$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647bcd14-660a-3d2d-bb7e-597cc9960a94.roa File: 647bcd14-660a-3d2d-bb7e-597cc9960a94.roa (raw, json) Hash identifier: NjDSR+pjpE03+slX+rsYowPDz9jn7TAJTzdHuzpff54= Subject key identifier: 90:CA:7A:44:87:43:F4:5E:E3:69:B4:8F:AF:0E:E3:AC:FD:16:DA:72 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841180822FEAB3F85AFB8080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647bcd14-660a-3d2d-bb7e-597cc9960a94.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:80:82:2f:ea:b3:f8:5a:fb:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=09b1907b-20a0-4ef6-bddf-7187a8002916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:68:44:9c:0e:73:51:e1:c7:fa:1d:bf:26: b0:bd:eb:f6:3e:a9:6c:af:b1:42:18:b8:e6:45:7b: 74:74:7e:03:b5:f5:66:23:da:f4:dc:33:a9:1f:1c: cc:0b:16:92:1d:d0:08:49:a2:50:2e:2e:b3:57:a2: ed:74:a8:e6:e2:e8:46:37:c0:31:b9:a5:a4:dc:de: e8:9d:f2:1d:ed:21:02:b5:be:db:15:ea:35:c8:03: c9:b4:18:cd:20:44:04:e9:88:73:7c:d6:1c:8e:81: 93:d9:3d:36:74:7c:32:b6:a0:85:0d:1c:a9:92:38: 1c:52:80:54:06:30:58:1c:73:4c:07:26:86:81:03: 3e:0d:f4:11:ae:80:ac:4f:71:25:34:fd:50:41:ce: 1e:2d:72:20:61:f4:80:7d:11:e7:46:d9:9f:e4:d8: 43:38:dc:36:a7:35:b8:78:2a:bb:37:99:d6:1d:11: 96:a0:1f:0d:f3:3f:35:cc:a0:57:b2:04:13:63:78: 24:4c:d5:f0:96:1c:6c:60:d7:a2:1c:17:e6:96:eb: 98:8d:2d:0a:bd:1a:99:2e:e1:4a:fb:0b:cb:98:5c: 15:1a:b8:30:75:ec:a9:d3:9f:35:da:95:75:5e:eb: a9:8c:36:b6:ca:14:c0:1b:76:e9:bc:9b:a6:c5:b8: 68:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CA:7A:44:87:43:F4:5E:E3:69:B4:8F:AF:0E:E3:AC:FD:16:DA:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647bcd14-660a-3d2d-bb7e-597cc9960a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:25:00:bc:b6:3f:b3:c5:3d:fb:7d:79:c4:2e:de:59:13:d7: dd:1b:88:e2:50:be:34:47:e6:c7:e3:c0:22:ec:09:bc:38:26: a8:77:38:d3:aa:0a:6c:8e:39:46:e5:eb:92:04:0b:17:c6:a5: 1a:f4:d3:cb:d5:ff:3d:e1:f8:19:3c:06:ec:3c:75:60:e8:95: 4a:88:6b:ef:a7:0b:f9:c4:dd:1b:ce:7b:39:9a:02:ea:ea:b9: 5f:88:65:30:f3:85:8f:91:47:ef:f4:f0:bf:07:81:63:7e:d2: 28:a0:47:92:3c:14:3b:b9:a3:fa:1d:41:00:52:5c:0d:c2:18: 41:57:5e:72:ec:2d:f7:13:2b:f8:24:f8:3e:83:f7:5b:44:33: 9f:d3:74:17:28:b1:fb:ca:2f:b4:b9:cf:8f:55:dc:8d:36:8c: 0d:91:79:82:e2:50:06:d6:e3:6b:c9:5b:3a:aa:68:c0:ac:5c: 5e:70:c9:dd:cb:f7:44:34:d3:89:1d:7a:97:86:4f:75:72:a9: 3e:87:55:32:4a:e1:28:55:df:bd:4c:94:b2:47:28:0a:6d:44: 83:3a:9b:36:e3:96:75:48:ef:19:68:b9:85:6b:ab:6c:12:35: 8f:da:df:69:53:26:cf:be:50:bd:f3:4f:4f:ba:7a:6f:8c:09: 9f:ef:e2:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYCCL+qz+Fr7gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDliMTkwN2ItMjBhMC00ZWY2LWJkZGYtNzE4N2E4MDAyOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ltoRJwOc1Hhx/odvyawvev2Pqlsr7FCGLjm RXt0dH4DtfVmI9r03DOpHxzMCxaSHdAISaJQLi6zV6LtdKjm4uhGN8AxuaWk3N7o nfId7SECtb7bFeo1yAPJtBjNIEQE6YhzfNYcjoGT2T02dHwytqCFDRypkjgcUoBU BjBYHHNMByaGgQM+DfQRroCsT3ElNP1QQc4eLXIgYfSAfRHnRtmf5NhDONw2pzW4 eCq7N5nWHRGWoB8N8z81zKBXsgQTY3gkTNXwlhxsYNeiHBfmluuYjS0KvRqZLuFK +wvLmFwVGrgwdeyp05812pV1XuupjDa2yhTAG3bpvJumxbho8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDKekSHQ/Re42m0j68O46z9FtpyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQ3YmNkMTQtNjYwYS0z ZDJkLWJiN2UtNTk3Y2M5OTYwYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8lALy2P7PFPft9ecQu3lkT190biOJQvjRH5sfjwCLsCbw4Jqh3ONOq CmyOOUbl65IECxfGpRr008vV/z3h+Bk8Buw8dWDolUqIa++nC/nE3RvOezmaAurq uV+IZTDzhY+RR+/08L8HgWN+0iigR5I8FDu5o/odQQBSXA3CGEFXXnLsLfcTK/gk +D6D91tEM5/TdBcosfvKL7S5z49V3I02jA2ReYLiUAbW42vJWzqqaMCsXF5wyd3L 90Q004kdepeGT3VyqT6HVTJK4ShV371MlLJHKAptRIM6mzbjlnVI7xlouYVrq2wS NY/a32lTJs++UL3zT0+6em+MCZ/v4n0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:21 2025 by rpki-client