$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa File: 42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa (raw, json) Hash identifier: PTVwXqLvLeinkAUni7jMmUiNdUiBQ4EaQ57sIMy5m7w= Subject key identifier: 7C:B4:CC:65:D5:20:63:7D:C2:21:05:41:89:97:56:E3:3C:EF:99:FF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841225BFF4B59E10ECD70B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:25:bf:f4:b5:9e:10:ec:d7:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6f682594-a668-4342-b7f6-91ab2ae53bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:93:a8:f7:6d:d0:f9:6f:a0:06:92:00:3a: f9:96:c5:e4:72:f0:4c:f6:af:a7:e9:f8:9a:17:fe: b2:f2:a3:c0:fb:ed:d7:e5:96:be:69:9b:59:73:da: 2a:eb:cb:c4:f2:66:19:9e:4c:59:0e:ba:1e:e0:42: 71:72:91:d6:8a:c8:7d:9d:d6:87:a4:81:77:54:92: f5:4f:21:80:5b:01:8e:6b:31:5e:d7:11:96:e6:b8: f2:92:58:00:ef:ae:44:ae:ea:9a:db:e9:7c:b9:17: 05:32:65:83:1b:6b:80:73:5e:0b:b2:0e:d8:8c:db: 71:6e:87:36:96:ce:9a:98:8c:57:8d:af:a6:b9:6f: ed:8d:5d:dd:97:00:3c:04:58:dd:ac:9c:53:0e:58: 7e:0a:b4:4b:ff:90:56:23:eb:4e:fe:f1:d0:ab:8a: 67:3e:d4:d2:a8:b8:4c:92:fd:9b:04:1f:e5:35:75: c8:a2:43:fc:af:76:da:04:3d:84:40:90:e6:03:7c: 18:9a:a7:0b:e6:76:90:36:00:ef:50:59:4f:7e:58: 1d:59:3f:d2:ee:f5:cf:72:bb:2c:3c:fd:12:be:08: f0:0d:33:25:c1:fc:98:d7:63:1d:aa:17:7c:cf:47: 2c:37:d6:43:8c:3a:02:a2:68:ef:83:64:c0:65:10: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B4:CC:65:D5:20:63:7D:C2:21:05:41:89:97:56:E3:3C:EF:99:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:82:8b:1a:d8:a0:d5:fb:b0:b0:0a:cd:cd:e4:23:93:db:e8: 2a:a7:07:ba:bd:e2:5e:aa:31:1f:38:89:a8:79:3a:87:a5:30: b3:02:b1:46:47:e6:d9:ed:93:2b:23:94:b0:29:64:08:e5:b0: e0:14:1e:d1:45:93:0c:1f:d0:1f:13:46:8e:7a:ae:77:76:87: 55:09:7e:70:9c:39:8a:52:99:ee:4a:92:3a:2d:7f:e8:49:7a: e9:39:d2:1b:08:85:d4:c8:98:c8:c3:39:83:f7:8f:40:73:53: 2f:a5:98:db:3a:15:c4:6e:59:73:53:b0:8c:2c:f7:17:01:fc: c4:85:76:21:4e:f2:90:14:19:f1:ae:7d:32:ca:02:b8:2a:54: 23:22:d8:cb:a3:f4:6a:64:0e:8e:f2:ef:dc:11:a1:d7:20:a8: b0:a0:c8:db:c3:f4:1d:bf:da:eb:c4:d4:ad:f4:5a:44:e6:d1: 21:44:9d:d5:c8:54:74:94:55:9d:83:f9:01:6e:ab:57:da:94: 86:d3:9a:8a:97:a1:9b:02:58:42:a5:16:30:8e:53:f2:9d:ad: eb:dd:de:49:18:bc:04:0e:0c:ed:18:18:1c:5a:79:45:d0:c6: 1f:0e:61:b0:9b:4c:6c:29:1d:e3:11:63:1d:11:27:41:93:1b: 70:ed:33:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiW/9LWeEOzXC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmY2ODI1OTQtYTY2OC00MzQyLWI3ZjYtOTFhYjJhZTUzYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05KTqPdt0PlvoAaSADr5lsXkcvBM9q+n6fia F/6y8qPA++3X5Za+aZtZc9oq68vE8mYZnkxZDroe4EJxcpHWish9ndaHpIF3VJL1 TyGAWwGOazFe1xGW5rjyklgA765Eruqa2+l8uRcFMmWDG2uAc14Lsg7YjNtxboc2 ls6amIxXja+muW/tjV3dlwA8BFjdrJxTDlh+CrRL/5BWI+tO/vHQq4pnPtTSqLhM kv2bBB/lNXXIokP8r3baBD2EQJDmA3wYmqcL5naQNgDvUFlPflgdWT/S7vXPcrss PP0SvgjwDTMlwfyY12Mdqhd8z0csN9ZDjDoComjvg2TAZRAQmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy0zGXVIGN9wiEFQYmXVuM875n/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDI5OTdmYzYtNWE1ZS0z ODBlLWJmYmUtOWE2OTM1YzZjMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiCixrYoNX7sLAKzc3kI5Pb6CqnB7q94l6qMR84iah5OoelMLMCsUZH 5tntkysjlLApZAjlsOAUHtFFkwwf0B8TRo56rnd2h1UJfnCcOYpSme5Kkjotf+hJ euk50hsIhdTImMjDOYP3j0BzUy+lmNs6FcRuWXNTsIws9xcB/MSFdiFO8pAUGfGu fTLKArgqVCMi2Muj9GpkDo7y79wRodcgqLCgyNvD9B2/2uvE1K30WkTm0SFEndXI VHSUVZ2D+QFuq1falIbTmoqXoZsCWEKlFjCOU/Kdrevd3kkYvAQODO0YGBxaeUXQ xh8OYbCbTGwpHeMRYx0RJ0GTG3DtMwQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:17 2025 by rpki-client