$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3679b75a-c631-3ad6-94d1-40cc0a22c6fc.roa File: 3679b75a-c631-3ad6-94d1-40cc0a22c6fc.roa (raw, json) Hash identifier: NEpoV+NokX8ZBy7er1tl1ltTTa30a/vM86nMxEbt834= Subject key identifier: 5F:80:83:38:9D:46:C3:67:28:DF:27:1F:28:AB:93:1F:9F:34:EF:9A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118D4EA02768FC28920080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3679b75a-c631-3ad6-94d1-40cc0a22c6fc.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8d:4e:a0:27:68:fc:28:92:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=40b23781-1804-42de-ab97-7f13c30cc3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:b5:9e:62:30:66:5b:83:90:19:7a:b4:a4: 7a:01:23:16:2e:1a:98:b2:08:08:77:82:95:21:20: 4a:58:20:22:08:29:f0:f8:21:ed:bc:d2:f0:50:1a: be:92:ee:f7:cf:59:7d:1e:ec:3f:b8:14:f1:53:22: 33:b1:8e:40:d7:52:c2:e4:d1:d8:df:e2:db:3a:e8: f8:0a:b4:66:62:6a:69:37:8d:39:cf:1c:00:ea:e8: 2b:42:60:2b:85:d8:fa:4a:a5:bc:4a:0e:91:44:b0: 4f:6b:de:8d:e7:f3:fe:89:7b:3d:56:94:5a:35:10: d6:f6:69:71:69:40:eb:ff:5f:9a:6e:5d:25:78:73: 05:91:7a:eb:ef:ff:7b:32:76:a6:35:9d:2d:58:55: 68:17:dd:4e:8d:aa:e1:63:f8:74:fd:71:6e:5e:64: 3b:e2:12:33:cc:af:4e:f9:e7:a8:79:5a:55:8e:86: 8f:2d:9b:36:ef:d8:bf:f9:0d:a0:3b:df:54:81:0a: e0:40:a8:c7:ca:4d:c7:b5:3b:3e:fb:ed:7d:ee:71: 17:a5:1e:99:8b:1f:3d:ec:44:41:38:85:a6:b6:24: 4e:22:91:c9:16:06:68:28:d6:c2:39:2f:50:96:43: ae:22:de:24:95:94:0b:59:38:9e:fb:0f:e8:9e:5b: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:80:83:38:9D:46:C3:67:28:DF:27:1F:28:AB:93:1F:9F:34:EF:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3679b75a-c631-3ad6-94d1-40cc0a22c6fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:a7:02:30:e2:da:ac:5c:4b:e9:97:85:d0:e0:75:77:47:0c: 9b:77:7d:24:ad:8e:96:ae:42:df:68:94:a0:13:7b:7d:d3:83: 29:6b:eb:8d:57:68:60:ad:0a:11:de:07:78:5a:bb:77:25:46: 2a:e6:30:63:34:4c:cb:45:a4:e9:6c:22:9e:93:97:5b:06:8c: c4:ce:78:44:80:4d:73:b6:ff:10:56:cd:d7:37:fa:29:93:ca: 84:5b:48:66:bc:4f:d5:0e:c9:f8:c1:b0:3e:9b:11:4d:35:22: 8d:54:dd:79:51:a6:85:7a:e7:f8:2f:73:e4:6e:2a:3d:6a:c8: b9:4c:96:ed:85:ec:1c:36:db:df:64:ac:20:b3:76:20:9f:a6: df:4a:40:08:a4:b3:9e:03:77:19:b3:b1:f2:65:5f:18:5d:db: 25:e8:8d:00:c9:a8:2c:12:ed:70:17:f7:6d:73:7d:0d:5d:a9: 55:b3:e4:a9:ba:c5:22:79:42:26:d3:68:db:28:19:cb:1c:63: 26:5f:fd:29:97:3b:6f:d0:7c:13:e4:d9:7a:fa:12:9f:89:aa: c1:ea:8d:ee:2e:06:fc:82:83:a8:1c:91:5c:22:7c:ee:12:d1: 9c:ab:9e:91:7f:d5:74:8b:6d:57:00:dc:fb:b7:7e:87:76:12: 9f:e8:8a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEY1OoCdo/CiSAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDBiMjM3ODEtMTgwNC00MmRlLWFiOTctN2YxM2MzMGNjM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfu1nmIwZluDkBl6tKR6ASMWLhqYsggId4KV ISBKWCAiCCnw+CHtvNLwUBq+ku73z1l9Huw/uBTxUyIzsY5A11LC5NHY3+LbOuj4 CrRmYmppN405zxwA6ugrQmArhdj6SqW8Sg6RRLBPa96N5/P+iXs9VpRaNRDW9mlx aUDr/1+abl0leHMFkXrr7/97MnamNZ0tWFVoF91OjarhY/h0/XFuXmQ74hIzzK9O +eeoeVpVjoaPLZs279i/+Q2gO99UgQrgQKjHyk3HtTs+++197nEXpR6Zix897ERB OIWmtiROIpHJFgZoKNbCOS9QlkOuIt4klZQLWTie+w/onltK6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+AgzidRsNnKN8nHyirkx+fNO+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzY3OWI3NWEtYzYzMS0z YWQ2LTk0ZDEtNDBjYzBhMjJjNmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALinAjDi2qxcS+mXhdDgdXdHDJt3fSStjpauQt9olKATe33Tgylr641X aGCtChHeB3hau3clRirmMGM0TMtFpOlsIp6Tl1sGjMTOeESATXO2/xBWzdc3+imT yoRbSGa8T9UOyfjBsD6bEU01Io1U3XlRpoV65/gvc+RuKj1qyLlMlu2F7Bw2299k rCCzdiCfpt9KQAiks54DdxmzsfJlXxhd2yXojQDJqCwS7XAX921zfQ1dqVWz5Km6 xSJ5QibTaNsoGcscYyZf/SmXO2/QfBPk2Xr6Ep+JqsHqje4uBvyCg6gckVwifO4S 0ZyrnpF/1XSLbVcA3Pu3fod2Ep/oiiA= -----END CERTIFICATE-----Generated at Mon Aug 4 19:00:55 2025 by rpki-client