$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa File: a430c233-1598-3766-bd27-1c26e3178a02.roa (raw, json) Hash identifier: oduK65VkqLD53kUyx2qSHuK+wRizZv5CIXyHKFM2TUM= Subject key identifier: C1:B5:0E:F4:40:52:AD:B9:69:EF:10:CD:14:57:A8:85:DE:EF:DD:EB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411905550B95605F0667500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:90:55:50:b9:56:05:f0:66:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=899d2767-7460-471e-945e-f1be68fc34d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:bd:79:d7:b9:3f:b8:6e:4f:65:cb:a6:a1: 33:a1:a2:8d:b5:3a:84:8d:c8:71:f0:3a:07:64:b5: 15:84:ef:52:a4:24:aa:f3:3f:4b:15:c9:d0:79:1c: a7:b2:d2:85:0c:6d:76:18:34:23:0b:63:38:f5:01: b4:f5:81:7a:cf:d8:d8:5c:d0:0c:a9:a9:4a:de:ab: 1d:46:65:5a:5f:71:86:b1:a9:fe:73:73:5f:42:07: a7:4f:29:29:6a:f4:f9:f7:84:99:61:48:14:28:89: 4c:a1:a3:42:de:99:af:ff:ef:9e:d7:56:3d:1d:58: 9d:58:85:79:bb:99:89:8a:6f:a4:cb:ff:64:c1:00: a5:99:88:12:3b:d9:55:a7:d5:c6:19:8c:3c:42:b6: a9:e1:43:d6:09:44:a8:8e:03:73:45:35:31:93:0d: c6:de:64:f2:b6:44:56:2a:f7:62:ff:98:f8:f5:97: 67:ee:a1:de:0d:2d:09:32:88:cf:39:3e:38:1b:98: 93:9a:d9:f5:d7:3b:86:4a:80:69:f0:76:4e:6a:1c: ce:63:4f:0e:0f:66:d8:41:e0:4b:63:a4:7b:ca:93: 9b:ce:86:c1:87:f8:5e:89:82:31:89:71:ad:b3:8a: ab:be:af:49:ae:ab:55:45:17:41:46:41:1b:48:4d: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B5:0E:F4:40:52:AD:B9:69:EF:10:CD:14:57:A8:85:DE:EF:DD:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c7:ea:bd:74:33:d9:2e:56:26:74:f7:20:45:00:ba:5a:3f: 94:82:d5:3a:7c:0d:28:35:bd:c5:54:ca:58:8f:7e:d8:c8:f3: 96:ea:4f:d8:e6:f5:fe:89:b0:58:2c:6d:00:45:23:e4:85:4c: db:f8:2a:a8:9e:e2:63:79:78:ba:a5:5c:e8:a0:27:82:75:34: 9b:ab:5c:93:c7:a1:3a:62:42:b6:3f:03:3a:e8:6f:47:43:7b: 63:ea:82:3e:b7:a3:6d:1b:44:3e:f8:cf:b7:03:8b:a6:5f:f1: 95:29:7a:7f:bc:79:8c:7a:0d:e1:c7:63:bc:1d:cf:33:c0:6d: e4:56:ca:4e:e9:70:7a:d7:08:0c:8c:3b:69:87:f8:97:ca:0b: 9f:21:85:2e:60:17:0e:92:74:28:1e:b8:13:23:7a:04:f8:82: 49:7f:14:1a:e6:1d:98:d2:38:8e:6d:ab:2d:cf:64:cb:1b:cf: 07:8d:5d:8f:c3:93:4c:70:a0:30:56:ab:2e:c3:26:1e:6b:cb: 42:a4:ed:bd:35:b8:d8:c7:87:3a:f8:b2:48:45:93:2b:ef:8a: da:a1:ef:81:c2:a9:c9:e3:f3:dc:75:6e:7a:c1:78:2d:c5:d2: fc:76:94:f5:1f:07:41:47:38:af:fa:40:f8:4e:18:cf:e7:d4: 5f:62:d9:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZBVULlWBfBmdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODk5ZDI3NjctNzQ2MC00NzFlLTk0NWUtZjFiZTY4ZmMzNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCu9ede5P7huT2XLpqEzoaKNtTqEjchx8DoH ZLUVhO9SpCSq8z9LFcnQeRynstKFDG12GDQjC2M49QG09YF6z9jYXNAMqalK3qsd RmVaX3GGsan+c3NfQgenTykpavT594SZYUgUKIlMoaNC3pmv/++e11Y9HVidWIV5 u5mJim+ky/9kwQClmYgSO9lVp9XGGYw8Qrap4UPWCUSojgNzRTUxkw3G3mTytkRW Kvdi/5j49Zdn7qHeDS0JMojPOT44G5iTmtn11zuGSoBp8HZOahzOY08OD2bYQeBL Y6R7ypObzobBh/heiYIxiXGts4qrvq9JrqtVRRdBRkEbSE1eKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG1DvRAUq25ae8QzRRXqIXe793rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzMGMyMzMtMTU5OC0z NzY2LWJkMjctMWMyNmUzMTc4YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrcJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvH6r10M9kuViZ09yBFALpaP5SC1Tp8DSg1vcVUyliPftjI85bqT9jm 9f6JsFgsbQBFI+SFTNv4Kqie4mN5eLqlXOigJ4J1NJurXJPHoTpiQrY/Azrob0dD e2Pqgj63o20bRD74z7cDi6Zf8ZUpen+8eYx6DeHHY7wdzzPAbeRWyk7pcHrXCAyM O2mH+JfKC58hhS5gFw6SdCgeuBMjegT4gkl/FBrmHZjSOI5tqy3PZMsbzweNXY/D k0xwoDBWqy7DJh5ry0Kk7b01uNjHhzr4skhFkyvvitqh74HCqcnj89x1bnrBeC3F 0vx2lPUfB0FHOK/6QPhOGM/n1F9i2b8= -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:37 2025 by rpki-client