$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74ad38d-11d3-3c79-a22a-29626dd55bea.roa File: d74ad38d-11d3-3c79-a22a-29626dd55bea.roa (raw, json) Hash identifier: iFSTHxlhEkZvOg0+INwu+wpCCp9erhUkO3C02iIw+FM= Subject key identifier: 09:E7:FD:2C:73:97:B3:54:8C:C2:25:89:C5:1B:E8:A5:37:1B:0A:2F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F3722A22B3EAA861487CC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74ad38d-11d3-3c79-a22a-29626dd55bea.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 8.8.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:22:a2:2b:3e:aa:86:14:87:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=3ca5041c-9660-471a-aa8a-4be5ce1af7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8a:03:7e:ee:43:2f:95:e1:39:ba:48:b6:ff: d6:b0:77:7d:5b:2d:19:e2:85:b5:21:2a:b2:f6:b8: 99:92:b7:45:e4:59:16:14:50:06:36:29:6e:97:17: b2:53:32:84:9a:53:4f:71:fa:f3:64:29:cf:4b:cf: 5c:76:70:6d:71:9b:cc:f5:83:81:8e:7c:52:b3:06: 0d:72:a3:ed:cf:52:ea:48:7e:73:d6:25:eb:f7:f2: 5a:30:28:f8:23:d3:75:75:7c:2b:7d:fb:0d:71:7a: ac:c1:d7:88:80:ed:ed:af:85:4f:de:82:81:a0:8f: 56:7e:35:63:63:86:7b:d3:41:9d:23:9d:85:b9:7f: 25:10:26:11:53:37:63:07:81:c2:f8:81:47:8d:49: 9e:ec:48:b8:7a:3b:37:48:0e:6d:91:64:cb:fd:db: 1f:3a:a2:a1:76:d8:76:6b:43:7c:cf:50:1a:db:49: 3a:cc:13:aa:fd:76:4a:f7:7b:84:ed:7b:78:ea:d6: 70:3a:4e:f5:b2:14:3e:39:1e:99:9c:30:20:d3:71: 6a:ce:94:73:0f:c1:ac:d8:0f:41:35:4e:02:b2:66: 7c:6d:8a:89:5b:41:d5:28:4d:65:83:e8:a7:3c:e1: 06:b7:e7:3a:8b:03:06:e7:87:b3:9d:f9:42:e9:68: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E7:FD:2C:73:97:B3:54:8C:C2:25:89:C5:1B:E8:A5:37:1B:0A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74ad38d-11d3-3c79-a22a-29626dd55bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 8.8.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:69:ad:02:45:ba:f6:75:08:f0:d0:84:4b:1f:cb:d2:9d:27: 09:ff:c0:66:14:41:7b:5e:01:5f:99:94:dd:b1:2d:36:ad:80: b9:72:5d:70:6c:84:a8:d5:fa:44:39:ad:86:5c:42:b6:ad:50: 2d:7a:cf:23:fd:33:1c:c3:80:db:25:03:9a:e5:bc:d1:ed:a8: bd:41:a1:6a:16:e3:b3:66:68:c6:85:f1:99:70:94:9c:21:c0: b9:07:cd:7b:ee:21:e5:63:f1:91:db:38:ca:81:f4:8f:ce:2a: 03:ab:8b:99:20:1d:59:68:6c:2d:e0:b9:55:55:7c:6e:d0:dd: 5e:93:62:cd:24:bd:58:af:7b:2b:7b:7a:c6:7c:55:4f:54:73: c4:c2:d9:f0:97:41:75:07:34:9b:3a:10:1b:ad:c0:92:c3:5b: 24:cf:6a:d7:69:5b:a2:84:22:bc:41:a8:b5:8c:1c:33:a9:6c: 99:aa:d3:48:75:d8:01:83:95:4e:ee:88:91:9f:7a:4d:ce:76: 81:e4:5d:9a:a1:99:cc:2f:74:a8:6d:4a:a3:93:45:4c:c7:42: 5b:b4:fc:39:d9:7b:fa:e3:25:9a:d8:61:ec:8a:7b:24:71:a4: 67:95:cd:c8:31:33:1a:75:dc:a5:78:de:a2:b5:19:50:01:25: 78:32:63:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyKiKz6qhhSHzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk M2NhNTA0MWMtOTY2MC00NzFhLWFhOGEtNGJlNWNlMWFmN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYoDfu5DL5XhObpItv/WsHd9Wy0Z4oW1ISqy 9riZkrdF5FkWFFAGNilulxeyUzKEmlNPcfrzZCnPS89cdnBtcZvM9YOBjnxSswYN cqPtz1LqSH5z1iXr9/JaMCj4I9N1dXwrffsNcXqswdeIgO3tr4VP3oKBoI9WfjVj Y4Z700GdI52FuX8lECYRUzdjB4HC+IFHjUme7Ei4ejs3SA5tkWTL/dsfOqKhdth2 a0N8z1Aa20k6zBOq/XZK93uE7Xt46tZwOk71shQ+OR6ZnDAg03FqzpRzD8Gs2A9B NU4CsmZ8bYqJW0HVKE1lg+inPOEGt+c6iwMG54eznflC6WgQjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnn/Sxzl7NUjMIlicUb6KU3GwovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDc0YWQzOGQtMTFkMy0z Yzc5LWEyMmEtMjk2MjZkZDU1YmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxprQJFuvZ1CPDQhEsfy9KdJwn/wGYUQXteAV+ZlN2xLTatgLlyXXBs hKjV+kQ5rYZcQratUC16zyP9MxzDgNslA5rlvNHtqL1BoWoW47NmaMaF8ZlwlJwh wLkHzXvuIeVj8ZHbOMqB9I/OKgOri5kgHVlobC3guVVVfG7Q3V6TYs0kvViveyt7 esZ8VU9Uc8TC2fCXQXUHNJs6EButwJLDWyTPatdpW6KEIrxBqLWMHDOpbJmq00h1 2AGDlU7uiJGfek3OdoHkXZqhmcwvdKhtSqOTRUzHQlu0/DnZe/rjJZrYYeyKeyRx pGeVzcgxMxp13KV43qK1GVABJXgyYzs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:02 2025 by rpki-client