$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa File: 9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa (raw, json) Hash identifier: x5JHm89spNsGN/VilenbbtJbgxsQlzMd78fEdC5SD20= Subject key identifier: CC:25:F7:62:A9:01:49:F8:75:71:18:32:44:64:2B:A3:F9:BF:C0:58 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6BEB16AB31D53A4406E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 209.85.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6b:eb:16:ab:31:d5:3a:44:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c03d1565-8c8d-46a4-afbb-a6ec1c45665f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:45:d9:bd:b7:fd:f5:70:a6:d8:da:95:69:fa: ec:91:00:fd:a8:09:2f:bd:f9:ad:83:ae:27:63:76: e0:56:9e:42:45:2d:72:33:9f:d5:69:01:87:48:24: 0b:d2:55:22:8c:ae:fc:31:26:a1:26:f4:36:39:66: c3:79:c0:f7:6f:fe:8c:85:8c:a8:89:be:9d:70:68: a5:1e:bf:10:93:ac:d1:31:78:71:0f:5f:df:44:50: eb:0e:3a:1e:a0:f2:a4:47:0a:ef:7c:32:b3:1c:dc: 18:82:d0:78:22:0a:19:56:66:16:0b:04:4f:db:c3: 1f:c7:50:8e:6c:f2:16:04:01:0f:fa:4b:af:66:c1: d2:93:dd:b2:50:de:5b:d8:4b:aa:8e:a9:1a:31:55: d9:e1:e8:63:33:ad:58:71:94:a9:d9:50:cc:35:23: cd:dd:35:b5:87:1c:59:50:27:f7:7a:be:04:51:73: 94:84:f6:69:f3:87:9c:ca:6a:52:ae:0a:b5:09:63: 12:16:2a:78:a2:35:75:d3:c8:4f:72:ad:a9:7c:0d: fd:8f:42:58:31:7c:27:7b:b8:be:52:a0:31:64:ed: d4:f5:68:9a:2c:d5:31:44:ac:f3:ee:ae:23:01:bb: 64:d1:12:5e:77:82:42:2a:6e:05:77:42:0e:e8:7d: 1e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:25:F7:62:A9:01:49:F8:75:71:18:32:44:64:2B:A3:F9:BF:C0:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:99:f0:7b:f9:11:86:11:fc:6e:6f:22:f9:1a:2a:8a:55:e1: f3:92:18:50:07:62:2d:3d:2d:a0:c7:7b:ea:59:8e:a1:0c:21: e1:74:cc:22:87:29:81:ca:30:a9:1f:0a:9a:09:5e:dd:b6:bf: e1:97:0e:cb:90:3e:d0:4e:0d:61:22:9c:78:0b:64:d1:41:fd: 9b:aa:a2:d2:5f:ee:af:73:ca:7d:e3:61:3b:fb:8a:4b:35:47: 3f:2d:77:ea:2d:bc:19:87:1e:13:cc:12:59:ef:c2:06:d8:f0: f3:54:e1:03:c0:ff:8e:db:29:0b:4f:42:b8:c9:60:e8:fd:a6: 37:21:77:d9:58:80:9e:15:cb:87:d8:71:ad:6f:58:a8:c7:d6: 36:f5:47:fb:77:83:98:93:8b:c3:b2:11:a7:48:38:10:18:4d: 69:21:56:f1:b9:bb:7d:9a:57:3e:1e:9e:70:aa:87:26:ff:be: 76:1c:c3:54:10:51:f8:31:cd:78:5b:e2:8b:9d:f6:31:88:2b: ec:e9:c3:a8:c0:5e:cb:2b:57:02:92:9d:42:b0:d5:89:99:e4: e5:e9:12:d4:29:57:5b:e0:a5:c9:64:db:d7:6b:ef:40:9a:b3: 47:ec:c8:7e:d2:bb:30:cb:f0:58:3a:9a:0f:11:c3:cb:1e:92: 67:53:69:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWvrFqsx1TpEBuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzAzZDE1NjUtOGM4ZC00NmE0LWFmYmItYTZlYzFjNDU2NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUXZvbf99XCm2NqVafrskQD9qAkvvfmtg64n Y3bgVp5CRS1yM5/VaQGHSCQL0lUijK78MSahJvQ2OWbDecD3b/6MhYyoib6dcGil Hr8Qk6zRMXhxD1/fRFDrDjoeoPKkRwrvfDKzHNwYgtB4IgoZVmYWCwRP28Mfx1CO bPIWBAEP+kuvZsHSk92yUN5b2EuqjqkaMVXZ4ehjM61YcZSp2VDMNSPN3TW1hxxZ UCf3er4EUXOUhPZp84ecympSrgq1CWMSFip4ojV108hPcq2pfA39j0JYMXwne7i+ UqAxZO3U9WiaLNUxRKzz7q4jAbtk0RJed4JCKm4Fd0IO6H0eDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwl92KpAUn4dXEYMkRkK6P5v8BYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWYyMThiZmUtYWI1MS0z YzY0LWFiNmItYmE2NDNmYmFjMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOZ8Hv5EYYR/G5vIvkaKopV4fOSGFAHYi09LaDHe+pZjqEMIeF0zCKH KYHKMKkfCpoJXt22v+GXDsuQPtBODWEinHgLZNFB/ZuqotJf7q9zyn3jYTv7iks1 Rz8td+otvBmHHhPMElnvwgbY8PNU4QPA/47bKQtPQrjJYOj9pjchd9lYgJ4Vy4fY ca1vWKjH1jb1R/t3g5iTi8OyEadIOBAYTWkhVvG5u32aVz4ennCqhyb/vnYcw1QQ UfgxzXhb4oud9jGIK+zpw6jAXssrVwKSnUKw1YmZ5OXpEtQpV1vgpclk29dr70Ca s0fsyH7SuzDL8Fg6mg8Rw8sekmdTaWg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:43:07 2025 by rpki-client