$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa File: f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa (raw, json) Hash identifier: R51Tm7SMoSQVD83iYM2MbKncpb1qUw8FGE2GIF+0Zz8= Subject key identifier: 4C:5D:57:3C:F1:A7:7D:CC:93:08:43:21:E2:3B:DF:85:35:E7:F3:11 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584AAB265C4347AB4F56EF555DC0 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 54878 IP address blocks: 173.249.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5c:43:47:ab:4f:56:ef:55:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=5c34983e-fba1-4a13-ba2f-63309abb5b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:60:dc:8d:68:f8:fa:09:6c:46:66:b9:8e: 5f:5f:2c:af:52:bf:e3:60:4a:6a:b8:93:8f:34:b5: 10:1d:f9:fd:dc:d8:f5:6d:17:bd:4a:16:c5:3b:a7: a8:d5:2d:40:d4:c2:bc:d5:e3:ee:f1:62:a8:ef:36: d6:26:e7:05:63:c6:c4:0e:db:4f:92:95:98:a7:76: a2:18:b8:c2:a2:06:2f:c8:89:0d:6b:71:bd:d8:9e: 23:42:0c:42:e1:4b:d2:89:a5:7d:4e:f2:7f:d9:76: 49:42:6c:76:4f:e8:e6:1e:46:c9:fe:a9:5a:b9:ec: f4:19:a2:df:5c:65:cd:bd:2d:fa:48:49:a4:fa:67: 8d:2e:88:37:62:bb:e7:f2:2a:2f:87:6d:05:2f:d0: 37:4b:cd:ed:1b:31:e5:7d:05:2c:e3:c8:f8:8c:fe: a2:ba:4c:ff:de:24:cf:d7:53:34:66:78:05:ed:ab: 2d:86:9c:35:c5:20:a4:94:e9:84:3a:e6:3d:3e:d0: 1c:60:87:bc:74:1a:c6:27:5f:11:57:01:60:d1:f7: e7:da:39:b8:14:61:13:18:f0:83:05:15:90:3e:1c: 5e:5d:65:1b:ad:0b:aa:51:f5:49:fc:92:ff:6d:c0: c8:81:26:7e:52:0e:03:61:23:42:a2:5c:36:f6:fc: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5D:57:3C:F1:A7:7D:CC:93:08:43:21:E2:3B:DF:85:35:E7:F3:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 173.249.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:40:d0:d3:0f:cc:01:14:13:68:1d:f0:63:6f:4a:20:39:cd: 94:b0:02:f3:b3:1c:3e:26:ac:40:f7:f6:f2:20:09:76:89:c6: 18:a6:cc:65:52:bb:0f:5f:a2:78:f5:34:0c:ec:04:0b:9b:77: 33:d8:a3:04:2f:4b:10:47:6e:21:b0:b3:42:68:21:b5:a0:4a: e6:d0:4b:b5:99:e9:d5:d4:2e:30:2a:61:d0:96:c9:13:2a:4c: 98:d6:a3:44:be:68:28:ae:0c:bd:56:a3:c3:f6:f8:ec:8f:1e: e7:f7:84:4e:0a:25:78:20:7c:11:fc:71:d8:a4:9f:d8:b4:ce: 0c:8b:aa:d2:e5:b6:0f:9d:8d:27:e8:ca:b5:54:70:71:7f:f6: dc:73:0b:a1:82:64:3a:6a:99:6e:fc:1e:56:bb:d8:9d:5b:71: 1b:2c:8c:ca:21:1e:46:84:7b:2c:5f:e0:eb:27:45:b6:ca:1f: 94:a9:9c:d4:5a:43:12:44:fb:73:ca:74:ab:0e:e4:27:e6:d6: 46:6b:74:5f:b0:0b:f5:27:fa:e5:0f:2a:c8:84:b5:4b:99:3e: f5:22:c4:2e:8f:76:1d:f9:d3:46:89:ef:f4:6e:35:41:4c:a0: 31:82:c9:ad:00:1e:30:bc:37:3e:c2:d7:eb:c8:b9:13:83:11: 51:8b:30:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlxDR6tPVu9VXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NWMzNDk4M2UtZmJhMS00YTEzLWJhMmYtNjMzMDlhYmI1YjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdZg3I1o+PoJbEZmuY5fXyyvUr/jYEpquJOP NLUQHfn93Nj1bRe9ShbFO6eo1S1A1MK81ePu8WKo7zbWJucFY8bEDttPkpWYp3ai GLjCogYvyIkNa3G92J4jQgxC4UvSiaV9TvJ/2XZJQmx2T+jmHkbJ/qlauez0GaLf XGXNvS36SEmk+meNLog3Yrvn8iovh20FL9A3S83tGzHlfQUs48j4jP6iukz/3iTP 11M0ZngF7asthpw1xSCklOmEOuY9PtAcYIe8dBrGJ18RVwFg0ffn2jm4FGETGPCD BRWQPhxeXWUbrQuqUfVJ/JL/bcDIgSZ+Ug4DYSNColw29vyB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExdVzzxp33MkwhDIeI734U15/MRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvZjgwMGM2ZDgtMWJlNS0z ZDk3LWE1YzctZTk0MzQ3NzFhZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArflGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRA0NMPzAEUE2gd8GNvSiA5zZSwAvOzHD4mrED39vIgCXaJxhimzGVS uw9fonj1NAzsBAubdzPYowQvSxBHbiGws0JoIbWgSubQS7WZ6dXULjAqYdCWyRMq TJjWo0S+aCiuDL1Wo8P2+OyPHuf3hE4KJXggfBH8cdikn9i0zgyLqtLltg+djSfo yrVUcHF/9txzC6GCZDpqmW78Hla72J1bcRssjMohHkaEeyxf4OsnRbbKH5SpnNRa QxJE+3PKdKsO5Cfm1kZrdF+wC/Un+uUPKsiEtUuZPvUixC6Pdh3500aJ7/RuNUFM oDGCya0AHjC8Nz7C1+vIuRODEVGLMIs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:41 2025 by rpki-client