:9e:93:c1:cb:a7:0e:93:78:ba:a8:71:70:ad:65:aa:2d: 42:3c:52:10:7c:57:ec:10:6d:04:25:e1:ae:f2:fc:7f:5d:6a: d9:bb:c8:cb:08:d1:8c:f4:9b:7d:08:34:7d:47:2f:b8:8a:82: 36:24:a2:4c:50:de:ff:d6:d7:53:a9:db:4b:dd:6e:78:0e:f2: fa:2b:77:0a:84:21:13:4b:33:a2:54:6a:9d:52:fd:d2:b6:17: 4a:a9:b0:9c:a1:4e:83:04:89:ee:f1:09:37:92:7b:6b:f2:8c: 26:31:9c:df:51:49:05:56:d9:10:51:47:4d:8c:c1:c0:85:22: 47:33:fb:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWq/4CEbAr6O1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OWJmM2FhNDgtMWM1Yy00OWNjLTg4YzQtOWM2ZDExNzI0MzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/IIN14i8ev9ujRgpu+29lWMyIr6wYuzXMLv C6LAsx76tTAM1QP8LqVa5TZn+RjhLDdnHOHaAAOHgwaNKgvp9ur1aCCmsNJOeF+v lmWP+A7+T5Xuj97AtNcc0XDDiZ8xf9FrVXLlQfEMAInGIu1BRxTaiOCrP3hw5dtV IXCPm7hum76C6/Cxxkd+IC3tfzv6uoLBYVzaaWBMIpdlPcOX8R7siIIKBN9Ide2k eQXOwEMsC2J5I3ujxq9EbtbSWETAzFjBx3JV4w03mPupmoYApK/XgiiNCna3ebtu EKJv+tPxk8Zm96sIP/Kf3I89KM6Pfh2Ny2q3qVO3SBaByMoMMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkMQekD+pfr3Cn9MmTW+jq0ez8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTlmZTM0NDUtOTk3NS0z YTZhLThhOTMtMGE2OGY4M2Y5MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFVsG0c3YqNkHJ97Awbo4UEZaoyH6kBwys3yHuLfyDSipH40cpHqQlh OAGxrJtchquSzpKh2iXGiI4JQZBo2Uxc32p3iRZTRMoDiCOqFCBN6u+ZweaT84IL 8bGbKS7v2Fj2ra32eD9sePXAv0tUp88w3xKEn375D+YMuurTW2z6npPBy6cOk3i6 qHFwrWWqLUI8UhB8V+wQbQQl4a7y/H9datm7yMsI0Yz0m30INH1HL7iKgjYkokxQ 3v/W11Op20vdbngO8vordwqEIRNLM6JUap1S/dK2F0qpsJyhToMEie7xCTeSe2vy jCYxnN9RSQVW2RBRR02MwcCFIkcz++s= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:40 2025 by rpki-client