$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c63f86c-45cd-3adc-aea5-79ed48ecb2ab.roa File: 8c63f86c-45cd-3adc-aea5-79ed48ecb2ab.roa (raw, json) Hash identifier: 0S7ysYOO1EOe4co+u1vGTvqCqxLwW6bNcZCa1W+4Xwo= Subject key identifier: F0:C3:C9:D9:90:1B:DB:13:E4:16:EE:A3:0C:FA:FE:7B:03:A8:77:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411724B93A8321E31F4E6E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c63f86c-45cd-3adc-aea5-79ed48ecb2ab.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:72:4b:93:a8:32:1e:31:f4:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a1b3dbaa-b97c-4aa8-8c7e-5cf2ecf2d472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cc:56:ab:1b:d2:89:37:1f:01:10:c5:94:f7: 5b:8a:07:7d:b7:93:73:7b:80:a0:c7:0c:04:38:51: 17:92:8a:c7:1b:83:54:46:10:5b:af:d7:b4:0e:46: 8c:27:98:a3:02:75:b6:8b:33:c5:38:0d:bc:eb:5c: 0d:d1:74:80:6b:d7:5a:8a:96:66:85:90:6d:a7:6a: 08:bc:e7:59:39:c0:ce:38:52:6e:40:0d:e9:8c:f0: b2:19:02:f5:c6:9f:ac:74:7f:e6:10:21:05:ed:e5: 23:88:8b:48:28:d1:90:f4:f1:1d:2a:c5:9f:7e:ed: 4b:29:f0:51:dd:a0:1e:b4:26:49:cb:5b:8f:5a:ba: 5e:b9:e1:35:4a:d3:21:3b:47:81:5e:2e:72:58:54: a2:6f:6a:8d:a0:10:74:0f:9a:5c:9e:94:12:40:16: 2f:12:e5:af:b1:f3:ed:67:04:36:cc:6a:66:e0:fa: 97:96:39:1b:25:dc:e5:95:fe:66:59:c5:a1:aa:5d: ef:e6:f0:65:e9:35:36:a0:9e:87:5c:85:4f:9d:25: 79:7e:e3:2a:dd:86:e3:3a:17:bf:92:1b:74:52:5e: 16:f6:b2:d8:e2:6a:c7:11:7f:44:ba:6c:78:91:bd: 38:9d:83:c2:6a:06:35:22:5c:1a:a9:20:04:b9:33: e7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C3:C9:D9:90:1B:DB:13:E4:16:EE:A3:0C:FA:FE:7B:03:A8:77:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c63f86c-45cd-3adc-aea5-79ed48ecb2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:af:0e:ce:25:78:4f:c2:ed:23:24:da:67:1c:68:b1:66:fb: 2e:df:89:a3:3b:22:70:29:11:d1:21:62:4d:9f:e8:f4:0b:d1: 68:3a:fd:f6:29:d4:37:be:95:1c:8e:c9:1a:43:93:0f:d2:0f: 0c:97:57:24:a8:cc:64:93:67:f2:55:23:7f:b4:9d:14:50:76: 6d:17:86:98:de:78:a0:af:70:fa:fd:2c:1c:5a:9b:9d:c8:ab: ef:83:7a:57:a2:97:34:d2:19:60:1e:3a:64:2a:68:96:f0:43: 28:f7:4d:b3:c0:af:03:37:59:cd:15:b5:58:74:90:09:f7:56: b4:95:b8:e4:9f:8e:d8:cb:24:1e:43:e5:d9:e9:30:bd:1f:d4: e3:8f:ba:bd:55:e9:3f:14:1c:ca:73:d9:b9:41:ca:79:6f:eb: 2f:31:78:31:85:2b:90:d6:ab:dd:57:ef:7c:42:d1:fa:fc:91: 18:4c:a2:e5:d5:85:98:2f:98:ba:f5:75:fe:91:12:eb:7d:5e: 10:c9:88:fe:14:fd:8b:d0:05:a8:2e:29:ee:4e:12:bf:fe:47: 1e:c4:90:5a:89:68:f1:a5:36:27:8f:e0:83:24:31:15:73:69: d1:bd:13:81:64:ff:89:da:4b:29:15:6f:6f:fe:2a:45:73:90: 43:02:f1:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXJLk6gyHjH05uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTFiM2RiYWEtYjk3Yy00YWE4LThjN2UtNWNmMmVjZjJkNDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsxWqxvSiTcfARDFlPdbigd9t5Nze4CgxwwE OFEXkorHG4NURhBbr9e0DkaMJ5ijAnW2izPFOA2861wN0XSAa9daipZmhZBtp2oI vOdZOcDOOFJuQA3pjPCyGQL1xp+sdH/mECEF7eUjiItIKNGQ9PEdKsWffu1LKfBR 3aAetCZJy1uPWrpeueE1StMhO0eBXi5yWFSib2qNoBB0D5pcnpQSQBYvEuWvsfPt ZwQ2zGpm4PqXljkbJdzllf5mWcWhql3v5vBl6TU2oJ6HXIVPnSV5fuMq3YbjOhe/ kht0Ul4W9rLY4mrHEX9Eumx4kb04nYPCagY1IlwaqSAEuTPnBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDDydmQG9sT5Bbuowz6/nsDqHcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGM2M2Y4NmMtNDVjZC0z YWRjLWFlYTUtNzllZDQ4ZWNiMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmvDs4leE/C7SMk2mccaLFm+y7fiaM7InApEdEhYk2f6PQL0Wg6/fYp 1De+lRyOyRpDkw/SDwyXVySozGSTZ/JVI3+0nRRQdm0XhpjeeKCvcPr9LBxam53I q++DeleilzTSGWAeOmQqaJbwQyj3TbPArwM3Wc0VtVh0kAn3VrSVuOSfjtjLJB5D 5dnpML0f1OOPur1V6T8UHMpz2blBynlv6y8xeDGFK5DWq91X73xC0fr8kRhMouXV hZgvmLr1df6REut9XhDJiP4U/YvQBaguKe5OEr/+Rx7EkFqJaPGlNieP4IMkMRVz adG9E4Fk/4naSykVb2/+KkVzkEMC8X4= -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:37 2025 by rpki-client