$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a06ff5d3-9121-3f8b-a303-f578bbe54dd0.roa File: a06ff5d3-9121-3f8b-a303-f578bbe54dd0.roa (raw, json) Hash identifier: f6Gri+OUL+1LE6vK74Zt54Zc4b5x+MCPbp1WRR8DMz8= Subject key identifier: C2:29:07:B1:37:21:D6:5A:9B:70:19:C8:10:C8:77:65:2E:C9:3F:98 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841237218974758CA1FF7E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a06ff5d3-9121-3f8b-a303-f578bbe54dd0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:37:21:89:74:75:8c:a1:ff:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8c941825-34a4-44ea-8a5b-c1f2c8216543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:60:5f:1b:3f:ed:99:ae:da:0a:68:c9:83: f0:de:3e:2f:a5:8c:38:a2:78:53:1e:18:23:70:a0: a0:fb:31:b9:5b:8f:a2:ef:15:fa:c3:51:82:46:03: 64:67:06:d7:9f:73:36:0c:80:2f:81:47:87:a8:e1: 35:8e:a0:64:68:77:0b:a5:14:7f:28:84:b5:8b:48: d6:db:25:05:15:67:f0:cd:db:e4:92:aa:08:6f:25: a0:2e:b1:da:2d:59:3e:08:38:96:6d:00:c6:de:cb: e7:d2:e2:fa:36:15:d9:e7:ed:0d:bc:98:49:e7:be: c0:47:2b:32:1b:dd:f0:c1:00:c7:6b:c4:30:b2:55: 55:16:05:f5:09:c0:32:e0:1d:da:29:80:18:94:23: 4f:72:b6:e6:b8:4e:39:cc:a3:63:ee:41:3d:22:ea: 66:37:30:89:b2:1b:de:01:1a:05:89:05:ab:fd:4c: cb:4c:0b:34:da:6b:0e:37:d1:c9:8c:43:b2:68:67: 14:37:7b:a6:a9:c8:89:70:19:f4:84:c4:ca:cb:4a: d2:f9:f5:f7:29:bc:26:77:ff:73:24:8d:ad:1c:e1: 59:f7:82:be:05:86:b9:ea:df:e7:9b:41:2d:a6:48: 37:20:24:7d:15:81:5f:34:2c:5d:57:db:31:5e:de: 6a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:29:07:B1:37:21:D6:5A:9B:70:19:C8:10:C8:77:65:2E:C9:3F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a06ff5d3-9121-3f8b-a303-f578bbe54dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:13:8d:ea:8e:d5:f0:74:9b:77:d1:4d:72:42:b1:d6:15:73: cc:bf:ba:39:6b:6d:35:7b:44:24:17:3d:be:43:ae:0d:67:3a: d6:11:be:ce:8b:56:5f:bf:67:45:89:22:db:2d:7f:2d:b4:47: 7a:1b:ce:a1:f1:a6:96:45:a9:5e:64:61:8a:02:72:bf:d4:6c: be:da:76:0a:ef:10:5d:40:46:16:51:e6:4a:19:e6:70:03:b8: 89:ad:bd:ae:52:bf:c0:7a:28:bc:f6:78:db:e0:84:8d:8c:c3: 4b:9b:33:5c:05:c5:aa:7c:19:49:a0:39:87:ff:0b:1d:11:3c: 1f:31:e1:7f:bf:75:8f:7a:ae:bb:30:75:82:5a:2d:fc:b4:ef: b1:6e:ff:55:d1:a9:6c:4d:c0:3d:78:ca:93:5b:a9:66:b0:71: be:0f:c8:6c:92:4b:9b:36:98:67:5e:0a:8f:ac:da:09:ba:d4: fe:24:9b:b1:1a:59:4b:ce:15:61:ea:32:f0:a8:3a:4a:53:27: 1f:f3:9f:e3:3c:4e:8a:b5:39:11:71:da:be:f7:f2:b6:f4:3d: 99:84:7b:aa:9e:61:fa:3e:7c:e5:c0:41:4e:82:be:4f:a5:0b: 36:23:0b:5c:48:83:3a:7f:95:40:1e:de:43:6a:7a:ef:2f:81: f0:44:d6:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjchiXR1jKH/foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGM5NDE4MjUtMzRhNC00NGVhLThhNWItYzFmMmM4MjE2NTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4JgXxs/7Zmu2gpoyYPw3j4vpYw4onhTHhgj cKCg+zG5W4+i7xX6w1GCRgNkZwbXn3M2DIAvgUeHqOE1jqBkaHcLpRR/KIS1i0jW 2yUFFWfwzdvkkqoIbyWgLrHaLVk+CDiWbQDG3svn0uL6NhXZ5+0NvJhJ577ARysy G93wwQDHa8QwslVVFgX1CcAy4B3aKYAYlCNPcrbmuE45zKNj7kE9IupmNzCJshve ARoFiQWr/UzLTAs02msON9HJjEOyaGcUN3umqciJcBn0hMTKy0rS+fX3Kbwmd/9z JI2tHOFZ94K+BYa56t/nm0Etpkg3ICR9FYFfNCxdV9sxXt5q9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIpB7E3IdZam3AZyBDId2UuyT+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA2ZmY1ZDMtOTEyMS0z ZjhiLWEzMDMtZjU3OGJiZTU0ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkTjeqO1fB0m3fRTXJCsdYVc8y/ujlrbTV7RCQXPb5Drg1nOtYRvs6L Vl+/Z0WJItstfy20R3obzqHxppZFqV5kYYoCcr/UbL7adgrvEF1ARhZR5koZ5nAD uImtva5Sv8B6KLz2eNvghI2Mw0ubM1wFxap8GUmgOYf/Cx0RPB8x4X+/dY96rrsw dYJaLfy077Fu/1XRqWxNwD14ypNbqWawcb4PyGySS5s2mGdeCo+s2gm61P4km7Ea WUvOFWHqMvCoOkpTJx/zn+M8Toq1ORFx2r738rb0PZmEe6qeYfo+fOXAQU6Cvk+l CzYjC1xIgzp/lUAe3kNqeu8vgfBE1gs= -----END CERTIFICATE-----Generated at Mon Aug 4 14:59:02 2025 by rpki-client