$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa File: f32520e4-c5ed-3c6e-8a5c-f42032642839.roa (raw, json) Hash identifier: O1o+LJ+l1kzQB5Bas1tJe7Krjq/bL3Dt9PCxGw94QoM= Subject key identifier: 65:EC:B5:97:38:C1:2B:62:72:AC:7F:27:1D:DD:D2:95:2E:BB:D8:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE10FE0C50DBC0609A8480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 216.58.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:10:fe:0c:50:db:c0:60:9a:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=44302302-f404-4d31-b022-e5b421c53d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9f:d3:64:e0:24:90:06:2c:0f:9d:ee:ea:cf: 9a:65:c4:43:6a:ab:a2:ff:b5:30:cb:00:ff:53:89: a0:4e:78:24:58:af:52:66:dd:d9:84:81:ef:0e:df: e7:19:41:ba:d4:aa:6b:f8:20:7a:58:d7:3f:62:75: 34:4d:38:ad:96:27:97:97:c5:99:c9:cc:c8:32:b1: 1e:e4:af:7a:e0:0e:f0:c8:f5:7f:5e:c5:93:a6:25: 7c:33:25:c9:28:aa:47:fd:28:9c:e8:2c:e9:fd:c4: 42:55:87:35:c3:3c:f9:21:c8:f1:fd:61:37:9d:4a: f3:df:31:a4:3a:03:40:8c:f3:2c:6a:41:62:c4:8c: fa:5f:5b:e9:89:39:55:b4:1a:bd:ae:b4:5d:2a:ac: 6d:99:ce:32:7c:75:25:28:49:2f:7e:ae:e2:d9:51: f8:2b:ac:93:f8:1f:18:cd:56:0d:7f:b2:e9:5b:75: 86:4b:14:bd:6d:e2:42:b4:8e:ff:a2:d0:ca:b0:b8: 2c:75:89:24:1d:cb:c7:b8:70:03:65:4c:e3:bc:15: 10:e5:da:37:c0:64:27:aa:92:c8:ba:61:9f:0d:e1: 5d:f2:df:53:14:05:de:04:6a:a1:4f:f4:63:a8:54: b4:50:57:0b:c2:8c:d6:ce:20:a7:b7:a5:a5:67:7f: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EC:B5:97:38:C1:2B:62:72:AC:7F:27:1D:DD:D2:95:2E:BB:D8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:d7:6e:e4:bf:9f:29:1b:ab:fe:6d:b3:c9:5f:9f:43:0a:a2: c0:ae:f0:cc:7e:6c:e3:f4:59:02:d5:0e:a6:24:1f:de:f6:95: 3c:f0:83:2d:ee:64:d3:a4:f2:09:d1:43:5d:b6:ef:7e:cf:80: c6:d8:ec:5f:a2:7c:57:6f:98:44:68:eb:c1:65:b2:5c:cd:ef: ee:06:e5:69:dd:0b:90:4a:56:8b:06:15:38:c9:3e:56:56:e3: ab:4d:fa:5a:59:7b:4b:76:ac:4f:b6:1b:79:b4:30:37:e6:85: 14:45:53:88:a3:cc:a1:1d:7c:f0:9e:5e:9c:23:ec:b0:85:35: 4e:b0:5d:a6:07:51:18:5a:7d:84:ef:42:95:00:91:fb:80:98: 2b:79:31:8b:cc:ba:b4:7a:fa:ad:46:28:a7:8b:96:ce:20:e2: e4:3a:13:14:88:36:6e:35:70:d8:64:17:fb:3e:4d:c3:4b:d4: 00:cc:63:c7:33:3e:af:6a:67:a5:29:a8:ea:4b:0f:a7:2b:81: e4:38:66:21:75:1c:2d:18:04:71:11:cb:35:e6:2c:98:02:7b: 84:f5:9d:f0:3e:33:b6:c0:69:1e:f7:04:f9:12:2a:c8:ce:88: a9:47:77:07:4a:68:cf:d2:29:02:f1:cf:fb:6a:3e:e8:05:ce: 81:cb:81:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhD+DFDbwGCahIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDQzMDIzMDItZjQwNC00ZDMxLWIwMjItZTViNDIxYzUzZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp/TZOAkkAYsD53u6s+aZcRDaqui/7UwywD/ U4mgTngkWK9SZt3ZhIHvDt/nGUG61Kpr+CB6WNc/YnU0TTitlieXl8WZyczIMrEe 5K964A7wyPV/XsWTpiV8MyXJKKpH/Sic6Czp/cRCVYc1wzz5Icjx/WE3nUrz3zGk OgNAjPMsakFixIz6X1vpiTlVtBq9rrRdKqxtmc4yfHUlKEkvfq7i2VH4K6yT+B8Y zVYNf7LpW3WGSxS9beJCtI7/otDKsLgsdYkkHcvHuHADZUzjvBUQ5do3wGQnqpLI umGfDeFd8t9TFAXeBGqhT/RjqFS0UFcLwozWziCnt6WlZ392PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXstZc4wSticqx/Jx3d0pUuu9gaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjMyNTIwZTQtYzVlZC0z YzZlLThhNWMtZjQyMDMyNjQyODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHXbuS/nykbq/5ts8lfn0MKosCu8Mx+bOP0WQLVDqYkH972lTzwgy3u ZNOk8gnRQ122737PgMbY7F+ifFdvmERo68FlslzN7+4G5WndC5BKVosGFTjJPlZW 46tN+lpZe0t2rE+2G3m0MDfmhRRFU4ijzKEdfPCeXpwj7LCFNU6wXaYHURhafYTv QpUAkfuAmCt5MYvMurR6+q1GKKeLls4g4uQ6ExSINm41cNhkF/s+TcNL1ADMY8cz Pq9qZ6UpqOpLD6crgeQ4ZiF1HC0YBHERyzXmLJgCe4T1nfA+M7bAaR73BPkSKsjO iKlHdwdKaM/SKQLxz/tqPugFzoHLgVA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:36 2025 by rpki-client