$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa File: c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa (raw, json) Hash identifier: jv93JMTkdFw0f0aUtSPmthz/vYbym495SXMCr1MCVf0= Subject key identifier: 6F:C8:66:D1:86:11:A4:2D:17:12:2B:A3:4A:DA:19:F1:07:A5:85:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB336390E2C9124D74820 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 173.194.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b3:36:39:0e:2c:91:24:d7:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=b6d5389f-e661-4314-a36e-3e72faa76dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:5b:c8:e0:09:4f:f3:f9:d8:1d:dd:bf:41: 23:4f:53:74:dc:96:fc:e9:8e:c8:b7:b2:b6:02:b3: 67:5e:4d:a1:bc:be:43:1e:f2:e6:29:d6:2d:19:ee: 1c:0a:0e:17:c8:1b:aa:36:80:ed:23:f3:4d:fe:ce: f7:d2:84:9d:f1:32:e2:33:71:3f:e3:3b:8b:c5:8f: 7b:8c:4b:29:6b:ea:1b:b2:d3:77:10:f5:77:88:df: d1:7c:a4:a5:6c:8b:a9:7b:9c:ba:31:66:39:18:5e: 3e:86:13:52:41:6d:d8:66:a8:7b:11:bd:40:4d:a3: fa:8b:f2:8b:15:05:ba:66:c5:a0:58:30:87:37:28: 16:41:b5:f1:00:52:05:73:fc:1f:75:70:a0:30:63: 2e:b1:14:e5:35:14:8a:c2:47:9a:b2:c5:26:3c:1e: b2:bb:cf:15:e9:00:6f:36:11:1e:46:7d:3a:37:65: e3:ce:34:a6:00:e0:0a:b5:57:98:36:d6:3d:5f:8c: 46:34:46:b7:03:70:fc:74:17:4c:2f:07:12:21:5b: 5d:7e:61:b3:10:bd:7b:a5:26:79:29:2a:0f:12:0b: 30:75:ff:9e:ee:05:f5:04:fd:0a:3e:ed:2c:cf:62: 2a:c9:12:c7:f9:d1:74:ae:a5:73:2e:c8:34:e0:73: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C8:66:D1:86:11:A4:2D:17:12:2B:A3:4A:DA:19:F1:07:A5:85:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:38:2f:da:87:7d:48:c5:76:74:51:32:3d:57:af:e2:0f:6a: 12:a8:5e:63:f8:6c:4c:d5:b8:57:3c:6b:37:68:18:10:99:7c: b6:78:35:20:dc:d8:a7:06:bc:47:10:07:72:b4:41:f9:6a:41: ed:18:40:22:9f:27:91:39:7e:f7:e3:ea:cc:33:0c:d7:43:29: ea:cc:1a:17:7b:53:b0:73:a2:ff:29:67:18:a0:65:d9:e6:27: 90:04:1d:c5:39:ce:a6:7b:be:5f:85:66:76:28:14:90:e8:7d: ac:9c:bd:91:de:34:23:e1:7b:5a:ef:1e:39:9a:54:f1:98:33: 74:1b:9f:01:76:38:e2:2d:37:23:70:83:34:88:6e:49:4e:df: 87:a1:8a:d8:3d:ef:43:97:f1:3c:20:83:b8:93:1f:07:d4:cf: 88:d5:f7:a4:8d:6e:b3:42:0e:5f:da:70:e9:48:4c:d7:d1:c7: bb:89:f7:78:7c:4b:c6:94:07:6f:7d:40:ae:51:90:47:68:f7: 40:0d:85:98:24:4c:1c:75:02:b0:15:62:d5:e2:19:ac:d6:4f: e4:c3:81:9e:df:c1:50:21:5f:66:d3:b2:9b:86:32:c2:38:7c: bb:24:d7:c3:61:6f:c4:53:4b:fb:a5:8a:1d:93:2f:3f:00:7b: 45:ca:ae:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LM2OQ4skSTXSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YjZkNTM4OWYtZTY2MS00MzE0LWEzNmUtM2U3MmZhYTc2ZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaFbyOAJT/P52B3dv0EjT1N03Jb86Y7It7K2 ArNnXk2hvL5DHvLmKdYtGe4cCg4XyBuqNoDtI/NN/s730oSd8TLiM3E/4zuLxY97 jEspa+obstN3EPV3iN/RfKSlbIupe5y6MWY5GF4+hhNSQW3YZqh7Eb1ATaP6i/KL FQW6ZsWgWDCHNygWQbXxAFIFc/wfdXCgMGMusRTlNRSKwkeassUmPB6yu88V6QBv NhEeRn06N2XjzjSmAOAKtVeYNtY9X4xGNEa3A3D8dBdMLwcSIVtdfmGzEL17pSZ5 KSoPEgswdf+e7gX1BP0KPu0sz2IqyRLH+dF0rqVzLsg04HO49wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/IZtGGEaQtFxIro0raGfEHpYUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzhlMDVlOGMtMmExZi0z MGM0LWE0ZTUtY2ZjZjAxOTJiNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo4L9qHfUjFdnRRMj1Xr+IPahKoXmP4bEzVuFc8azdoGBCZfLZ4NSDc 2KcGvEcQB3K0QflqQe0YQCKfJ5E5fvfj6swzDNdDKerMGhd7U7Bzov8pZxigZdnm J5AEHcU5zqZ7vl+FZnYoFJDofaycvZHeNCPhe1rvHjmaVPGYM3QbnwF2OOItNyNw gzSIbklO34ehitg970OX8Twgg7iTHwfUz4jV96SNbrNCDl/acOlITNfRx7uJ93h8 S8aUB299QK5RkEdo90ANhZgkTBx1ArAVYtXiGazWT+TDgZ7fwVAhX2bTspuGMsI4 fLsk18Nhb8RTS/ulih2TLz8Ae0XKrlI= -----END CERTIFICATE-----Generated at Fri Oct 17 10:44:34 2025 by rpki-client