$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa File: 0ae0857b-014b-3e54-a84d-e870cfb7a555.roa (raw, json) Hash identifier: XGblRq5bslfDqybOOWs9nILzzD31n0wRS27tkJ3DdVM= Subject key identifier: 7E:83:14:06:AE:6D:1A:3D:85:89:EC:42:E7:08:D9:D1:06:25:25:FE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841177C9D3FFFA75A9571980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:77:c9:d3:ff:fa:75:a9:57:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=25b00c13-a496-41d4-8596-918d775ddab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9b:5a:40:a2:b8:40:e1:45:b5:d9:02:fa:ca: aa:06:99:c8:f4:fc:54:ed:c9:a1:19:9e:11:0e:ed: 16:cc:b5:a0:81:e2:e0:02:19:01:eb:db:1c:2b:57: 2f:77:41:13:17:d1:3c:1b:a3:8f:88:02:88:75:a0: 22:d7:71:02:ef:0b:a6:f6:5b:ff:73:b6:20:94:d4: fd:f8:ba:d4:72:58:c6:89:23:06:bc:a1:53:92:d4: 46:ab:7d:a4:ac:44:7c:be:ee:32:f3:5d:29:d8:5c: e1:f1:48:b9:f8:b9:7c:8c:f5:a9:7b:98:61:5c:25: 9b:77:d7:20:f8:85:0d:8a:12:77:43:81:42:6d:1d: 9a:0c:48:d1:22:ff:27:d1:6f:ae:36:19:f7:cc:b5: 28:cd:b7:fa:3e:38:27:79:6c:fb:5e:97:23:91:13: f1:e4:30:f2:d6:5f:76:7d:45:0e:1e:fc:42:fb:9a: a7:83:b9:af:1c:87:f8:e7:1c:6a:25:f9:df:e3:6a: ad:3a:2c:6f:ca:3c:29:05:95:af:87:c8:d1:7a:61: 48:94:15:2c:cb:ca:d3:8a:c1:97:a9:46:33:1e:cc: a9:1e:95:1c:60:08:a9:d4:b9:c2:fc:09:6f:21:39: 0f:11:ed:db:1c:13:51:20:fe:81:24:00:fb:f3:9c: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:83:14:06:AE:6D:1A:3D:85:89:EC:42:E7:08:D9:D1:06:25:25:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:95:c3:a2:0e:44:89:e1:e0:78:f7:1c:b3:ab:0c:50:c5:67: a6:9e:6b:cb:c6:42:05:67:f1:c5:ca:b4:24:c3:2e:83:7b:66: f7:7e:00:00:e9:1c:59:e5:66:1b:c7:6e:9c:8a:b5:33:1c:39: 3a:56:9e:17:94:ba:3c:cd:77:15:2d:3a:18:20:3a:2e:5c:3d: 5a:3e:a5:56:3c:c4:ec:d3:b6:4a:d2:8f:52:38:5a:b0:a9:4c: 23:b4:44:30:ce:b5:dd:1f:e5:78:ca:66:73:04:73:d6:6a:7a: ca:f5:04:8e:84:3d:bf:bd:69:07:d0:85:f5:45:f5:c2:34:4e: 24:a1:c8:93:97:ec:f3:70:b0:6b:58:eb:bb:bf:66:03:bf:60: 7f:17:05:01:71:66:dc:6d:aa:50:55:03:c2:08:23:4e:bf:d9: eb:91:d8:d0:86:48:2e:f4:0d:29:2d:97:4b:5a:b0:ec:5d:75: 15:90:c1:e2:33:5d:f2:16:56:9d:9a:c0:ac:bd:3f:b1:45:f7: 76:0a:0b:17:ef:b9:a1:2c:e5:3f:01:07:22:88:7f:12:46:9c: 96:01:77:b8:3e:87:d8:d1:ce:f5:e6:d2:3c:e0:d2:3d:0f:3b: ec:ac:28:e5:87:f9:d5:7c:98:9d:26:3f:c1:be:4d:2d:1e:1e: 90:9d:d9:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXfJ0//6dalXGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjViMDBjMTMtYTQ5Ni00MWQ0LTg1OTYtOTE4ZDc3NWRkYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhptaQKK4QOFFtdkC+sqqBpnI9PxU7cmhGZ4R Du0WzLWggeLgAhkB69scK1cvd0ETF9E8G6OPiAKIdaAi13EC7wum9lv/c7YglNT9 +LrUcljGiSMGvKFTktRGq32krER8vu4y810p2Fzh8Ui5+Ll8jPWpe5hhXCWbd9cg +IUNihJ3Q4FCbR2aDEjRIv8n0W+uNhn3zLUozbf6PjgneWz7XpcjkRPx5DDy1l92 fUUOHvxC+5qng7mvHIf45xxqJfnf42qtOixvyjwpBZWvh8jRemFIlBUsy8rTisGX qUYzHsypHpUcYAip1LnC/AlvITkPEe3bHBNRIP6BJAD785w7XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6DFAaubRo9hYnsQucI2dEGJSX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFlMDg1N2ItMDE0Yi0z ZTU0LWE4NGQtZTg3MGNmYjdhNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyVw6IORInh4Hj3HLOrDFDFZ6aea8vGQgVn8cXKtCTDLoN7Zvd+AADp HFnlZhvHbpyKtTMcOTpWnheUujzNdxUtOhggOi5cPVo+pVY8xOzTtkrSj1I4WrCp TCO0RDDOtd0f5XjKZnMEc9Zqesr1BI6EPb+9aQfQhfVF9cI0TiShyJOX7PNwsGtY 67u/ZgO/YH8XBQFxZtxtqlBVA8III06/2euR2NCGSC70DSktl0tasOxddRWQweIz XfIWVp2awKy9P7FF93YKCxfvuaEs5T8BByKIfxJGnJYBd7g+h9jRzvXm0jzg0j0P O+ysKOWH+dV8mJ0mP8G+TS0eHpCd2VA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:33 2025 by rpki-client