$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9568baa-4fbc-308b-bc61-401c4f05b197.roa File: e9568baa-4fbc-308b-bc61-401c4f05b197.roa (raw, json) Hash identifier: A9dHf3Tq0YNxuTiAhpOW1uxHAjZ6StwbSCRFju/rXrw= Subject key identifier: DF:F3:A2:76:F6:E1:BA:4D:38:B0:19:6E:CA:57:BE:CB:90:02:88:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD575ABEBE9A852D8CDCE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9568baa-4fbc-308b-bc61-401c4f05b197.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:57:5a:be:be:9a:85:2d:8c:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=dd2288c9-73b7-4ff3-bfa9-7f69d21ddbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:06:44:76:9d:9f:4b:89:cf:ac:20:7b:44:b1: eb:52:1f:02:ba:77:54:55:c0:87:02:6d:d4:32:7c: 42:32:10:4c:3c:36:c6:fe:63:0f:21:4f:77:9b:0f: 5b:a5:ed:d1:79:0a:5c:f7:a6:52:7c:27:00:5b:bb: 28:f0:b9:15:c6:7c:01:17:12:5c:b2:6f:98:38:6a: b6:97:4a:ec:d4:47:c0:6f:1c:dc:a1:eb:9f:90:14: 2c:84:35:e5:b1:57:dc:de:6c:3b:bd:8d:e0:16:4a: 3f:5e:1e:24:15:f6:bd:f0:ee:fb:ab:4c:5c:15:7b: 1f:48:62:3f:bb:f6:bb:5d:f2:b4:6e:6b:72:f5:08: 52:59:61:23:13:b5:c7:5c:a3:65:8b:21:d7:84:8f: b4:21:17:41:eb:e1:b7:24:4d:b9:e4:3f:95:53:96: 7e:83:74:a6:c9:a0:22:2f:59:b0:c9:71:ea:cd:91: 8e:91:ff:b0:54:2e:8b:c8:86:58:a1:da:1f:fb:9d: 01:fe:c6:3b:9b:cc:06:e6:00:de:c6:91:d9:0d:a6: 32:c2:e1:b1:e1:c4:9b:a8:6a:96:e7:a0:2b:fd:a0: 01:2d:a3:fd:07:90:3a:f9:44:52:ff:f1:59:f3:eb: 99:a9:0a:19:f6:47:5a:83:2d:3c:a8:07:4c:58:6a: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F3:A2:76:F6:E1:BA:4D:38:B0:19:6E:CA:57:BE:CB:90:02:88:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9568baa-4fbc-308b-bc61-401c4f05b197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:dc:8f:1c:ba:51:9c:4b:a9:8f:5b:59:75:7e:54:a6:02:1c: 48:84:cf:9e:6e:a3:d8:76:66:de:fd:28:8f:d7:e9:be:08:8a: f6:fd:ff:54:40:69:43:a5:98:f1:fc:be:be:9e:0a:07:8a:06: 4c:a6:81:1e:74:71:99:bb:0d:82:de:97:da:77:09:37:5d:7b: 77:5d:45:37:48:5d:9b:b0:ee:4d:59:5d:e4:10:98:bc:43:ff: 25:71:73:6d:ce:93:38:00:81:41:1a:8c:20:28:94:97:98:09: b6:a7:2f:99:ac:0f:0e:50:49:dc:a9:f3:26:a8:dd:86:8e:a4: 87:6e:fb:8e:04:43:d1:f1:7b:50:80:c4:ac:cb:3b:83:52:6a: c8:e3:a7:30:03:7f:70:94:32:f2:b7:c2:0a:44:de:b8:22:70: 88:62:54:97:89:b0:9c:56:fc:cd:28:f1:47:96:a2:4b:99:7e: d3:d6:f9:ea:c6:81:7f:4f:c0:5c:56:33:74:c1:e7:9a:8f:58: 23:f8:b3:97:35:0c:5a:2a:84:be:b5:71:3d:11:12:3f:ea:7a: 55:ef:71:38:8c:8d:57:e1:3b:d3:46:39:33:03:1d:21:46:8a: 92:02:8c:6b:7c:d0:19:b1:f2:d7:4d:84:f1:40:b9:f0:71:f2: ef:e7:b3:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVdavr6ahS2M3OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGQyMjg4YzktNzNiNy00ZmYzLWJmYTktN2Y2OWQyMWRkYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwZEdp2fS4nPrCB7RLHrUh8CundUVcCHAm3U MnxCMhBMPDbG/mMPIU93mw9bpe3ReQpc96ZSfCcAW7so8LkVxnwBFxJcsm+YOGq2 l0rs1EfAbxzcoeufkBQshDXlsVfc3mw7vY3gFko/Xh4kFfa98O77q0xcFXsfSGI/ u/a7XfK0bmty9QhSWWEjE7XHXKNliyHXhI+0IRdB6+G3JE255D+VU5Z+g3SmyaAi L1mwyXHqzZGOkf+wVC6LyIZYodof+50B/sY7m8wG5gDexpHZDaYywuGx4cSbqGqW 56Ar/aABLaP9B5A6+URS//FZ8+uZqQoZ9kdagy08qAdMWGrYJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/zonb24bpNOLAZbspXvsuQAoiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTk1NjhiYWEtNGZiYy0z MDhiLWJjNjEtNDAxYzRmMDViMTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDcjxy6UZxLqY9bWXV+VKYCHEiEz55uo9h2Zt79KI/X6b4Iivb9/1RA aUOlmPH8vr6eCgeKBkymgR50cZm7DYLel9p3CTdde3ddRTdIXZuw7k1ZXeQQmLxD /yVxc23OkzgAgUEajCAolJeYCbanL5msDw5QSdyp8yao3YaOpIdu+44EQ9Hxe1CA xKzLO4NSasjjpzADf3CUMvK3wgpE3rgicIhiVJeJsJxW/M0o8UeWokuZftPW+erG gX9PwFxWM3TB55qPWCP4s5c1DFoqhL61cT0REj/qelXvcTiMjVfhO9NGOTMDHSFG ipICjGt80Bmx8tdNhPFAufBx8u/ns+c= -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:45 2025 by rpki-client