$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa File: ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa (raw, json) Hash identifier: g7OAcNIMoM/bRhZ1rxIN6K+cR7unWkRHHSlVw106eVI= Subject key identifier: 96:D6:16:18:14:77:F2:28:FC:9C:69:A2:7E:3C:51:85:23:41:2A:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6C1E98BA29ED11ED83C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 216.58.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6c:1e:98:ba:29:ed:11:ed:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=67ebfe58-89f5-4da8-9e25-113b9e90fdfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:90:7b:08:63:07:e4:b7:81:fd:7d:34:5a: 93:6f:00:04:c9:fd:1c:0a:15:b1:9f:00:27:8f:fc: 88:cb:66:28:e5:72:c3:32:5b:5b:2f:91:8b:5b:ed: 95:87:35:43:2d:76:84:e6:be:06:87:12:90:5f:2a: bf:53:4f:ac:9e:04:00:c1:a9:9f:5b:c6:3d:ce:0d: ce:1b:ca:6b:c9:dc:9d:24:5a:65:8a:8d:b0:51:73: 53:31:fc:f5:e6:91:27:ef:43:90:3e:c7:9d:10:ed: c7:72:d9:96:17:39:76:28:29:9b:cb:14:b0:08:bc: 7f:ed:be:71:b7:fe:ed:7e:3f:f5:a3:85:b7:f3:b6: cd:fa:de:bf:f9:93:1e:6d:88:17:fe:90:23:9d:48: 64:50:9c:33:f8:df:9e:49:4c:b6:9e:fc:b3:c6:71: 7d:32:ce:d8:c7:f8:d7:a2:e6:be:2e:4f:bb:3f:40: ad:d4:56:16:e9:96:12:d8:12:e0:62:75:21:9d:e8: 6d:dd:67:f2:0d:16:5f:cd:74:1d:b0:df:98:03:d7: 4a:f8:a1:f7:ea:07:75:89:d3:54:dc:68:0a:59:bd: 88:3f:c5:28:b3:3f:1d:15:c1:5c:64:d3:4a:40:8b: 24:43:aa:9e:d8:a0:ac:8d:3c:da:d5:b7:b4:0b:29: ca:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D6:16:18:14:77:F2:28:FC:9C:69:A2:7E:3C:51:85:23:41:2A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:36:f6:bf:7c:59:50:e7:1a:15:9b:bc:51:5e:04:7b:fe:96: 0f:54:25:48:09:55:2b:ed:be:fd:43:4b:8b:9d:cb:b1:93:b9: 87:98:e5:f4:55:f7:f1:e9:56:0d:a8:46:ef:40:4f:b4:b9:93: ff:cf:15:9c:c1:99:82:cb:3f:0c:5f:b1:f8:59:0b:be:0c:39: be:1c:36:57:53:f3:e0:54:28:16:f1:0d:34:a6:89:75:5f:28: 32:7b:61:ce:6d:84:97:2e:5d:16:aa:28:65:71:ff:02:5c:f6: 4b:92:43:e7:ed:c5:41:2a:a9:14:80:32:df:ad:ec:0b:fa:b7: 4d:c0:58:ac:87:a9:98:47:52:f3:15:c2:da:2c:f1:8f:3b:53: 89:16:f2:bb:9d:22:6f:60:8b:a1:ca:ac:9b:03:a6:ee:ea:11: cc:bb:72:64:e8:aa:a9:8d:8e:3d:d7:71:f0:49:77:ef:70:0a: 0f:c2:cd:82:c6:1f:0a:e2:8b:ff:0a:28:e2:15:3a:2d:83:52: 10:12:26:49:3b:ba:7d:cd:b2:24:b6:1f:16:e3:86:50:4c:0d: 16:ba:52:3f:44:23:f2:b7:6c:4d:a2:a0:3e:af:3e:8c:16:ce: c7:09:50:a8:1d:7a:b7:61:28:24:6b:c4:41:5d:c6:06:1f:4e: 86:2c:63:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWwemLop7RHtg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjdlYmZlNTgtODlmNS00ZGE4LTllMjUtMTEzYjllOTBmZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmqQewhjB+S3gf19NFqTbwAEyf0cChWxnwAn j/yIy2Yo5XLDMltbL5GLW+2VhzVDLXaE5r4GhxKQXyq/U0+sngQAwamfW8Y9zg3O G8prydydJFplio2wUXNTMfz15pEn70OQPsedEO3HctmWFzl2KCmbyxSwCLx/7b5x t/7tfj/1o4W387bN+t6/+ZMebYgX/pAjnUhkUJwz+N+eSUy2nvyzxnF9Ms7Yx/jX oua+Lk+7P0Ct1FYW6ZYS2BLgYnUhneht3WfyDRZfzXQdsN+YA9dK+KH36gd1idNU 3GgKWb2IP8Uosz8dFcFcZNNKQIskQ6qe2KCsjTza1be0CynK7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbWFhgUd/Io/Jxpon48UYUjQSroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmY5YmJlOGMtNDdlZi0z MzI2LWJhNDktY2Y2ODk5ODE3MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA29r98WVDnGhWbvFFeBHv+lg9UJUgJVSvtvv1DS4udy7GTuYeY5fRV 9/HpVg2oRu9AT7S5k//PFZzBmYLLPwxfsfhZC74MOb4cNldT8+BUKBbxDTSmiXVf KDJ7Yc5thJcuXRaqKGVx/wJc9kuSQ+ftxUEqqRSAMt+t7Av6t03AWKyHqZhHUvMV wtos8Y87U4kW8rudIm9gi6HKrJsDpu7qEcy7cmToqqmNjj3XcfBJd+9wCg/CzYLG Hwrii/8KKOIVOi2DUhASJkk7un3NsiS2HxbjhlBMDRa6Uj9EI/K3bE2ioD6vPowW zscJUKgderdhKCRrxEFdxgYfToYsY+A= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:06 2025 by rpki-client