$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa File: d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa (raw, json) Hash identifier: WDtAnAkxNuiebLKiR1an9GUg4neiAY3gaZ4pxlwilLM= Subject key identifier: BB:17:74:62:26:AE:06:54:67:74:58:34:29:D1:06:47:45:7F:2A:7A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE1302AD6413853DEE5D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 216.58.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:13:02:ad:64:13:85:3d:ee:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=09b351fe-797b-4f3a-9ff1-3a7da304a25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:da:a1:1c:b5:a3:40:dd:da:17:64:2a:08:8b: 7c:18:34:38:fb:66:f2:70:74:54:1c:b2:92:42:25: d5:82:02:18:51:a1:19:90:16:ff:4f:c6:0f:f9:14: 1b:e8:9b:40:56:d7:f5:8d:ad:b7:95:c0:68:66:4b: 59:64:b6:16:c9:a0:dc:82:6a:14:8d:db:d7:49:52: d1:c5:56:91:b0:d5:e3:d9:0f:0e:8d:7e:6d:e7:d8: f9:a9:f8:88:51:4f:8c:85:8e:1e:bb:6a:c6:bc:0c: d5:8b:62:4d:8e:b9:03:fb:98:cc:5c:55:72:95:7c: 84:15:74:d2:73:82:03:6f:ff:a3:47:a0:1d:6c:36: 97:29:20:27:db:72:d1:d2:fd:ad:57:8e:32:8b:44: f8:fa:14:00:e1:b4:7f:1a:49:94:96:60:da:89:2d: 2a:39:5d:0d:10:ff:86:82:64:36:42:fe:bd:c1:37: ef:37:de:5d:46:64:4c:72:4d:c2:a8:e6:02:62:ab: 59:da:a1:43:5e:54:1d:63:ed:bf:97:59:32:6c:34: da:f5:20:50:70:1e:9b:cf:91:06:de:29:c5:68:e0: 5e:aa:4e:18:ed:cb:c0:ee:06:d5:5c:e1:2c:6f:77: 47:fc:f7:d6:d3:4d:20:6c:89:f2:b9:ea:e6:bb:dc: 01:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:17:74:62:26:AE:06:54:67:74:58:34:29:D1:06:47:45:7F:2A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:6e:f7:b0:d6:32:78:a4:02:93:8c:69:af:5f:49:8a:47:79: d2:7e:05:11:52:c9:d6:0d:da:81:96:c6:b7:13:62:76:06:82: 9b:de:16:04:e6:b8:f6:69:cc:04:48:ab:42:42:f6:ef:1e:f5: 64:4b:ac:0b:df:73:dd:8e:bc:c7:22:ce:ba:44:72:2c:cb:52: be:1a:99:e5:2b:7d:96:11:d4:b1:bd:66:0d:d0:6c:9e:ec:02: a2:d6:e6:6f:7d:b5:39:e2:b9:d8:85:7d:0e:14:5c:72:57:12: 14:87:f9:43:d1:50:4b:a7:f3:8f:2c:d4:40:3d:20:a7:4b:4b: e6:f2:c8:72:1d:64:98:08:f1:63:05:dc:84:e2:04:8e:85:28: 1b:07:df:96:5a:e0:63:77:ed:68:ff:b3:11:0f:fb:03:92:cd: 12:56:ce:2f:7f:fe:08:16:83:8e:bb:15:f4:b7:bc:36:6c:a6: 17:75:27:12:65:31:e2:c3:cd:a6:a1:25:f8:41:55:5a:a3:31: e1:29:33:db:61:12:de:b6:4b:27:36:88:5d:a9:22:a2:c8:42: 62:7e:76:65:65:f6:09:6f:74:dc:80:41:ef:49:67:73:1f:70: 98:8c:f9:0e:35:df:1d:c3:ad:58:97:fd:cf:84:25:bf:f6:a2: 8e:88:c2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhMCrWQThT3uXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDliMzUxZmUtNzk3Yi00ZjNhLTlmZjEtM2E3ZGEzMDRhMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9qhHLWjQN3aF2QqCIt8GDQ4+2bycHRUHLKS QiXVggIYUaEZkBb/T8YP+RQb6JtAVtf1ja23lcBoZktZZLYWyaDcgmoUjdvXSVLR xVaRsNXj2Q8OjX5t59j5qfiIUU+MhY4eu2rGvAzVi2JNjrkD+5jMXFVylXyEFXTS c4IDb/+jR6AdbDaXKSAn23LR0v2tV44yi0T4+hQA4bR/GkmUlmDaiS0qOV0NEP+G gmQ2Qv69wTfvN95dRmRMck3CqOYCYqtZ2qFDXlQdY+2/l1kybDTa9SBQcB6bz5EG 3inFaOBeqk4Y7cvA7gbVXOEsb3dH/PfW000gbInyuermu9wBywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsXdGImrgZUZ3RYNCnRBkdFfyp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhmZWM3NGYtYTBiZS0z YzJlLWI2NzUtZDA1ZWQ3ZTY0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNu97DWMnikApOMaa9fSYpHedJ+BRFSydYN2oGWxrcTYnYGgpveFgTm uPZpzARIq0JC9u8e9WRLrAvfc92OvMcizrpEcizLUr4ameUrfZYR1LG9Zg3QbJ7s AqLW5m99tTniudiFfQ4UXHJXEhSH+UPRUEun848s1EA9IKdLS+byyHIdZJgI8WMF 3ITiBI6FKBsH35Za4GN37Wj/sxEP+wOSzRJWzi9//ggWg467FfS3vDZsphd1JxJl MeLDzaahJfhBVVqjMeEpM9thEt62Syc2iF2pIqLIQmJ+dmVl9glvdNyAQe9JZ3Mf cJiM+Q413x3DrViX/c+EJb/2oo6Iwi4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:12:22 2025 by rpki-client