$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a2a03652-f939-3732-82ab-b433b3d88216.roa File: a2a03652-f939-3732-82ab-b433b3d88216.roa (raw, json) Hash identifier: hjGfjYNDxeusFiXZKFWU+6VhM+u+cMukD8q+/GjdJag= Subject key identifier: DD:56:39:54:8C:92:07:7E:20:25:11:1E:D7:34:28:D5:C3:5A:B5:39 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118CDE6D4E410B0C88F880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a2a03652-f939-3732-82ab-b433b3d88216.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8c:de:6d:4e:41:0b:0c:88:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b7dbbd7c-2468-49bb-bf1c-122275d80b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:20:70:ed:36:a0:61:d9:08:a1:8d:c8:29: 30:14:2d:93:74:50:3d:14:17:72:c5:6c:88:a6:9e: af:dd:9a:79:00:34:1b:56:6d:2f:73:8e:a4:b3:d1: 19:58:49:bc:8a:f9:1f:fe:d1:de:85:26:1d:1c:08: ed:63:2c:c8:73:33:a6:df:88:92:de:1b:fd:39:05: 88:d5:83:a6:16:54:2d:95:5a:a6:e9:90:ba:24:a7: d8:68:c2:49:f1:5a:c8:f8:d9:43:0d:33:c8:6a:d7: 24:e1:c1:66:2a:a9:f4:98:e2:a6:16:6c:25:95:62: ea:34:f1:e7:40:0c:f8:9e:79:ef:78:b0:58:aa:59: 91:2b:97:c2:83:ad:ea:a0:c6:09:3a:5e:60:a4:2e: 3d:14:65:ca:e0:15:bf:b2:9e:06:78:14:ce:b5:97: 9f:30:d3:12:ba:13:86:2a:83:07:9b:54:8b:0c:30: 64:59:ba:31:0d:64:de:7f:c5:25:dd:e5:28:14:2d: dd:72:2d:0a:cd:5b:03:6c:4b:ce:25:77:c5:9d:11: 24:39:88:f7:ca:04:aa:b4:b0:00:bf:ff:79:b2:50: db:07:97:69:fd:c0:b5:b6:6a:86:cd:65:ed:f4:77: 02:ac:0e:c0:9a:77:cf:a9:7e:cf:f6:c6:5d:11:87: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:56:39:54:8C:92:07:7E:20:25:11:1E:D7:34:28:D5:C3:5A:B5:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a2a03652-f939-3732-82ab-b433b3d88216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:bd:7a:cc:35:ac:e3:03:1c:78:b8:51:16:30:b3:25:6c:c1: 5d:e4:27:17:cd:72:f4:9d:6e:67:c8:3c:a2:db:d2:9e:42:91: 38:86:29:fb:17:14:84:d2:a5:cd:c3:c1:12:15:67:f2:28:bd: e0:0c:c5:31:97:0b:ba:3e:bf:de:ee:15:0a:d2:8e:ff:98:0d: 80:b9:dc:01:7a:2d:37:c0:26:0f:1e:f7:ed:31:fa:5d:f9:49: 45:3e:66:b1:d1:80:5c:59:5b:9a:46:f8:35:4a:6f:6c:42:31: 32:a8:cb:60:05:b9:63:53:48:03:85:1c:8a:7e:22:3d:e1:d9: 5e:43:57:0c:75:b6:90:cb:3a:a0:9b:17:3d:8b:86:25:f5:ec: 37:64:65:99:b7:d4:ff:3b:73:d7:13:7b:77:93:8f:d9:6b:69: 44:b5:bb:36:50:e9:1a:3d:d9:94:da:6d:37:7e:6f:38:a9:64: ff:0f:41:5f:b1:66:04:0e:d7:33:82:b3:42:0a:9d:32:6d:06: 1a:c7:0a:ea:ab:70:3e:6d:bd:a5:66:c3:94:70:84:29:26:8a: 4a:ad:54:35:d9:c3:31:e5:22:8f:c0:9e:d6:0d:99:e6:e8:7e: 29:b3:22:1b:76:5d:c4:3d:d4:17:99:94:05:a3:e5:55:69:f6: 78:98:02:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYzebU5BCwyI+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjdkYmJkN2MtMjQ2OC00OWJiLWJmMWMtMTIyMjc1ZDgwYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8wgcO02oGHZCKGNyCkwFC2TdFA9FBdyxWyI pp6v3Zp5ADQbVm0vc46ks9EZWEm8ivkf/tHehSYdHAjtYyzIczOm34iS3hv9OQWI 1YOmFlQtlVqm6ZC6JKfYaMJJ8VrI+NlDDTPIatck4cFmKqn0mOKmFmwllWLqNPHn QAz4nnnveLBYqlmRK5fCg63qoMYJOl5gpC49FGXK4BW/sp4GeBTOtZefMNMSuhOG KoMHm1SLDDBkWboxDWTef8Ul3eUoFC3dci0KzVsDbEvOJXfFnREkOYj3ygSqtLAA v/95slDbB5dp/cC1tmqGzWXt9HcCrA7AmnfPqX7P9sZdEYcbxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1WOVSMkgd+ICURHtc0KNXDWrU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTJhMDM2NTItZjkzOS0z NzMyLTgyYWItYjQzM2IzZDg4MjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa9esw1rOMDHHi4URYwsyVswV3kJxfNcvSdbmfIPKLb0p5CkTiGKfsX FITSpc3DwRIVZ/IoveAMxTGXC7o+v97uFQrSjv+YDYC53AF6LTfAJg8e9+0x+l35 SUU+ZrHRgFxZW5pG+DVKb2xCMTKoy2AFuWNTSAOFHIp+Ij3h2V5DVwx1tpDLOqCb Fz2LhiX17DdkZZm31P87c9cTe3eTj9lraUS1uzZQ6Ro92ZTabTd+bzipZP8PQV+x ZgQO1zOCs0IKnTJtBhrHCuqrcD5tvaVmw5RwhCkmikqtVDXZwzHlIo/AntYNmebo fimzIht2XcQ91BeZlAWj5VVp9niYAjI= -----END CERTIFICATE-----Generated at Tue Aug 5 20:09:00 2025 by rpki-client