$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa File: 0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa (raw, json) Hash identifier: mu7bNQZVt6N244sQHDAk6bOM1iJscNmhyFDO5QRb8eI= Subject key identifier: 96:F5:84:A6:F1:44:B8:39:E4:FB:A4:1F:A4:9D:54:25:57:B1:A5:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD5884E6E024024E48DCE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 216.58.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:58:84:e6:e0:24:02:4e:48:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=97898ea6-0d2b-41a4-a188-24fd450983ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:40:04:cf:91:0b:90:b6:bf:c3:87:04:e1:cb: df:95:1f:43:10:8b:fd:e7:85:13:3d:c4:e6:56:a8: e6:2c:34:23:e5:bb:cb:df:5f:a8:64:ed:b5:34:75: 0d:c3:45:66:79:16:87:6f:97:40:fe:ac:18:c4:14: 82:0e:9d:3c:8b:61:78:8c:6b:59:8b:d8:cd:38:74: aa:46:92:a1:6f:da:b8:5b:22:d4:0d:1d:70:a5:8c: 02:c1:d8:d3:56:5f:52:90:fe:d1:a6:4f:7d:51:a1: 71:7e:62:77:5c:e6:b5:a9:dc:20:32:b3:48:73:16: fb:ec:73:4c:5d:61:4f:38:c6:9e:c4:76:45:74:c3: 76:ed:20:5b:1b:f7:dd:8d:1c:67:c3:4d:53:1b:03: 62:ed:44:39:ab:67:26:5e:87:83:ca:75:ad:ac:03: 1b:69:3f:0c:d2:bf:44:2b:32:4d:5f:03:fb:82:b9: 0f:91:eb:de:82:28:01:3c:d6:43:ab:e7:97:08:79: 64:b2:4c:ae:08:ec:f5:29:ac:30:f9:06:24:ff:97: 15:37:1b:76:62:aa:9c:4b:d7:7c:a7:7d:6e:d6:3d: 87:42:5a:7f:61:22:90:c7:a4:98:43:77:68:7e:c1: cc:0b:ee:28:23:ec:f9:70:3d:e6:11:88:e6:a1:40: fb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F5:84:A6:F1:44:B8:39:E4:FB:A4:1F:A4:9D:54:25:57:B1:A5:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8d:25:ef:26:7a:ac:a2:24:e0:61:e6:bb:c3:5b:ed:53:50: 95:84:80:1e:73:14:f1:aa:7a:1b:85:ee:22:07:2a:25:87:7c: 7d:ad:c5:28:63:81:01:24:78:48:b0:97:9d:ce:e5:c5:26:7b: e4:76:51:cb:91:8d:24:c4:6e:b5:50:f9:e9:78:0e:c0:7d:99: 03:5a:e9:b0:f5:ea:2d:8b:54:e2:75:55:02:f2:95:3e:4b:37: e2:58:39:6b:a5:b7:a1:8b:8e:d8:b5:04:6e:c2:51:4a:28:d4: 29:45:41:82:e9:3f:be:95:fa:f6:84:c9:f5:cc:ad:51:c2:8f: c3:dc:f3:5b:2e:66:19:bd:d0:c9:a0:c0:14:5b:b2:25:11:b9: f2:30:a8:58:f2:21:9a:b5:68:20:41:a3:89:0d:10:34:0e:9b: b5:ad:b2:82:ce:0f:e5:41:5d:82:86:ac:f0:a2:50:e5:70:63: 72:f8:97:dd:7c:13:47:c3:57:a2:eb:50:8d:24:f6:c0:cb:73: 4f:5f:c4:8b:11:8f:81:3b:db:fb:82:e5:bf:ff:b8:6a:6f:72: 80:09:83:0b:85:db:6b:14:5b:c6:49:ea:bf:81:3c:b4:15:bd: 69:d0:cb:0a:e5:27:c8:05:b1:1f:e4:b8:15:51:17:cd:4a:c0: ea:7b:e3:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzViE5uAkAk5I3OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTc4OThlYTYtMGQyYi00MWE0LWExODgtMjRmZDQ1MDk4M2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEAEz5ELkLa/w4cE4cvflR9DEIv954UTPcTm VqjmLDQj5bvL31+oZO21NHUNw0VmeRaHb5dA/qwYxBSCDp08i2F4jGtZi9jNOHSq RpKhb9q4WyLUDR1wpYwCwdjTVl9SkP7Rpk99UaFxfmJ3XOa1qdwgMrNIcxb77HNM XWFPOMaexHZFdMN27SBbG/fdjRxnw01TGwNi7UQ5q2cmXoeDynWtrAMbaT8M0r9E KzJNXwP7grkPkevegigBPNZDq+eXCHlkskyuCOz1Kaww+QYk/5cVNxt2YqqcS9d8 p31u1j2HQlp/YSKQx6SYQ3dofsHMC+4oI+z5cD3mEYjmoUD7KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb1hKbxRLg55PukH6SdVCVXsaVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGY0YjcyNGItM2M4My0z NzdlLWEzZmEtNDljMTM0ZjkzZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESNJe8meqyiJOBh5rvDW+1TUJWEgB5zFPGqehuF7iIHKiWHfH2txShj gQEkeEiwl53O5cUme+R2UcuRjSTEbrVQ+el4DsB9mQNa6bD16i2LVOJ1VQLylT5L N+JYOWult6GLjti1BG7CUUoo1ClFQYLpP76V+vaEyfXMrVHCj8Pc81suZhm90Mmg wBRbsiURufIwqFjyIZq1aCBBo4kNEDQOm7WtsoLOD+VBXYKGrPCiUOVwY3L4l918 E0fDV6LrUI0k9sDLc09fxIsRj4E72/uC5b//uGpvcoAJgwuF22sUW8ZJ6r+BPLQV vWnQywrlJ8gFsR/kuBVRF81KwOp74+g= -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:25 2025 by rpki-client