$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2be4b964-a017-312e-b894-beb314baed0e.roa File: 2be4b964-a017-312e-b894-beb314baed0e.roa (raw, json) Hash identifier: HahlYLVz0kufc+521ajFFRcWxlQ71lwf0Q24x6a/+wQ= Subject key identifier: F9:73:86:AF:C3:46:F8:80:21:02:4E:73:B8:EB:A5:7C:58:CC:C4:40 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84119109451A0FBD2C6C5AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2be4b964-a017-312e-b894-beb314baed0e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:91:09:45:1a:0f:bd:2c:6c:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=73d6e035-0329-432a-ab31-152ae64182ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:e2:a8:51:69:11:73:b2:3d:ab:12:cc:e2: d9:d2:35:af:bd:0b:3b:2f:83:67:79:5b:c5:65:19: a9:39:ef:b0:76:da:84:a1:27:02:46:7c:4a:5f:a8: 83:91:c6:0b:25:ae:44:34:c6:c0:93:12:08:7c:39: d0:6b:83:e4:3a:07:b6:70:aa:9d:c6:56:2c:0c:ee: 37:c2:ed:74:1a:7a:c7:28:79:6c:45:55:d1:fc:05: 74:45:6c:09:dc:54:b0:ad:8d:55:76:39:a7:e6:27: 42:32:29:c8:67:14:d6:ce:8b:73:01:ab:2f:75:ff: 87:3f:0b:aa:43:b9:16:16:e9:9d:26:34:12:7c:19: 3d:fb:72:e4:14:f6:f2:c3:1c:a9:0f:59:a2:37:7a: a3:a4:a1:08:ff:8b:5b:a4:94:31:59:31:fb:fa:3e: 1a:3b:86:68:40:53:bd:a9:eb:50:b7:5b:71:d9:2f: bb:87:96:92:d8:4a:63:3a:79:69:8d:4e:58:09:b9: 02:17:05:b2:4e:c8:22:51:12:29:b0:1d:11:85:12: 9d:ea:d4:74:89:e6:55:b4:1e:99:86:93:44:01:a2: 23:8a:29:64:02:69:d7:66:3b:56:ef:59:ab:0d:f0: 11:2d:3d:7f:4b:1e:d9:8f:fc:c6:92:47:a4:e3:40: b5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:73:86:AF:C3:46:F8:80:21:02:4E:73:B8:EB:A5:7C:58:CC:C4:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2be4b964-a017-312e-b894-beb314baed0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:68:2c:89:bf:8f:e4:2e:2b:91:0f:14:28:96:4e:9a:3c:67: 64:41:5d:d8:00:9b:e9:e9:30:ad:68:32:9c:56:24:de:0f:9b: eb:29:66:c8:80:06:7f:f8:ec:ff:2d:dc:9f:d1:a4:f9:c1:49: c6:c1:7d:12:b0:14:53:13:ec:02:29:de:5e:39:44:87:3a:27: 11:bb:5b:1e:5a:48:14:cf:bc:05:6e:e7:aa:bf:fd:dc:a0:cd: 49:39:1c:5f:5f:3d:52:32:30:5f:d6:25:74:16:27:0a:13:86: c5:6f:eb:d9:d3:1d:c8:81:ea:5e:ca:c3:bb:1f:13:30:d1:de: 4e:41:a6:24:b0:19:9d:6f:6d:50:76:2d:d5:c1:09:97:1e:09: a0:13:67:d4:a6:a7:8f:dd:2f:dd:a4:12:4c:f1:f5:2a:2e:5c: 17:ab:19:ef:37:62:5c:69:5a:91:94:04:78:bd:8d:08:32:40: fc:77:6f:5e:69:e9:cf:dd:ea:15:f1:43:1c:3a:ea:6f:cc:15: 70:c3:2e:3b:d2:be:91:89:9f:47:06:51:f4:42:fc:1c:53:97: de:1c:b9:06:87:e6:ee:20:05:dd:df:9d:de:cb:37:93:10:44: 1c:79:5d:ed:a2:2e:c8:36:3c:98:da:46:aa:75:70:a3:df:9b: d7:66:51:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZEJRRoPvSxsWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzNkNmUwMzUtMDMyOS00MzJhLWFiMzEtMTUyYWU2NDE4MmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV3iqFFpEXOyPasSzOLZ0jWvvQs7L4NneVvF ZRmpOe+wdtqEoScCRnxKX6iDkcYLJa5ENMbAkxIIfDnQa4PkOge2cKqdxlYsDO43 wu10GnrHKHlsRVXR/AV0RWwJ3FSwrY1Vdjmn5idCMinIZxTWzotzAasvdf+HPwuq Q7kWFumdJjQSfBk9+3LkFPbywxypD1miN3qjpKEI/4tbpJQxWTH7+j4aO4ZoQFO9 qetQt1tx2S+7h5aS2EpjOnlpjU5YCbkCFwWyTsgiURIpsB0RhRKd6tR0ieZVtB6Z hpNEAaIjiilkAmnXZjtW71mrDfARLT1/Sx7Zj/zGkkek40C18wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlzhq/DRviAIQJOc7jrpXxYzMRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmJlNGI5NjQtYTAxNy0z MTJlLWI4OTQtYmViMzE0YmFlZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1oLIm/j+QuK5EPFCiWTpo8Z2RBXdgAm+npMK1oMpxWJN4Pm+spZsiA Bn/47P8t3J/RpPnBScbBfRKwFFMT7AIp3l45RIc6JxG7Wx5aSBTPvAVu56q//dyg zUk5HF9fPVIyMF/WJXQWJwoThsVv69nTHciB6l7Kw7sfEzDR3k5BpiSwGZ1vbVB2 LdXBCZceCaATZ9Smp4/dL92kEkzx9SouXBerGe83YlxpWpGUBHi9jQgyQPx3b15p 6c/d6hXxQxw66m/MFXDDLjvSvpGJn0cGUfRC/BxTl94cuQaH5u4gBd3fnd7LN5MQ RBx5Xe2iLsg2PJjaRqp1cKPfm9dmUZk= -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:56 2025 by rpki-client