$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66b9e653-d8ad-3093-8f2a-24556d42228e.roa File: 66b9e653-d8ad-3093-8f2a-24556d42228e.roa (raw, json) Hash identifier: hFxYphuHFkocUR55pO84dOXJYrmmY+yleC9PCJkW51Y= Subject key identifier: CC:62:07:C6:88:E0:23:C2:98:90:6A:87:06:53:E4:C5:0A:B0:43:8B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841177412FA425E36BF27840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66b9e653-d8ad-3093-8f2a-24556d42228e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:77:41:2f:a4:25:e3:6b:f2:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c8f85820-35e1-41f3-9c97-e2b09bb5ad70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c8:f9:49:10:a3:ab:26:56:98:ac:04:4f:7f: b9:be:e5:7b:68:36:74:84:4f:93:e9:ec:04:31:bd: df:d2:06:01:0a:e7:f3:b2:16:42:e5:c1:d8:e2:66: 3a:f1:0f:f7:9d:45:c4:e2:aa:7d:74:09:c8:b1:f6: 3f:31:fd:f9:e3:25:e1:32:5d:4d:db:90:34:20:8e: d1:e0:3f:93:39:dd:27:60:37:bf:07:ac:b3:65:3b: f5:8d:44:c5:e6:f2:ac:f0:1a:ce:48:eb:73:53:84: 09:a4:65:bb:40:ef:ef:e5:6d:4f:0d:a3:1a:77:52: bc:b3:e3:c8:e8:54:1d:21:80:83:eb:ff:91:92:0e: 22:9b:7d:0b:7f:e0:a2:b2:b7:bf:48:38:73:98:9a: 32:7f:58:60:85:82:7c:73:ab:83:26:4d:b3:06:e0: 94:7d:25:10:6c:91:23:83:af:ee:4a:07:fc:5a:94: 26:e0:39:d6:72:b5:a6:6d:87:1d:6e:04:54:00:c2: 9b:8f:ff:ea:a7:1e:0d:17:0b:dc:23:eb:0d:1f:4c: 58:22:c4:fc:91:22:81:40:57:af:1e:65:cf:a1:88: 36:dc:bc:7a:6a:f4:2e:65:d5:d4:7d:08:7a:ab:23: 09:70:d0:ad:5e:7c:b2:1e:e8:18:07:54:a2:e1:25: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:62:07:C6:88:E0:23:C2:98:90:6A:87:06:53:E4:C5:0A:B0:43:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66b9e653-d8ad-3093-8f2a-24556d42228e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ba:19:f8:dd:3e:4e:21:d1:21:f4:cc:ec:35:6b:22:1a:cf: bb:e5:f4:e6:2b:61:89:f1:b8:65:a2:02:3d:b3:1d:32:62:31: 03:58:80:b9:84:a0:d4:55:bb:5c:1c:ac:84:bf:8a:66:1d:73: 9b:cb:33:f2:b4:40:74:6d:26:49:17:49:3a:ac:ca:0c:65:c9: 5b:b5:1f:10:ff:7c:61:d9:7e:fb:15:c2:08:02:bf:27:d8:24: 26:ab:a1:8f:f3:02:02:e1:72:d1:47:b5:19:61:ad:d2:15:2c: 95:80:72:dd:46:58:15:8b:3b:58:62:fc:fd:e4:e2:bc:0b:cc: a5:1a:bb:4a:a1:53:77:26:4d:31:93:af:a4:5f:a6:65:4a:74: 32:12:09:fa:0b:c1:93:48:74:e5:3e:6a:1d:35:01:1d:30:06: bb:a1:ad:56:01:80:88:c5:4d:13:a7:b3:7c:ee:dc:38:0a:b6: e3:b9:0e:da:34:0f:c0:d6:8f:7e:dd:ce:36:be:0a:79:2c:3e: ce:38:96:70:f7:2b:9d:f8:58:58:0d:ff:af:23:55:7e:1a:a0: 71:ac:c5:aa:ee:a2:32:68:bd:1f:44:88:ab:05:55:83:34:f5: 5a:b6:d4:c3:4d:df:cd:94:b4:de:a6:58:3d:26:0a:ba:d3:ce: 0d:ba:85:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXdBL6Ql42vyeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzhmODU4MjAtMzVlMS00MWYzLTljOTctZTJiMDliYjVhZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMj5SRCjqyZWmKwET3+5vuV7aDZ0hE+T6ewE Mb3f0gYBCufzshZC5cHY4mY68Q/3nUXE4qp9dAnIsfY/Mf354yXhMl1N25A0II7R 4D+TOd0nYDe/B6yzZTv1jUTF5vKs8BrOSOtzU4QJpGW7QO/v5W1PDaMad1K8s+PI 6FQdIYCD6/+Rkg4im30Lf+Cisre/SDhzmJoyf1hghYJ8c6uDJk2zBuCUfSUQbJEj g6/uSgf8WpQm4DnWcrWmbYcdbgRUAMKbj//qpx4NFwvcI+sNH0xYIsT8kSKBQFev HmXPoYg23Lx6avQuZdXUfQh6qyMJcNCtXnyyHugYB1Si4SW9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxiB8aI4CPCmJBqhwZT5MUKsEOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjZiOWU2NTMtZDhhZC0z MDkzLThmMmEtMjQ1NTZkNDIyMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm6GfjdPk4h0SH0zOw1ayIaz7vl9OYrYYnxuGWiAj2zHTJiMQNYgLmE oNRVu1wcrIS/imYdc5vLM/K0QHRtJkkXSTqsygxlyVu1HxD/fGHZfvsVwggCvyfY JCaroY/zAgLhctFHtRlhrdIVLJWAct1GWBWLO1hi/P3k4rwLzKUau0qhU3cmTTGT r6RfpmVKdDISCfoLwZNIdOU+ah01AR0wBruhrVYBgIjFTROns3zu3DgKtuO5Dto0 D8DWj37dzja+CnksPs44lnD3K534WFgN/68jVX4aoHGsxaruojJovR9EiKsFVYM0 9Vq21MNN382UtN6mWD0mCrrTzg26hXI= -----END CERTIFICATE-----Generated at Wed Aug 6 06:07:08 2025 by rpki-client