$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a94c948a-bcd5-38f5-9c55-4e99a0d5f7c6.roa File: a94c948a-bcd5-38f5-9c55-4e99a0d5f7c6.roa (raw, json) Hash identifier: 8GRAiyxGuPzzDwrXyJUI8G/4Asgz2cC0VpbTWO36L3M= Subject key identifier: D6:31:FE:81:14:C7:B3:DD:1E:28:D9:76:97:BF:A9:8E:6A:65:E2:63 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122237BC1053D28DB0A380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a94c948a-bcd5-38f5-9c55-4e99a0d5f7c6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:22:37:bc:10:53:d2:8d:b0:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2c898eb2-630b-4f84-9fb3-867e359ffaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1e:4b:db:a0:32:39:b0:61:39:d7:23:70:a3: bc:3b:19:e9:8c:c5:b1:1a:3d:17:b1:bb:93:e9:e6: 8d:ef:6a:50:25:32:13:52:e2:0a:45:5b:a0:db:b1: 3d:a4:59:cc:b9:11:0e:d6:8f:4f:1e:90:24:3b:91: aa:8a:6d:99:26:75:94:73:07:16:43:3b:8a:fd:1e: 30:20:82:66:32:05:0d:00:f4:9c:b2:eb:2b:76:f8: 2f:a0:aa:2e:90:92:74:bc:67:4e:79:fe:42:30:31: 1c:75:bf:82:5e:c0:de:8f:88:56:1f:2b:1c:4d:33: f7:38:29:e9:f4:d5:cc:42:29:3a:ae:db:9f:1f:f3: e7:41:a2:04:a6:22:62:87:64:0c:72:1c:83:21:2f: 30:3a:b2:a9:97:94:73:11:16:33:15:cb:20:af:c3: 80:d9:de:58:42:13:b3:4d:f3:43:e3:bf:5b:ce:d8: af:af:58:36:23:97:6f:eb:94:9b:02:9b:c9:04:a5: c2:41:23:ff:79:d5:77:f7:b9:0e:19:40:b8:37:39: 5a:cd:12:3a:82:77:2a:bd:0d:b8:5e:f7:95:a9:12: b2:07:1f:ea:a2:11:41:ef:44:e3:df:33:d3:b8:b1: 3b:91:0f:26:b0:75:5d:6d:c7:92:39:bb:62:be:f1: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:31:FE:81:14:C7:B3:DD:1E:28:D9:76:97:BF:A9:8E:6A:65:E2:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a94c948a-bcd5-38f5-9c55-4e99a0d5f7c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:e6:47:3f:45:c3:2a:95:f2:28:b3:26:70:c2:24:af:26:0f: 1a:20:df:36:3e:02:42:a9:34:a4:16:61:e3:88:1e:83:be:85: 97:2d:ff:d8:d5:c1:1e:96:dd:29:8e:8d:3e:0c:51:00:15:f4: 55:d1:92:65:40:71:90:9f:91:f7:dc:4f:c3:c4:58:d9:f3:f5: 34:cd:7a:cf:01:62:c5:28:56:f2:91:a7:eb:b5:cf:92:68:0b: 2d:e3:66:33:3c:70:d7:01:8d:fb:2c:5b:bb:c9:4a:b5:11:ea: 35:9e:9e:6f:fd:4c:ed:94:0a:53:a1:0d:ca:e0:b1:36:be:51: 03:47:93:42:cd:3e:6c:03:90:d6:72:3d:0e:a6:53:0c:cd:a8: 3b:e4:f9:3e:ea:58:80:3d:7e:0a:f9:a1:4a:29:22:a3:9d:e5: 48:f0:b7:ee:f6:a6:8f:b1:26:3f:2f:e4:aa:5d:df:a5:69:dc: 72:e2:36:9d:f1:6c:d1:5b:af:b9:16:3f:a3:05:dd:4f:a4:21: 60:78:a5:ea:c0:5b:92:59:88:1c:fa:f7:3e:9c:c9:aa:98:28: d8:6d:46:ca:a1:60:92:7c:4f:50:f6:26:93:9a:0a:5a:12:94: 90:07:92:57:22:df:92:bd:24:e0:d3:72:ba:c2:1c:58:69:5d: e3:88:4e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiI3vBBT0o2wo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmM4OThlYjItNjMwYi00Zjg0LTlmYjMtODY3ZTM1OWZmYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h5L26AyObBhOdcjcKO8OxnpjMWxGj0XsbuT 6eaN72pQJTITUuIKRVug27E9pFnMuREO1o9PHpAkO5Gqim2ZJnWUcwcWQzuK/R4w IIJmMgUNAPScsusrdvgvoKoukJJ0vGdOef5CMDEcdb+CXsDej4hWHyscTTP3OCnp 9NXMQik6rtufH/PnQaIEpiJih2QMchyDIS8wOrKpl5RzERYzFcsgr8OA2d5YQhOz TfND479bztivr1g2I5dv65SbApvJBKXCQSP/edV397kOGUC4NzlazRI6gncqvQ24 XveVqRKyBx/qohFB70Tj3zPTuLE7kQ8msHVdbceSObtivvHAiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYx/oEUx7PdHijZdpe/qY5qZeJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTk0Yzk0OGEtYmNkNS0z OGY1LTljNTUtNGU5OWEwZDVmN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLmRz9FwyqV8iizJnDCJK8mDxog3zY+AkKpNKQWYeOIHoO+hZct/9jV wR6W3SmOjT4MUQAV9FXRkmVAcZCfkffcT8PEWNnz9TTNes8BYsUoVvKRp+u1z5Jo Cy3jZjM8cNcBjfssW7vJSrUR6jWenm/9TO2UClOhDcrgsTa+UQNHk0LNPmwDkNZy PQ6mUwzNqDvk+T7qWIA9fgr5oUopIqOd5Ujwt+72po+xJj8v5Kpd36Vp3HLiNp3x bNFbr7kWP6MF3U+kIWB4perAW5JZiBz69z6cyaqYKNhtRsqhYJJ8T1D2JpOaCloS lJAHklci35K9JODTcrrCHFhpXeOITi8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:17:28 2025 by rpki-client