$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa File: a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa (raw, json) Hash identifier: PPtY5aZe7Djoj1/OOVkr8qFtAJrM3eeNd9oE3wa2dC4= Subject key identifier: 48:0A:2A:F8:6B:80:6D:D9:35:F0:55:5C:96:CF:51:93:DC:DC:01:F1 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584A5FC600321C05352DF52EA400 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 19165 IP address blocks: 173.247.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c6:00:32:1c:05:35:2d:f5:2e:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=2c554615-8e9c-461f-af72-cd46b6167818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:c2:f8:d7:e8:34:21:87:54:56:d2:8a:5c: 9f:c7:af:ba:d7:46:21:65:4d:fb:1f:8c:af:1b:ee: 7e:f9:f8:67:19:e4:93:2e:e4:97:3c:3b:d9:07:ae: 62:e4:0f:dc:d3:b6:f6:3a:41:3a:ef:42:34:de:54: d2:2a:ca:1d:a3:7b:70:6f:b6:75:19:65:a5:fe:aa: ff:b7:99:58:5d:1e:31:7a:7f:11:3f:1d:1b:32:2f: d1:21:4b:73:e4:8b:ca:e3:d9:1f:59:a8:8c:04:b0: ae:7b:59:2e:a6:53:ad:c5:89:15:86:81:fd:2f:57: bc:d7:df:92:b2:27:ac:e4:98:34:54:46:63:8b:f1: dd:0e:0d:b2:96:b4:ad:c4:bd:e0:e1:42:38:9e:24: 53:8d:f8:a7:ad:cf:85:d1:9c:88:9e:74:52:16:8f: 97:fd:42:43:3d:18:cd:b7:78:fe:74:ab:ce:2d:c4: cb:43:83:92:f4:ad:0d:5e:50:71:73:03:8b:53:83: 0d:b7:cd:6c:5e:05:be:76:7b:19:1a:b4:fb:c8:93: 03:4c:55:a4:cd:d5:43:ed:60:5e:83:f6:97:25:e7: 8a:bc:f4:71:a9:91:85:65:b0:3d:f9:70:2f:ba:78: e8:80:c3:4d:83:95:16:b3:17:d1:10:ee:aa:74:56: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0A:2A:F8:6B:80:6D:D9:35:F0:55:5C:96:CF:51:93:DC:DC:01:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 173.247.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1b:7a:ce:0a:cb:04:18:53:e2:81:58:b7:eb:9a:81:b0:7d: ac:0e:95:9e:f6:7d:71:71:b9:1c:cd:fd:83:1a:b1:85:3f:2a: 84:b5:80:05:d0:47:72:7b:68:bd:4b:f2:d4:2c:4c:09:c6:05: d1:78:2c:b8:95:82:d6:0d:ba:ed:d6:9a:eb:ec:d2:f4:88:0b: 5a:3a:74:73:6e:24:e2:dc:e0:a6:4c:82:62:cd:54:51:42:a1: a7:33:eb:fb:1f:11:88:6d:b6:3e:32:54:35:d0:80:d8:13:1a: 62:6a:dd:00:fc:46:92:1a:3a:e8:ec:65:46:fa:ba:82:24:db: 2c:d0:a8:a6:28:96:c2:48:25:40:59:dd:6a:65:5c:2f:01:8e: 54:65:b6:d3:66:47:9d:66:d5:75:35:ee:58:ea:32:db:41:28: 1e:00:9b:90:ac:62:95:84:06:3d:bc:79:b0:17:fa:f9:34:2e: 39:84:58:5c:ee:fb:b2:43:d4:b0:85:e5:77:d2:de:96:07:58: 8d:a1:97:8a:32:77:65:d4:31:5c:ed:60:08:23:9d:9f:06:ae: 0e:ec:10:04:c9:a9:d4:06:2d:4b:fa:c3:28:19:f6:1a:90:96: 35:fc:1c:a4:d6:f8:24:11:e2:07:39:13:ad:f4:4e:f0:7e:65: d8:da:8f:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxgAyHAU1LfUupAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MmM1NTQ2MTUtOGU5Yy00NjFmLWFmNzItY2Q0NmI2MTY3ODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SXC+NfoNCGHVFbSilyfx6+610YhZU37H4yv G+5++fhnGeSTLuSXPDvZB65i5A/c07b2OkE670I03lTSKsodo3twb7Z1GWWl/qr/ t5lYXR4xen8RPx0bMi/RIUtz5IvK49kfWaiMBLCue1kuplOtxYkVhoH9L1e819+S sies5Jg0VEZji/HdDg2ylrStxL3g4UI4niRTjfinrc+F0ZyInnRSFo+X/UJDPRjN t3j+dKvOLcTLQ4OS9K0NXlBxcwOLU4MNt81sXgW+dnsZGrT7yJMDTFWkzdVD7WBe g/aXJeeKvPRxqZGFZbA9+XAvunjogMNNg5UWsxfREO6qdFaK5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgKKvhrgG3ZNfBVXJbPUZPc3AHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvYTAyZTk1YzgtNTg2NC0z OTY1LTk3MTgtNDljOWNjNWE3Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErffAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwbes4KywQYU+KBWLfrmoGwfawOlZ72fXFxuRzN/YMasYU/KoS1gAXQ R3J7aL1L8tQsTAnGBdF4LLiVgtYNuu3Wmuvs0vSIC1o6dHNuJOLc4KZMgmLNVFFC oacz6/sfEYhttj4yVDXQgNgTGmJq3QD8RpIaOujsZUb6uoIk2yzQqKYolsJIJUBZ 3WplXC8BjlRlttNmR51m1XU17ljqMttBKB4Am5CsYpWEBj28ebAX+vk0LjmEWFzu +7JD1LCF5XfS3pYHWI2hl4oyd2XUMVztYAgjnZ8Grg7sEATJqdQGLUv6wygZ9hqQ ljX8HKTW+CQR4gc5E630TvB+ZdjajxY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:33 2025 by rpki-client