$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e664fc7-0aad-3692-adff-c92f14c966da.roa File: 7e664fc7-0aad-3692-adff-c92f14c966da.roa (raw, json) Hash identifier: hqVepjREw4VBQiCehJJAwUolo0xq8il3bgS6GK7MoUQ= Subject key identifier: CC:D9:E8:11:16:1D:63:12:3F:58:52:E7:79:FC:C8:CA:CE:86:D8:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE22225E4806C2BFB34900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e664fc7-0aad-3692-adff-c92f14c966da.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:22:22:5e:48:06:c2:bf:b3:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3e6cd12d-d410-46c8-a686-59b1e4ac67a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:ff:14:73:3f:71:a0:67:61:1a:1d:37:82: 70:ec:6c:9e:c5:40:7a:dc:7a:f4:cd:ee:8e:bc:e1: 2a:70:2f:52:04:55:f4:ff:04:46:cd:a3:1d:0d:e5: 3d:96:2e:62:0b:7f:00:f6:99:16:bd:1b:1d:59:48: 71:a8:9c:97:2a:b2:d7:cf:1a:b5:9b:cd:6d:27:71: 2a:d1:06:01:fc:6f:91:f9:a7:c6:9c:27:10:60:a0: 51:58:44:27:62:5c:07:49:4f:3d:0d:c1:d9:57:a5: 70:74:17:1d:52:86:61:49:6c:9e:a4:23:d1:02:41: 18:08:86:e5:d0:ad:3a:85:a4:c8:c6:6f:aa:fb:0c: 57:4e:5d:ff:93:06:20:a2:8f:81:b4:f0:c3:4c:7a: b8:0d:31:ba:03:e3:2a:8a:e5:90:8a:10:84:5a:98: 3e:b8:73:5a:27:63:f4:bc:e1:0f:98:ef:0e:ce:c5: 04:fa:de:a6:df:a0:c4:21:86:c0:55:de:e3:f6:01: c8:75:f9:ac:d3:98:f8:d7:90:26:50:20:70:f4:a9: 1b:c1:c2:e6:ef:91:56:58:c5:5e:11:b0:d0:ad:ab: e8:90:0f:d2:f2:7d:81:ce:ec:40:a8:2c:77:02:0a: a1:0f:44:4b:52:b7:80:e1:5b:a0:d7:27:55:12:fa: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D9:E8:11:16:1D:63:12:3F:58:52:E7:79:FC:C8:CA:CE:86:D8:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e664fc7-0aad-3692-adff-c92f14c966da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:0f:50:b0:e1:d4:ab:90:45:05:f4:d8:09:31:c6:4d:ce:d4: af:8e:81:55:5e:48:97:d0:73:fd:5b:8a:c2:37:75:23:ed:a6: fc:b2:a3:96:59:e2:70:2f:65:e1:8f:48:78:bd:da:cc:4b:0e: 00:d2:99:3b:9a:68:d1:95:94:30:2b:21:a8:49:1e:36:01:8e: 53:1e:27:18:57:77:f7:ff:f2:57:7b:50:d3:83:fd:12:21:3c: 02:ed:db:8e:77:78:4e:6e:4f:38:fe:59:79:13:aa:95:9a:ee: f1:c4:49:66:ad:b2:df:f7:98:9c:2f:9e:96:bf:89:c2:e7:d3: 08:7c:4b:2d:ac:00:0b:55:10:f3:9a:55:17:b2:cc:fa:82:fa: ae:1f:e2:14:22:cb:db:3a:2e:fc:15:03:e7:ba:6a:76:db:a1: 4b:12:41:e5:e1:aa:12:f2:9b:fc:8b:b6:df:2a:2f:31:38:87: d1:86:7a:4b:23:0d:2e:a7:b2:91:de:29:df:aa:42:25:e7:b1: f1:d6:ee:e8:84:b7:f2:54:b0:1f:d4:bb:66:43:32:c1:ff:9b: 25:3a:10:6d:cf:f2:2d:20:e3:12:59:6e:e0:77:68:90:32:2a: 5c:57:2a:53:8a:9e:e7:a8:37:94:9d:a7:74:db:3e:86:88:94: 63:2d:2b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziIiXkgGwr+zSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2U2Y2QxMmQtZDQxMC00NmM4LWE2ODYtNTliMWU0YWM2N2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoT/FHM/caBnYRodN4Jw7GyexUB63Hr0ze6O vOEqcC9SBFX0/wRGzaMdDeU9li5iC38A9pkWvRsdWUhxqJyXKrLXzxq1m81tJ3Eq 0QYB/G+R+afGnCcQYKBRWEQnYlwHSU89DcHZV6VwdBcdUoZhSWyepCPRAkEYCIbl 0K06haTIxm+q+wxXTl3/kwYgoo+BtPDDTHq4DTG6A+MqiuWQihCEWpg+uHNaJ2P0 vOEPmO8OzsUE+t6m36DEIYbAVd7j9gHIdfms05j415AmUCBw9KkbwcLm75FWWMVe EbDQravokA/S8n2BzuxAqCx3AgqhD0RLUreA4Vug1ydVEvpHqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzZ6BEWHWMSP1hS53n8yMrOhtjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2U2NjRmYzctMGFhZC0z NjkyLWFkZmYtYzkyZjE0Yzk2NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkPULDh1KuQRQX02Akxxk3O1K+OgVVeSJfQc/1bisI3dSPtpvyyo5ZZ 4nAvZeGPSHi92sxLDgDSmTuaaNGVlDArIahJHjYBjlMeJxhXd/f/8ld7UNOD/RIh PALt2453eE5uTzj+WXkTqpWa7vHESWatst/3mJwvnpa/icLn0wh8Sy2sAAtVEPOa VReyzPqC+q4f4hQiy9s6LvwVA+e6anbboUsSQeXhqhLym/yLtt8qLzE4h9GGeksj DS6nspHeKd+qQiXnsfHW7uiEt/JUsB/Uu2ZDMsH/myU6EG3P8i0g4xJZbuB3aJAy KlxXKlOKnueoN5Sdp3TbPoaIlGMtKzk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:38 2025 by rpki-client