$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa File: 224a8eaf-90ca-3555-ba36-8b880b90fb50.roa (raw, json) Hash identifier: hPCc3Bc7xAlpxrhoDPmlYoyUpMtkxzsGXj/jgMFxfx8= Subject key identifier: 4B:B1:85:71:76:1E:C2:12:A1:B5:7A:E6:20:88:16:9A:1C:2B:DE:5B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE25464C9C2D26217B7A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:25:46:4c:9c:2d:26:21:7b:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2cbc3bcd-bf1e-4edc-a09f-2b407940cb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8c:d6:ac:cd:f2:6e:fb:e4:10:4d:88:52:8c: 07:6a:f3:d5:1d:6f:78:8e:3f:ef:f3:3e:bc:a6:e7: fc:7b:2a:2e:ef:b9:23:08:c4:73:33:bc:45:30:54: d0:80:38:49:ff:b0:2c:33:7a:fe:5c:68:16:46:3e: bb:a6:63:2e:c6:ff:c1:f1:22:b0:75:19:0b:21:44: 16:02:56:16:ec:c4:72:22:76:a9:cb:58:09:80:5d: df:49:79:fe:5c:1c:27:cb:11:4b:56:8c:fb:56:af: 02:43:a4:7a:85:9c:ab:31:e1:83:cf:27:6d:81:51: ab:76:17:01:95:b6:40:3b:49:44:ba:f0:8f:b5:26: 6d:a6:7e:43:1b:a7:99:a4:14:27:3b:54:41:07:b8: 55:fa:f8:95:f2:d9:5d:dc:66:53:75:d8:3c:01:d0: 96:fd:81:67:73:ce:f4:77:ed:31:ec:6f:ee:4f:a2: 3e:de:cc:c6:3b:47:ba:80:ce:1d:cf:3c:b8:52:2c: b6:ab:53:e9:95:86:08:6e:1d:0a:7c:11:dc:6a:fd: c1:49:59:4c:49:e0:1a:38:07:4c:d6:0c:3b:d2:ea: b8:cf:7c:9a:02:4e:76:37:f9:1f:92:04:f5:1b:22: 9c:60:f8:dd:41:25:c6:e0:1d:d9:0c:5d:21:65:5b: 0a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B1:85:71:76:1E:C2:12:A1:B5:7A:E6:20:88:16:9A:1C:2B:DE:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ef:55:27:32:ca:81:69:af:69:3c:af:d2:09:88:24:29:e9: 7c:2f:24:d8:18:6e:3b:d1:52:06:42:4c:f1:4f:02:29:ff:54: 0d:0b:c3:61:65:e6:6d:c5:00:c6:a4:56:c1:42:a0:28:dd:62: 3d:c1:ec:28:15:fb:b8:cf:80:13:4d:5d:c5:3c:53:15:40:eb: 5e:43:b3:d1:5a:c4:5f:20:c3:9e:a0:f6:d3:a2:54:44:ec:41: 03:db:0e:ae:3f:40:81:95:fe:04:f7:a5:9a:f4:12:4f:82:08: a3:31:d3:09:9b:e8:ef:94:d7:0c:a7:a9:e2:15:91:99:c8:a3: 3e:82:75:db:1e:6d:49:27:60:b4:19:f8:fb:51:d4:a5:fa:79: 42:c3:fc:40:f5:3a:56:15:29:7a:6f:bf:a4:a8:8f:e7:30:7f: 40:15:c6:c3:c4:bd:b2:5e:c0:46:32:71:3e:9c:bd:0d:f8:c7: c8:c9:48:0b:36:25:3f:03:0f:db:52:ec:61:98:41:a2:ab:84: f8:7c:ac:03:4e:8f:4e:ec:8d:b1:87:87:ea:19:0d:48:9a:71: 39:4e:b0:9a:d9:3d:0b:a9:a9:a4:70:09:3e:26:0a:dc:d6:14: 40:1a:ea:d2:f6:06:b2:a5:fd:cd:f9:cf:98:ea:3c:8f:a9:a1: db:11:e6:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziVGTJwtJiF7eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmNiYzNiY2QtYmYxZS00ZWRjLWEwOWYtMmI0MDc5NDBjYjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ozWrM3ybvvkEE2IUowHavPVHW94jj/v8z68 puf8eyou77kjCMRzM7xFMFTQgDhJ/7AsM3r+XGgWRj67pmMuxv/B8SKwdRkLIUQW AlYW7MRyInapy1gJgF3fSXn+XBwnyxFLVoz7Vq8CQ6R6hZyrMeGDzydtgVGrdhcB lbZAO0lEuvCPtSZtpn5DG6eZpBQnO1RBB7hV+viV8tld3GZTddg8AdCW/YFnc870 d+0x7G/uT6I+3szGO0e6gM4dzzy4Uiy2q1PplYYIbh0KfBHcav3BSVlMSeAaOAdM 1gw70uq4z3yaAk52N/kfkgT1GyKcYPjdQSXG4B3ZDF0hZVsKiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuxhXF2HsISobV65iCIFpocK95bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjI0YThlYWYtOTBjYS0z NTU1LWJhMzYtOGI4ODBiOTBmYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHvVScyyoFpr2k8r9IJiCQp6XwvJNgYbjvRUgZCTPFPAin/VA0Lw2Fl 5m3FAMakVsFCoCjdYj3B7CgV+7jPgBNNXcU8UxVA615Ds9FaxF8gw56g9tOiVETs QQPbDq4/QIGV/gT3pZr0Ek+CCKMx0wmb6O+U1wynqeIVkZnIoz6CddsebUknYLQZ +PtR1KX6eULD/ED1OlYVKXpvv6Soj+cwf0AVxsPEvbJewEYycT6cvQ34x8jJSAs2 JT8DD9tS7GGYQaKrhPh8rANOj07sjbGHh+oZDUiacTlOsJrZPQupqaRwCT4mCtzW FEAa6tL2BrKl/c35z5jqPI+podsR5nc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:03:35 2025 by rpki-client