$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa File: 0ae0857b-014b-3e54-a84d-e870cfb7a555.roa (raw, json) Hash identifier: +fCc5RSM6MUYADejmsq6cRLqBoA033wZz4JgypzCSD8= Subject key identifier: 35:1B:0C:22:73:01:66:DE:DF:FC:BE:A4:F5:EE:05:68:C4:92:26:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD544715F65F092EF81AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:54:47:15:f6:5f:09:2e:f8:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7c0fbe93-9a86-418d-92da-fa08f6265e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:a6:d6:07:2e:31:47:a0:29:63:83:0d:a9: fc:d4:d1:0f:e8:d9:f4:c5:7f:55:ab:50:c6:a9:ca: 1e:3e:67:0d:bf:31:fd:6d:0b:d6:04:f7:2a:3d:e4: f1:80:eb:fb:c8:e9:29:37:28:2b:0d:f3:d2:e0:85: f7:be:28:f9:39:24:d7:89:75:b8:f8:25:ea:03:19: 33:e7:7a:af:50:f9:7a:c7:6c:73:6b:e0:91:17:38: 03:ba:e0:cb:ee:6d:70:9a:32:4f:e6:9b:4a:f0:39: ee:50:e8:9b:73:24:74:8a:99:fb:6a:03:90:47:49: 1d:1c:7c:28:fb:54:fc:01:4d:ed:62:fc:be:9d:1f: 6a:6e:52:73:2b:4d:41:ca:24:45:7a:21:d9:98:0b: d3:a8:99:87:d4:0d:c3:12:e1:a9:76:a3:1e:31:50: e4:31:e6:09:1f:06:22:68:84:85:1f:ca:86:1d:74: d5:32:33:3f:db:58:d4:1a:57:de:f2:6e:9c:87:2d: ea:09:d9:58:86:cc:89:cd:63:ca:aa:de:5d:5d:8b: 35:2f:2a:9c:47:90:b5:7e:74:a0:2b:77:b2:8a:1c: 8f:10:2a:01:2b:29:72:f7:03:3b:30:47:84:f4:93: 66:f3:93:b7:e6:c8:33:5a:2f:dd:3c:98:5b:d5:e7: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1B:0C:22:73:01:66:DE:DF:FC:BE:A4:F5:EE:05:68:C4:92:26:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1e:a8:8c:82:c9:b9:87:a0:4f:19:ce:53:fd:85:25:48:83: 67:1e:8c:31:00:26:3a:ab:73:cf:5b:06:f1:16:47:7e:b8:7a: 16:7c:e3:89:93:b7:6c:9d:0f:7d:0b:38:7a:b3:2f:e7:d4:1d: b7:75:4c:1a:3a:10:1f:81:6f:b2:31:1f:5f:b4:1d:c6:98:58: 5c:d7:57:29:09:7d:3b:41:43:ad:e5:bf:c9:e9:6a:3f:ec:a7: 76:26:99:40:b4:de:1c:1c:b7:ea:d9:9c:35:b7:2b:09:4a:ae: ad:53:61:39:b2:a7:03:16:8d:fa:8a:12:12:b0:ef:f7:29:c0: f9:d6:f8:d3:ae:a0:e3:55:97:28:59:2f:c5:1d:41:6c:1a:6e: ff:a4:6a:a2:d1:cf:cc:cd:df:f8:19:24:bb:df:8f:7d:20:d5: a6:ba:7b:7e:1d:42:63:cd:82:89:06:df:68:e3:16:86:43:48: 63:bf:08:06:43:10:4d:a7:48:52:69:fd:53:1e:b8:8e:ff:0b: b6:60:a8:c7:2b:b1:4c:25:97:ae:a1:09:05:64:a7:0c:2e:5d: 58:14:7a:55:13:1e:06:41:ac:d6:0c:ce:be:43:b7:0e:48:bb: 74:d9:6a:7b:61:7f:a6:02:21:1a:d8:aa:9f:78:89:a9:bc:9e: 8b:27:be:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVRHFfZfCS74GsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2MwZmJlOTMtOWE4Ni00MThkLTkyZGEtZmEwOGY2MjY1ZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYSm1gcuMUegKWODDan81NEP6Nn0xX9Vq1DG qcoePmcNvzH9bQvWBPcqPeTxgOv7yOkpNygrDfPS4IX3vij5OSTXiXW4+CXqAxkz 53qvUPl6x2xza+CRFzgDuuDL7m1wmjJP5ptK8DnuUOibcyR0ipn7agOQR0kdHHwo +1T8AU3tYvy+nR9qblJzK01ByiRFeiHZmAvTqJmH1A3DEuGpdqMeMVDkMeYJHwYi aISFH8qGHXTVMjM/21jUGlfe8m6chy3qCdlYhsyJzWPKqt5dXYs1LyqcR5C1fnSg K3eyihyPECoBKyly9wM7MEeE9JNm85O35sgzWi/dPJhb1eeScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUbDCJzAWbe3/y+pPXuBWjEkiZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFlMDg1N2ItMDE0Yi0z ZTU0LWE4NGQtZTg3MGNmYjdhNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUeqIyCybmHoE8ZzlP9hSVIg2cejDEAJjqrc89bBvEWR364ehZ844mT t2ydD30LOHqzL+fUHbd1TBo6EB+Bb7IxH1+0HcaYWFzXVykJfTtBQ63lv8npaj/s p3YmmUC03hwct+rZnDW3KwlKrq1TYTmypwMWjfqKEhKw7/cpwPnW+NOuoONVlyhZ L8UdQWwabv+kaqLRz8zN3/gZJLvfj30g1aa6e34dQmPNgokG32jjFoZDSGO/CAZD EE2nSFJp/VMeuI7/C7ZgqMcrsUwll66hCQVkpwwuXVgUelUTHgZBrNYMzr5Dtw5I u3TZanthf6YCIRrYqp94iam8nosnvnY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:25 2025 by rpki-client