$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa File: a430c233-1598-3766-bd27-1c26e3178a02.roa (raw, json) Hash identifier: Gr3DPJx+EX5UPMg6tPu9e5MZT50QjL7Uwv1fQMarRH8= Subject key identifier: 5B:ED:91:99:05:0B:F1:4F:46:63:08:0A:B6:56:69:4C:53:A5:59:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD70D9AD03042E65D44300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:70:d9:ad:03:04:2e:65:d4:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f37dce61-a615-4fd7-a018-6d17874c6069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:32:f4:50:09:fc:04:cc:8e:6d:cd:a1:49:13: 2a:c4:f9:9f:15:b6:7f:59:45:e1:28:e1:12:f1:19: 9c:c1:e2:0a:58:ae:0a:af:fe:05:06:fd:c0:82:e5: e0:5e:e6:b2:1e:f1:56:87:c2:f7:0b:dd:e0:cd:59: 30:07:70:1b:b6:b3:64:04:43:e3:2e:bb:ab:fc:ee: fc:bd:3b:6c:9e:2b:32:d7:d9:40:03:cd:27:8a:35: 0a:37:43:84:3b:53:b1:3b:82:40:10:ef:f5:7a:3a: a9:d3:6e:45:5d:3e:a7:da:e5:ff:d4:af:50:e0:1e: f7:cc:84:59:6a:44:64:11:c9:01:43:0e:17:39:f7: 5b:26:51:dc:ab:8c:dc:0f:e5:a7:02:75:64:36:5c: 8d:0e:ff:a6:05:d3:ca:ce:0f:78:24:0c:06:32:9a: 0a:c6:37:50:0c:96:9a:a1:cb:35:52:e7:60:7a:eb: 12:b1:25:bf:c1:23:94:21:60:5a:c2:47:ba:84:9f: 9c:41:f6:6d:59:3b:2f:20:f7:2f:77:ec:95:fd:c8: 4a:7d:d2:b4:a9:ee:ce:a9:b7:b7:be:02:37:54:26: b6:70:b3:fc:2e:2f:93:b3:61:72:cd:35:4c:a7:1b: 5b:3f:a0:97:34:a7:e8:84:09:53:6c:65:d8:a5:62: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:ED:91:99:05:0B:F1:4F:46:63:08:0A:B6:56:69:4C:53:A5:59:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:2a:53:15:72:ab:e9:b3:48:b3:64:ce:1c:fc:b8:78:d6:e5: 2f:e3:35:e3:53:e4:a9:fb:6d:0c:ad:45:e4:62:53:e9:1c:d3: b7:b9:2f:6a:c9:73:bd:f8:73:66:93:fd:96:1d:46:9f:70:00: 14:3e:74:db:cf:92:ff:ee:40:9d:8c:e5:ce:d0:41:bf:64:38: 87:40:b2:2d:48:be:3b:bd:09:10:1a:8f:44:d6:52:d1:73:9e: e4:bd:7d:c8:6d:2e:4b:d6:f8:b2:b4:f1:06:9f:9c:4e:26:ba: 5b:13:74:46:87:56:eb:aa:d5:33:7d:90:a0:7c:71:df:1f:cd: 02:52:00:f2:7f:06:d4:12:55:9b:d2:89:9c:61:29:27:35:73: 77:9e:82:ef:36:fa:03:43:8c:05:9d:cf:05:38:51:a1:24:cf: 49:41:64:ba:58:03:a0:1c:b4:8c:29:65:c8:20:2e:2c:b3:4d: b0:32:14:d6:61:0e:7e:c6:ab:8c:2c:63:cc:0f:ea:2e:38:d9: 03:29:4d:33:9d:d5:29:83:23:be:3b:a4:c2:2d:51:b1:88:e9: 7a:b1:ef:68:a0:bb:b1:41:28:71:d7:e5:df:73:eb:25:2a:e5: 5d:4e:2a:75:e4:3a:1d:d3:63:d5:85:53:06:92:e7:f6:81:18: c4:5f:47:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXDZrQMELmXUQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjM3ZGNlNjEtYTYxNS00ZmQ3LWEwMTgtNmQxNzg3NGM2MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijL0UAn8BMyObc2hSRMqxPmfFbZ/WUXhKOES 8RmcweIKWK4Kr/4FBv3AguXgXuayHvFWh8L3C93gzVkwB3AbtrNkBEPjLrur/O78 vTtsnisy19lAA80nijUKN0OEO1OxO4JAEO/1ejqp025FXT6n2uX/1K9Q4B73zIRZ akRkEckBQw4XOfdbJlHcq4zcD+WnAnVkNlyNDv+mBdPKzg94JAwGMpoKxjdQDJaa ocs1UudgeusSsSW/wSOUIWBawke6hJ+cQfZtWTsvIPcvd+yV/chKfdK0qe7Oqbe3 vgI3VCa2cLP8Li+Ts2FyzTVMpxtbP6CXNKfohAlTbGXYpWJOdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvtkZkFC/FPRmMICrZWaUxTpVmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzMGMyMzMtMTU5OC0z NzY2LWJkMjctMWMyNmUzMTc4YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrcJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0qUxVyq+mzSLNkzhz8uHjW5S/jNeNT5Kn7bQytReRiU+kc07e5L2rJ c734c2aT/ZYdRp9wABQ+dNvPkv/uQJ2M5c7QQb9kOIdAsi1Ivju9CRAaj0TWUtFz nuS9fchtLkvW+LK08QafnE4mulsTdEaHVuuq1TN9kKB8cd8fzQJSAPJ/BtQSVZvS iZxhKSc1c3eegu82+gNDjAWdzwU4UaEkz0lBZLpYA6ActIwpZcggLiyzTbAyFNZh Dn7Gq4wsY8wP6i442QMpTTOd1SmDI747pMItUbGI6Xqx72igu7FBKHHX5d9z6yUq 5V1OKnXkOh3TY9WFUwaS5/aBGMRfR8Y= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:07 2025 by rpki-client