$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/136bd2ea-ac73-303f-a105-1d31eb49b11b.roa File: 136bd2ea-ac73-303f-a105-1d31eb49b11b.roa (raw, json) Hash identifier: Et6yJh3ocgS4Tzv8FCOLm4ZJB9sUHzSdwj4NqBzx7xY= Subject key identifier: 4D:87:AC:2C:1E:61:E4:60:F2:30:58:96:18:78:6F:D7:D2:7A:BD:10 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117FCA61F968B8BBCF7BE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/136bd2ea-ac73-303f-a105-1d31eb49b11b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7f:ca:61:f9:68:b8:bb:cf:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bfde0bf6-baea-4d90-bf13-a76c88fa3733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:27:02:32:52:2d:d0:5a:89:8a:84:09:f0: 7f:e2:f4:12:eb:e3:17:50:94:f1:95:b9:40:0a:4a: 67:e5:fd:86:e6:62:e7:60:55:84:72:f0:0a:a4:46: 7e:cc:20:4b:01:d4:9b:78:8f:ea:82:5e:da:25:40: 03:c8:9a:e0:d1:5d:1f:41:4e:6e:0c:c3:c5:f3:1e: f6:5c:0b:93:fe:03:2f:84:95:8c:c9:7f:76:10:aa: c8:61:af:2d:ce:a1:76:ed:91:e5:3e:04:04:4f:12: f6:f7:b2:b7:8c:9d:61:e2:f7:52:37:7d:9e:d1:1d: 68:77:e5:6d:d4:b3:a9:20:6e:d2:32:b2:a5:9f:c2: c2:ee:c3:7f:84:56:bc:9d:7d:e1:55:b3:fe:cc:a3: 33:a5:f5:47:17:41:6c:cd:8c:c4:eb:6e:39:57:ec: 65:c9:14:83:8a:04:88:25:48:d5:b7:35:c6:18:8d: ec:3b:46:1e:33:b3:9d:09:d9:69:63:ab:ff:d9:13: 75:57:9d:b5:34:7d:00:29:47:c8:fd:02:b4:bd:31: 71:c5:e6:e5:1b:a9:0a:99:33:b9:c9:3d:76:94:63: 12:4d:9a:70:4e:ec:47:e4:76:b6:19:1d:05:f9:3a: 8a:b1:a5:45:0e:73:88:b0:ea:5e:7f:58:57:35:e5: cd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:87:AC:2C:1E:61:E4:60:F2:30:58:96:18:78:6F:D7:D2:7A:BD:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/136bd2ea-ac73-303f-a105-1d31eb49b11b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:31:9f:c5:fd:3e:60:bf:91:24:75:bc:aa:7d:fd:94:73:12: f2:52:21:c4:04:dd:d9:a3:eb:54:86:a6:33:f1:06:72:af:9f: 77:b3:24:23:09:b5:51:c4:05:5a:01:13:93:0e:1c:0e:16:e7: 75:ce:1a:c8:56:a2:06:c4:14:ca:43:9e:b4:54:1b:07:77:f0: 22:b3:de:0b:22:ec:17:c4:9a:02:76:18:fd:7d:d2:ec:f3:31: 1c:c2:24:04:23:f3:b4:2a:5b:9a:cd:ca:77:07:1a:86:e7:b0: a9:7a:f3:80:f9:4e:c7:09:24:de:38:94:bc:9e:0b:1f:2c:f7: bb:1f:cb:30:91:ef:83:af:71:58:c0:07:2d:d4:23:cd:05:a7: 5b:69:d4:30:94:ce:8b:a0:5e:12:d7:a0:ab:f6:44:4a:b6:ab: 33:ea:ce:b9:9c:d6:2e:d2:d9:38:c5:dc:4a:b9:84:2c:4e:8a: a0:6e:7d:6e:b3:3b:25:15:e7:56:dd:8d:93:06:9d:5a:d8:da: df:c9:c9:da:cf:dd:10:6c:e5:02:e3:3c:53:11:98:c2:20:51: fa:22:68:50:2c:2d:92:64:4c:86:1b:aa:51:1f:0f:dc:10:5c: fa:85:45:a4:d9:23:7e:60:c8:dc:d2:64:1a:b4:1a:cd:6b:91: f8:63:47:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEX/KYflouLvPe+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmZkZTBiZjYtYmFlYS00ZDkwLWJmMTMtYTc2Yzg4ZmEzNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRwnAjJSLdBaiYqECfB/4vQS6+MXUJTxlblA Ckpn5f2G5mLnYFWEcvAKpEZ+zCBLAdSbeI/qgl7aJUADyJrg0V0fQU5uDMPF8x72 XAuT/gMvhJWMyX92EKrIYa8tzqF27ZHlPgQETxL297K3jJ1h4vdSN32e0R1od+Vt 1LOpIG7SMrKln8LC7sN/hFa8nX3hVbP+zKMzpfVHF0FszYzE6245V+xlyRSDigSI JUjVtzXGGI3sO0YeM7OdCdlpY6v/2RN1V521NH0AKUfI/QK0vTFxxeblG6kKmTO5 yT12lGMSTZpwTuxH5Ha2GR0F+TqKsaVFDnOIsOpef1hXNeXNbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2HrCweYeRg8jBYlhh4b9fSer0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTM2YmQyZWEtYWM3My0z MDNmLWExMDUtMWQzMWViNDliMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4xn8X9PmC/kSR1vKp9/ZRzEvJSIcQE3dmj61SGpjPxBnKvn3ezJCMJ tVHEBVoBE5MOHA4W53XOGshWogbEFMpDnrRUGwd38CKz3gsi7BfEmgJ2GP190uzz MRzCJAQj87QqW5rNyncHGobnsKl684D5TscJJN44lLyeCx8s97sfyzCR74OvcVjA By3UI80Fp1tp1DCUzougXhLXoKv2REq2qzPqzrmc1i7S2TjF3Eq5hCxOiqBufW6z OyUV51bdjZMGnVrY2t/JydrP3RBs5QLjPFMRmMIgUfoiaFAsLZJkTIYbqlEfD9wQ XPqFRaTZI35gyNzSZBq0Gs1rkfhjR44= -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:13 2025 by rpki-client