$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa File: 9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa (raw, json) Hash identifier: gz76KHjIfMuBidtAzLZDxpErpL6LZonvnLFXWGy19Sk= Subject key identifier: 01:FC:3F:86:26:87:4E:2C:E4:68:81:64:75:90:6A:DE:41:51:BE:05 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD708030B71F5E89E0F470 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:70:80:30:b7:1f:5e:89:e0:f4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=207d1be3-da50-43b2-bb39-174e2b82d9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:cf:3b:e2:23:75:a0:7f:5f:5c:83:a8:43: 47:54:46:3c:66:bd:eb:20:ea:4d:d0:4a:ac:9c:39: 37:55:2c:a3:89:f4:e3:9f:99:64:f6:a7:ca:c7:0d: 62:70:c0:2b:f8:af:36:1d:4c:67:08:a6:e2:c7:5b: 0c:42:74:c0:bc:10:ba:21:c8:59:b8:2c:80:2e:bb: d5:84:04:6a:e8:ad:2c:81:c4:43:03:b8:dd:7d:6f: 9f:f7:c1:c5:2d:21:49:5b:f9:8c:2c:74:f4:03:b2: 4b:eb:68:01:db:3e:fc:4d:d0:28:35:d8:82:ef:02: 5d:3a:90:f1:cc:e6:da:80:e6:d3:01:c6:02:a5:d5: 7a:b8:3b:d1:da:49:4c:dc:12:b5:bb:41:18:42:4a: 4a:f7:03:cd:16:aa:bb:23:53:ff:5d:f3:c5:9c:f5: 39:ab:2f:02:08:59:5c:ff:45:78:d0:c1:2a:73:ec: ec:e8:3d:39:df:02:cd:4f:8e:ff:9e:76:b5:e9:af: cf:e5:4c:ba:21:32:fb:42:d9:f5:53:54:fb:a5:92: 27:d0:49:40:4c:d9:a0:e8:99:37:66:81:d7:ef:bd: 67:94:f4:3e:f9:e9:46:f5:31:67:c5:21:f8:90:21: 9a:d2:2a:48:fe:21:a3:1e:27:88:81:80:4c:f1:d8: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FC:3F:86:26:87:4E:2C:E4:68:81:64:75:90:6A:DE:41:51:BE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d7:65:7c:71:12:ef:c6:49:38:0b:de:9a:57:a9:cd:31:a3: e6:dc:40:17:8f:46:6f:37:23:17:27:13:59:1f:5a:19:63:a2: 8b:6a:d2:c9:6b:f0:f0:69:36:42:32:25:95:db:eb:9d:4b:57: d0:03:35:9c:00:12:7b:42:2e:31:df:9d:1b:f7:f9:7c:1e:ee: cf:42:58:55:b2:5f:0e:67:d2:36:90:9a:6f:b6:dc:3e:9e:17: ad:61:d4:f6:a1:98:9e:5d:9a:8a:a9:5e:20:50:20:0b:21:1f: 24:57:e5:5f:16:f5:58:61:ad:a2:f9:39:60:75:de:34:05:6f: 05:45:eb:26:45:ca:c8:ba:9a:06:56:57:63:95:3f:16:6a:87: ee:d5:f1:49:0f:6c:92:1d:76:38:71:c2:44:66:c7:82:dc:08: 10:9e:22:56:b1:b3:17:ed:44:d3:90:43:98:b1:7d:36:bc:b0: 85:ee:3f:51:03:d7:7c:a1:43:0e:91:81:52:ad:43:3e:c3:75: 38:cc:7c:71:45:5e:dd:75:1a:71:19:de:f4:a7:55:87:dd:cd: 9e:57:d8:c0:b7:2a:89:98:cb:2b:56:67:81:f0:a0:d6:59:df: 63:08:a7:45:6c:9e:72:b3:be:b8:20:6b:94:13:d3:07:63:42: 4a:85:d9:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXCAMLcfXong9HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjA3ZDFiZTMtZGE1MC00M2IyLWJiMzktMTc0ZTJiODJkOWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8LPO+IjdaB/X1yDqENHVEY8Zr3rIOpN0Eqs nDk3VSyjifTjn5lk9qfKxw1icMAr+K82HUxnCKbix1sMQnTAvBC6IchZuCyALrvV hARq6K0sgcRDA7jdfW+f98HFLSFJW/mMLHT0A7JL62gB2z78TdAoNdiC7wJdOpDx zObagObTAcYCpdV6uDvR2klM3BK1u0EYQkpK9wPNFqq7I1P/XfPFnPU5qy8CCFlc /0V40MEqc+zs6D053wLNT47/nna16a/P5Uy6ITL7Qtn1U1T7pZIn0ElATNmg6Jk3 ZoHX771nlPQ++elG9TFnxSH4kCGa0ipI/iGjHieIgYBM8dgpuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH8P4Ymh04s5GiBZHWQat5BUb4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWEyZDAwY2QtMDUzOC0z OTY0LThhMjgtZWY4YjZiN2VlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/XZXxxEu/GSTgL3ppXqc0xo+bcQBePRm83IxcnE1kfWhljootq0slr 8PBpNkIyJZXb651LV9ADNZwAEntCLjHfnRv3+Xwe7s9CWFWyXw5n0jaQmm+23D6e F61h1PahmJ5dmoqpXiBQIAshHyRX5V8W9VhhraL5OWB13jQFbwVF6yZFysi6mgZW V2OVPxZqh+7V8UkPbJIddjhxwkRmx4LcCBCeIlaxsxftRNOQQ5ixfTa8sIXuP1ED 13yhQw6RgVKtQz7DdTjMfHFFXt11GnEZ3vSnVYfdzZ5X2MC3KomYyytWZ4HwoNZZ 32MIp0VsnnKzvrgga5QT0wdjQkqF2Ro= -----END CERTIFICATE-----Generated at Wed Nov 5 10:38:21 2025 by rpki-client