$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4abdf97-b905-38cc-bd94-ccd8af38634a.roa File: b4abdf97-b905-38cc-bd94-ccd8af38634a.roa (raw, json) Hash identifier: lb/O27XZgbij4qtTbrxkIa+h1YINtU1v/EDAziRFhSc= Subject key identifier: 8F:4A:58:AC:D6:32:E9:FB:60:E3:9A:B7:EF:2C:2D:6B:A3:0C:E6:5C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6908C79274CCBEB1F100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4abdf97-b905-38cc-bd94-ccd8af38634a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 216.58.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:69:08:c7:92:74:cc:be:b1:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=456ce7f4-5cc3-4920-82d2-a1d1cd29f3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:ce:21:7a:af:9e:81:aa:47:0b:d7:b9:d2: 04:81:dd:cf:e7:33:72:bf:ae:a9:68:49:34:3f:87: a5:13:eb:38:ca:a8:e2:ec:b0:06:37:1d:a1:79:0c: d2:04:a0:d8:2d:2d:76:d7:88:75:aa:7a:f8:cb:71: bb:4f:1e:5e:b4:d2:36:26:1d:06:0f:73:d0:35:7a: 6e:7c:63:e6:37:99:e7:80:25:77:5f:04:a1:6d:ac: d3:bb:7f:33:b2:09:f6:ea:be:db:2e:38:6b:c3:b9: 8a:c6:2a:f8:5d:6a:a6:3f:e5:31:38:cc:85:2c:63: 64:ab:bd:af:79:ce:ec:71:e3:17:37:07:9f:f4:95: 50:94:13:21:87:78:3a:e1:ec:6e:f3:d7:13:06:5f: 11:18:e1:60:ef:e1:ae:50:10:80:e9:5d:16:59:b9: cf:c4:c8:ee:c8:c2:de:f0:ab:c2:f9:2c:1f:25:42: 6d:35:91:df:f3:52:5c:00:2d:e8:a5:13:f1:9e:6a: 5e:bf:51:18:b7:66:6c:1b:e0:7e:ae:2b:a9:dd:c1: a2:66:4b:7e:3f:02:3b:dc:70:bf:9f:53:71:35:e0: 09:aa:22:fd:7c:4e:eb:3d:bc:c2:5b:db:f2:34:69: 43:3e:ee:65:cc:dc:7b:8a:2f:36:ed:6e:4d:df:99: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4A:58:AC:D6:32:E9:FB:60:E3:9A:B7:EF:2C:2D:6B:A3:0C:E6:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4abdf97-b905-38cc-bd94-ccd8af38634a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:47:ec:d3:89:d1:da:39:49:40:a8:48:a4:91:d0:70:99:a3: 7e:d1:f1:96:3b:38:79:e4:59:5e:97:9d:92:a4:85:ae:30:0b: 08:66:bb:9d:84:3c:eb:98:60:db:79:6a:df:d9:85:8f:cb:00: 45:f3:38:49:79:94:2a:12:ab:86:60:1a:0a:ad:01:8e:bb:d3: 3e:92:be:07:bf:63:6a:00:27:20:db:25:39:8e:6c:b6:16:85: a4:f1:08:5a:17:a4:c8:cc:c4:da:41:54:43:8d:63:33:49:80: 38:ca:ed:7b:69:e3:84:4a:31:2a:8c:2b:97:bb:dd:ef:18:a7: 6e:50:8b:50:2b:fb:4e:31:86:cb:7b:e7:5a:b4:60:d4:bb:91: 16:69:56:62:df:19:18:67:63:ce:b3:b6:53:71:9b:47:f7:91: 0d:a4:ee:14:70:71:44:a7:a4:ec:e0:e3:81:b3:84:e3:e7:56: ee:c1:00:98:b1:1c:38:51:d7:44:9d:0c:dd:a2:72:0c:bf:5b: 57:fe:95:e0:5f:f1:af:7c:7c:8c:4c:ef:1a:95:3a:a6:10:21: 55:01:18:7d:d1:dc:70:5f:7e:20:c6:f5:b6:7e:68:88:ac:a2: 37:0e:ff:b2:c0:c0:6d:07:13:49:19:e4:05:88:e1:cc:b7:95: 98:0d:5e:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWkIx5J0zL6x8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDU2Y2U3ZjQtNWNjMy00OTIwLTgyZDItYTFkMWNkMjlmM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7fOIXqvnoGqRwvXudIEgd3P5zNyv66paEk0 P4elE+s4yqji7LAGNx2heQzSBKDYLS1214h1qnr4y3G7Tx5etNI2Jh0GD3PQNXpu fGPmN5nngCV3XwShbazTu38zsgn26r7bLjhrw7mKxir4XWqmP+UxOMyFLGNkq72v ec7sceMXNwef9JVQlBMhh3g64exu89cTBl8RGOFg7+GuUBCA6V0WWbnPxMjuyMLe 8KvC+SwfJUJtNZHf81JcAC3opRPxnmpev1EYt2ZsG+B+riup3cGiZkt+PwI73HC/ n1NxNeAJqiL9fE7rPbzCW9vyNGlDPu5lzNx7ii827W5N35nYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9KWKzWMun7YOOat+8sLWujDOZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjRhYmRmOTctYjkwNS0z OGNjLWJkOTQtY2NkOGFmMzg2MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNH7NOJ0do5SUCoSKSR0HCZo37R8ZY7OHnkWV6XnZKkha4wCwhmu52E POuYYNt5at/ZhY/LAEXzOEl5lCoSq4ZgGgqtAY670z6Svge/Y2oAJyDbJTmObLYW haTxCFoXpMjMxNpBVEONYzNJgDjK7Xtp44RKMSqMK5e73e8Yp25Qi1Ar+04xhst7 51q0YNS7kRZpVmLfGRhnY86ztlNxm0f3kQ2k7hRwcUSnpOzg44GzhOPnVu7BAJix HDhR10SdDN2icgy/W1f+leBf8a98fIxM7xqVOqYQIVUBGH3R3HBffiDG9bZ+aIis ojcO/7LAwG0HE0kZ5AWI4cy3lZgNXvs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:25 2025 by rpki-client