$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa File: 833caff5-026e-36d2-a677-3eee63b7b415.roa (raw, json) Hash identifier: XednnqxLkSWpLTEqGak8Kzar3FrgrKG1jUF0is/vHI4= Subject key identifier: D5:42:61:D9:7F:43:9B:34:1E:AE:FE:9F:C2:D1:F9:11:41:A2:9D:6C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123A76C5F13BB6D0C5ECC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3a:76:c5:f1:3b:b6:d0:c5:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8ccd794a-e78a-466f-bd91-6a7bc82de4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:11:e2:dc:07:86:06:c3:f7:30:e6:bf:a7: d7:c3:0c:d8:4d:2c:b0:79:09:14:56:67:cc:ab:c9: 12:b6:51:43:fd:ac:9c:23:f7:fb:1a:bc:14:ed:82: bb:32:6e:cd:68:a3:c4:92:d0:43:4d:de:8f:9e:75: 3e:b1:38:31:a9:f9:8d:05:6b:c3:2f:c7:31:37:79: 86:da:87:59:08:0c:c9:52:a2:dc:75:a8:fb:ac:73: 6d:df:36:81:15:30:a4:c1:b3:66:78:8c:c0:73:c8: 31:a1:e9:1b:81:d9:5c:8a:51:73:11:fa:40:31:0b: 7d:c7:5d:71:be:43:a0:f2:27:26:e4:65:d4:d8:88: d9:29:5b:7c:cf:c2:81:fd:90:20:ba:0a:8b:2f:19: ce:a2:0e:f3:3e:a6:e8:14:df:27:a7:b1:9e:13:39: bb:b5:a2:e2:3a:71:37:09:46:38:3a:9d:79:57:61: e6:87:de:5f:c1:1b:0d:4f:7a:c7:73:70:45:ae:49: 76:89:ed:92:f2:71:50:73:2f:92:c6:5b:68:30:d7: d2:78:ca:fa:b1:a7:d4:e1:ff:f9:99:36:aa:18:10: 86:1c:3a:f3:5c:d8:62:9f:6f:d1:ff:9e:f2:f3:78: d0:91:01:45:1d:b1:2b:be:a7:77:c5:3b:e5:2c:08: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:42:61:D9:7F:43:9B:34:1E:AE:FE:9F:C2:D1:F9:11:41:A2:9D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:69:a5:fa:a4:98:3e:99:b2:45:a8:9d:49:73:22:53:fb:48: 82:d3:e0:28:01:83:d9:6b:b6:d4:e3:71:cd:05:e2:52:af:4c: 9a:46:fb:1a:0a:50:e0:6f:18:12:8b:55:51:70:77:29:72:b3: 7b:87:c7:ef:97:35:9e:24:d4:47:e0:5c:94:90:32:d9:b7:e7: 4c:39:4b:b2:c4:de:4d:52:19:fe:97:3e:c2:4c:b5:20:fe:4d: 19:dc:20:8a:50:e1:c4:2e:b2:6c:0c:6e:80:8b:ba:d3:e0:82: ef:7d:66:36:04:5a:97:52:f8:64:5a:0c:ee:1c:68:ae:e2:a6: ba:b4:d1:1a:12:17:5e:8c:47:2d:52:fe:30:3c:8e:04:56:2d: fa:b3:17:ba:cc:cb:1d:0c:9d:31:d5:f9:69:47:37:27:16:30: 16:3e:44:24:01:26:7c:cb:83:f8:5c:df:dc:95:c4:b8:25:d5: d2:ef:58:ea:75:d7:3f:a5:17:60:6a:8b:61:ed:35:3a:ea:24: a1:63:27:57:df:74:50:57:f1:f6:a9:01:1b:92:9e:fe:8b:f7: f3:b8:82:21:d7:c4:b0:0e:6b:f4:59:5e:1f:ba:c2:5e:68:b8: 43:13:7a:14:d6:58:39:9d:3c:b7:62:2b:b4:04:9c:0d:9e:6e: bd:16:a7:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjp2xfE7ttDF7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGNjZDc5NGEtZTc4YS00NjZmLWJkOTEtNmE3YmM4MmRlNGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsakR4twHhgbD9zDmv6fXwwzYTSyweQkUVmfM q8kStlFD/aycI/f7GrwU7YK7Mm7NaKPEktBDTd6PnnU+sTgxqfmNBWvDL8cxN3mG 2odZCAzJUqLcdaj7rHNt3zaBFTCkwbNmeIzAc8gxoekbgdlcilFzEfpAMQt9x11x vkOg8icm5GXU2IjZKVt8z8KB/ZAgugqLLxnOog7zPqboFN8np7GeEzm7taLiOnE3 CUY4Op15V2Hmh95fwRsNT3rHc3BFrkl2ie2S8nFQcy+SxltoMNfSeMr6safU4f/5 mTaqGBCGHDrzXNhin2/R/57y83jQkQFFHbErvqd3xTvlLAiqMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVCYdl/Q5s0Hq7+n8LR+RFBop1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODMzY2FmZjUtMDI2ZS0z NmQyLWE2NzctM2VlZTYzYjdiNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJppfqkmD6ZskWonUlzIlP7SILT4CgBg9lrttTjcc0F4lKvTJpG+xoK UOBvGBKLVVFwdylys3uHx++XNZ4k1EfgXJSQMtm350w5S7LE3k1SGf6XPsJMtSD+ TRncIIpQ4cQusmwMboCLutPggu99ZjYEWpdS+GRaDO4caK7iprq00RoSF16MRy1S /jA8jgRWLfqzF7rMyx0MnTHV+WlHNycWMBY+RCQBJnzLg/hc39yVxLgl1dLvWOp1 1z+lF2Bqi2HtNTrqJKFjJ1ffdFBX8fapARuSnv6L9/O4giHXxLAOa/RZXh+6wl5o uEMTehTWWDmdPLdiK7QEnA2ebr0Wp5E= -----END CERTIFICATE-----Generated at Mon Aug 4 18:56:51 2025 by rpki-client