$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa File: 414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa (raw, json) Hash identifier: 3jaJ0Yu10gs15LM7osDOX8Re4B2wtzj1W0+YQd3sRvs= Subject key identifier: B2:F1:A4:AC:CE:D7:66:AF:42:C3:32:3D:F3:91:83:57:ED:24:0D:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117C4FB9201CDBAFAB7640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7c:4f:b9:20:1c:db:af:ab:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=af2f05a9-a1df-4d14-be6b-a81df5021791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:f1:a1:1f:2b:83:6c:99:0a:3c:00:17:6a: 72:4c:36:98:b7:5a:3d:15:f0:e8:1b:9e:4d:fb:d9: 22:b8:23:f7:b3:d8:20:c4:ec:b0:93:c2:e1:14:9a: 40:b9:c4:97:18:f1:67:72:c2:bf:16:1f:30:d5:dc: 1d:0c:04:fb:70:6a:e0:75:74:80:0b:2f:d8:b4:0f: 52:dc:12:70:b6:32:26:6f:d6:45:13:b7:9c:2f:2f: d9:35:e7:d3:be:5b:a5:cc:ca:24:06:66:fd:db:d2: 64:9e:a3:77:b0:de:29:19:f8:f7:0c:f8:65:6b:b6: de:aa:92:ad:34:bd:35:34:94:14:a0:a9:bf:ab:ea: bc:49:95:e4:cb:f3:10:98:75:e8:58:05:e3:ee:42: 32:ba:a9:f1:60:55:4d:d4:81:c5:d6:3c:82:84:01: 22:17:c0:36:2e:55:87:3b:41:aa:9f:63:3e:5d:41: 93:38:42:28:a5:57:21:2d:92:7f:65:a1:86:ac:a3: 47:34:68:90:55:fd:e6:5c:e1:5e:13:45:d7:e0:4c: 5f:e3:f6:1b:09:ce:dc:dc:4d:d7:8b:4f:54:01:6e: 22:a2:52:62:1d:91:d5:8a:0d:b1:80:7f:c1:a2:fa: 18:80:58:d8:23:76:63:b0:0d:21:04:c4:cf:93:da: 7e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F1:A4:AC:CE:D7:66:AF:42:C3:32:3D:F3:91:83:57:ED:24:0D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d0:c0:c5:b8:fc:c7:5c:d1:44:be:84:2a:21:32:68:c3:b1: d6:45:c9:70:86:2d:c5:13:58:28:ba:cd:c0:ec:b4:c7:3f:c8: 32:4c:1a:3f:e7:68:7d:3b:1f:d9:08:d6:41:d6:c9:23:ca:fe: 72:cf:30:d5:56:50:78:56:8b:6c:23:f7:d3:55:90:53:40:de: 90:59:bf:21:0b:5f:3a:7a:eb:f9:4e:92:b5:e4:74:dd:e5:79: 91:b1:62:2d:a7:b6:b6:e0:1d:21:59:f2:ab:c9:30:ce:72:4f: fd:2d:11:e5:f2:95:6b:c7:9d:27:de:81:21:01:d3:6b:23:ea: 04:02:86:94:c5:49:73:de:96:b7:cc:7a:00:0d:c6:de:1f:32: b2:85:86:1d:7f:9c:b7:49:3c:b4:c6:40:c0:d6:6f:b0:80:e9: 2e:75:eb:a0:8f:83:99:a3:5b:ce:b5:cd:71:8a:c8:42:dc:54: 86:df:b9:39:75:46:58:d3:53:d1:7a:ff:bb:34:03:e4:8b:75: 27:41:a9:3d:bf:45:d1:8f:1b:65:b9:e6:e8:a3:65:d8:6d:00: 7c:73:3c:e6:ab:44:09:56:47:a2:50:7f:2e:13:8b:74:d8:c4: 66:bc:ed:88:d8:bb:c0:8f:dc:8d:36:18:93:5b:59:e2:11:25: 99:3d:a3:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXxPuSAc26+rdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWYyZjA1YTktYTFkZi00ZDE0LWJlNmItYTgxZGY1MDIxNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpnxoR8rg2yZCjwAF2pyTDaYt1o9FfDoG55N +9kiuCP3s9ggxOywk8LhFJpAucSXGPFncsK/Fh8w1dwdDAT7cGrgdXSACy/YtA9S 3BJwtjImb9ZFE7ecLy/ZNefTvlulzMokBmb929JknqN3sN4pGfj3DPhla7beqpKt NL01NJQUoKm/q+q8SZXky/MQmHXoWAXj7kIyuqnxYFVN1IHF1jyChAEiF8A2LlWH O0Gqn2M+XUGTOEIopVchLZJ/ZaGGrKNHNGiQVf3mXOFeE0XX4Exf4/YbCc7c3E3X i09UAW4iolJiHZHVig2xgH/BovoYgFjYI3ZjsA0hBMTPk9p+NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLxpKzO12avQsMyPfORg1ftJA3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDE0YjllYWYtMGNmYy0z NmM3LWFiZjItN2UxNDRkY2IxOWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcI/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELQwMW4/Mdc0US+hCohMmjDsdZFyXCGLcUTWCi6zcDstMc/yDJMGj/n aH07H9kI1kHWySPK/nLPMNVWUHhWi2wj99NVkFNA3pBZvyELXzp66/lOkrXkdN3l eZGxYi2ntrbgHSFZ8qvJMM5yT/0tEeXylWvHnSfegSEB02sj6gQChpTFSXPelrfM egANxt4fMrKFhh1/nLdJPLTGQMDWb7CA6S5166CPg5mjW861zXGKyELcVIbfuTl1 RljTU9F6/7s0A+SLdSdBqT2/RdGPG2W55uijZdhtAHxzPOarRAlWR6JQfy4Ti3TY xGa87YjYu8CP3I02GJNbWeIRJZk9o6s= -----END CERTIFICATE-----Generated at Mon Aug 4 15:25:55 2025 by rpki-client