$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa File: 7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa (raw, json) Hash identifier: 11mSbfW16g/nWgr0a8LJPKECGRFvgpPP0tL53eNqqwU= Subject key identifier: 27:15:84:CD:5E:1C:50:D7:41:72:04:CF:57:12:78:A3:74:47:B1:2F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD4DD689F55C99A80FFF70 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4d:d6:89:f5:5c:99:a8:0f:ff:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=316de708-f6ab-4bfa-9a1f-7479b3d6ee0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:3c:ec:fd:ad:41:eb:af:64:b9:06:29:08: e0:e5:bb:b7:aa:5c:f3:a5:a2:3b:a8:d6:dc:47:f8: 1a:d3:f4:5a:a7:d9:9a:de:23:25:b9:fb:1f:b0:a3: 7d:55:53:80:50:9a:8b:df:c8:bc:9a:8e:63:b2:e6: 19:3f:75:49:98:cb:c8:d9:97:a5:c3:16:66:72:5c: 8d:8f:a4:ca:e4:65:69:53:ff:2f:c8:e0:63:b5:e9: 68:92:69:cc:b6:c8:b1:04:b9:c9:77:9d:dd:5f:a9: 52:72:06:ef:a8:e1:95:d0:0b:2f:e0:ce:77:39:f1: 53:b5:be:cf:f2:f1:19:df:e0:54:7d:23:e7:69:b9: 5b:f7:4e:f0:a9:0a:e3:c4:d0:43:96:94:96:3b:3d: 77:0e:20:af:29:63:f1:f7:d5:f4:a8:8b:8a:9e:ac: a8:b7:45:6d:bd:1a:62:01:d1:57:34:de:4a:f5:90: 72:93:a6:bb:78:5b:a5:61:ec:6f:3f:36:16:63:70: 30:ca:2c:67:1c:b5:b9:09:ca:4d:a6:59:00:a5:98: 94:3a:54:6a:67:b0:dd:a3:0f:ad:9c:49:a0:97:58: fd:38:17:c4:1b:65:30:9a:68:ee:70:76:dc:76:7e: b7:f5:4e:c8:d8:b8:63:17:52:78:a7:73:61:ed:43: 2d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:15:84:CD:5E:1C:50:D7:41:72:04:CF:57:12:78:A3:74:47:B1:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:05:b3:cb:33:b6:58:63:66:e8:00:26:b1:d1:42:f0:62:3d: ba:4d:1f:2a:9a:aa:53:50:8f:1c:22:d5:12:62:c9:b0:a2:3f: 74:b1:f3:ed:c8:35:ca:f2:6a:35:44:9a:95:e1:cc:84:30:b6: d8:75:ee:ba:76:c1:1e:67:ff:c3:c9:32:17:87:be:81:e5:c0: 23:52:b6:79:7e:e3:20:d6:7a:eb:13:db:8d:2b:b5:05:3c:76: 45:7b:c5:66:8f:7e:5b:4e:72:9c:9d:4c:8a:88:61:2c:75:6c: 1f:36:3a:a4:eb:e6:df:23:ee:9b:48:0f:0e:70:e8:9d:06:b7: 69:1b:53:5b:9a:e1:11:57:f9:21:f2:21:c5:d3:ac:ee:19:21: a7:e2:a5:c1:10:2a:de:fa:89:e7:66:c0:42:89:fc:db:1b:7f: 70:c3:03:4b:2e:8f:95:bb:88:2e:67:84:70:cd:d2:82:dd:82: 38:90:0a:ba:a0:2f:59:90:f4:6e:0b:1c:a8:93:01:f2:d6:39: 5a:3b:ab:59:b0:56:4b:eb:46:37:b4:a5:97:ca:9f:87:92:60: 9f:2f:e5:72:0b:d5:00:9b:3b:0d:71:5a:35:5a:85:f2:24:13: a6:95:ac:58:d7:77:ac:91:19:fb:42:37:39:0b:e0:f5:d7:ac: 51:cc:7f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzU3WifVcmagP/3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzE2ZGU3MDgtZjZhYi00YmZhLTlhMWYtNzQ3OWIzZDZlZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJE87P2tQeuvZLkGKQjg5bu3qlzzpaI7qNbc R/ga0/Rap9ma3iMlufsfsKN9VVOAUJqL38i8mo5jsuYZP3VJmMvI2ZelwxZmclyN j6TK5GVpU/8vyOBjtelokmnMtsixBLnJd53dX6lScgbvqOGV0Asv4M53OfFTtb7P 8vEZ3+BUfSPnablb907wqQrjxNBDlpSWOz13DiCvKWPx99X0qIuKnqyot0VtvRpi AdFXNN5K9ZByk6a7eFulYexvPzYWY3AwyixnHLW5CcpNplkApZiUOlRqZ7Ddow+t nEmgl1j9OBfEG2UwmmjucHbcdn639U7I2LhjF1J4p3Nh7UMtNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcVhM1eHFDXQXIEz1cSeKN0R7EvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2E0NzNkNzEtMThmZi0z NDRmLTliYjktODVjZTJjMWEyNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAFs8sztlhjZugAJrHRQvBiPbpNHyqaqlNQjxwi1RJiybCiP3Sx8+3I NcryajVEmpXhzIQwtth17rp2wR5n/8PJMheHvoHlwCNStnl+4yDWeusT240rtQU8 dkV7xWaPfltOcpydTIqIYSx1bB82OqTr5t8j7ptIDw5w6J0Gt2kbU1ua4RFX+SHy IcXTrO4ZIafipcEQKt76iedmwEKJ/Nsbf3DDA0suj5W7iC5nhHDN0oLdgjiQCrqg L1mQ9G4LHKiTAfLWOVo7q1mwVkvrRje0pZfKn4eSYJ8v5XIL1QCbOw1xWjVahfIk E6aVrFjXd6yRGftCNzkL4PXXrFHMf2M= -----END CERTIFICATE-----Generated at Wed Nov 5 00:56:43 2025 by rpki-client