$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa File: b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa (raw, json) Hash identifier: sWlfNWtfzbMITzSdlV5x5wZweJWB2ItfhxkgFtTZ91o= Subject key identifier: 40:C5:E0:DF:F9:53:E3:E7:18:7E:47:4C:61:7A:2E:DD:41:0F:07:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE0E30506A426C0C4A3540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 209.85.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0e:30:50:6a:42:6c:0c:4a:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b8648123-8f5b-4e89-9bc3-d9bf11a1c997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ab:3d:3e:52:20:0b:ed:1a:ed:0a:d7:3d:da: da:5b:3e:fc:32:25:2d:e5:4b:33:b6:1e:d6:64:a8: ab:f3:d7:dd:d0:95:06:1d:b1:14:e1:7e:ef:b8:09: 78:7d:2c:9c:30:f8:6f:de:76:4c:c2:86:f4:9b:6e: 59:c2:86:c5:35:6b:db:78:78:3e:34:a9:0a:98:69: 0d:e9:4e:cf:a8:43:a4:fb:5a:64:bb:16:08:38:36: 5b:80:45:7a:fb:32:de:7b:57:bb:94:e2:fc:ff:e1: e7:b2:29:5d:a5:83:28:91:d4:33:cb:56:1e:16:3c: 9e:d3:d1:e9:4e:c7:e5:6a:a1:7e:4f:aa:a1:f7:54: bb:c8:cd:d4:2a:a2:a6:8a:e4:4c:b3:e4:9e:35:73: 71:d0:95:e5:23:20:aa:45:59:38:c8:ea:35:18:bd: d3:a8:e0:4b:fa:2d:47:50:9a:4c:4d:ff:b8:bd:83: fc:8e:9f:02:da:6f:8e:cc:70:0a:33:55:3b:e4:12: b3:17:47:32:8d:a7:de:46:09:1e:fc:bd:b6:40:36: d3:3e:b0:62:62:95:c9:28:de:55:ec:9b:e9:88:ac: e8:95:f6:f1:3c:67:2f:07:83:64:a0:71:21:38:05: 2a:d6:3c:14:f7:18:21:4e:28:2a:40:5d:91:cf:7b: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C5:E0:DF:F9:53:E3:E7:18:7E:47:4C:61:7A:2E:DD:41:0F:07:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:1b:90:3f:92:c3:0b:8c:c4:ca:1a:39:4d:44:89:21:c4:7f: 9a:38:ff:81:4e:0b:c7:5a:2c:01:73:62:8c:82:a6:7d:65:3c: 5a:7c:b1:82:f4:21:19:50:a2:7d:52:1c:0e:19:23:6b:75:ff: ae:a6:b4:ae:17:4d:71:7c:dc:47:c5:d4:0a:c1:a6:c2:cb:f3: 12:1f:55:c9:46:ec:a3:ff:ba:d1:26:c1:be:01:0b:90:42:79: f6:eb:f3:ee:dd:77:3d:6e:a3:a2:d6:bb:64:ea:bd:b8:78:10: c9:3c:7a:dc:7b:3f:7f:e0:2d:87:20:89:57:95:b0:a3:0f:e3: 64:48:b3:46:c6:46:61:35:3b:45:b4:92:fc:cc:85:9e:63:ce: ed:a4:4c:46:f1:7b:93:97:62:64:72:a0:92:3b:86:47:8b:e9: 76:72:d2:55:0a:dc:26:98:33:e6:ff:05:05:6a:48:32:1d:ce: 0a:50:30:6c:5e:35:ea:2a:0a:6b:d4:fb:91:d7:f7:f1:c3:07: 30:d1:d5:98:6c:dc:d6:4f:27:51:77:ae:55:1c:07:75:1a:d1: 0f:75:03:07:db:e6:2a:ce:b9:5b:90:85:fb:90:6a:6a:44:8e: 6a:9d:13:20:b4:b6:8f:0d:61:1d:79:b3:05:91:87:5b:f9:6d: 9e:b4:19:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzg4wUGpCbAxKNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Yjg2NDgxMjMtOGY1Yi00ZTg5LTliYzMtZDliZjExYTFjOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAias9PlIgC+0a7QrXPdraWz78MiUt5Uszth7W ZKir89fd0JUGHbEU4X7vuAl4fSycMPhv3nZMwob0m25ZwobFNWvbeHg+NKkKmGkN 6U7PqEOk+1pkuxYIODZbgEV6+zLee1e7lOL8/+HnsildpYMokdQzy1YeFjye09Hp TsflaqF+T6qh91S7yM3UKqKmiuRMs+SeNXNx0JXlIyCqRVk4yOo1GL3TqOBL+i1H UJpMTf+4vYP8jp8C2m+OzHAKM1U75BKzF0cyjafeRgke/L22QDbTPrBiYpXJKN5V 7JvpiKzolfbxPGcvB4NkoHEhOAUq1jwU9xghTigqQF2Rz3tpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDF4N/5U+PnGH5HTGF6Lt1BDwdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjNlMDZkYzUtZWM5OC0z Njg2LTg0YzQtNmQ3NmQ3ODgwNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEbkD+SwwuMxMoaOU1EiSHEf5o4/4FOC8daLAFzYoyCpn1lPFp8sYL0 IRlQon1SHA4ZI2t1/66mtK4XTXF83EfF1ArBpsLL8xIfVclG7KP/utEmwb4BC5BC efbr8+7ddz1uo6LWu2Tqvbh4EMk8etx7P3/gLYcgiVeVsKMP42RIs0bGRmE1O0W0 kvzMhZ5jzu2kTEbxe5OXYmRyoJI7hkeL6XZy0lUK3CaYM+b/BQVqSDIdzgpQMGxe NeoqCmvU+5HX9/HDBzDR1Zhs3NZPJ1F3rlUcB3Ua0Q91Awfb5irOuVuQhfuQampE jmqdEyC0to8NYR15swWRh1v5bZ60GVU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:33 2025 by rpki-client