$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa File: ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa (raw, json) Hash identifier: X4boR//K/KvTMWzg4R55T4RKPvia69V38VG68C/9od4= Subject key identifier: 77:D2:13:49:94:90:F7:B3:14:07:DE:A9:01:AE:CB:19:9D:77:8E:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122B5B6B90BE40F5B61C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2b:5b:6b:90:be:40:f5:b6:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1ceb2fc1-8de3-44cc-8203-3e6986a08c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:d6:7f:cd:39:ce:2d:43:60:a6:41:5b:86: 36:42:02:d6:9f:fc:8d:35:59:ef:9a:08:cf:78:47: fe:51:83:c9:ae:ac:26:a5:5c:44:dd:84:fa:56:39: 94:76:5b:30:43:f5:a9:79:01:81:42:b1:3c:17:b2: eb:cc:f0:14:2b:bd:cf:3d:5f:31:a1:68:83:97:bd: e4:29:df:18:27:4b:7c:c1:bf:62:b5:24:20:24:8c: af:0a:99:a0:85:2f:7b:90:46:e6:15:e2:b5:9d:5a: ee:e3:9b:91:af:52:8f:0d:3e:98:1a:92:65:70:e8: 80:61:e8:07:49:49:ec:5c:9f:2b:04:9c:1a:b4:95: 02:8a:b0:9c:57:c2:29:22:37:5c:61:6b:87:4a:9b: f4:5d:97:5f:18:14:55:cc:c0:db:70:2c:54:e6:15: 43:9e:da:32:6f:32:7f:e1:7b:20:04:ed:ac:bf:fd: 07:82:08:03:ec:d4:b5:85:48:80:7a:a9:1c:e1:78: 1f:67:8a:e4:97:31:32:6d:d5:45:8a:0b:cc:78:f3: 8e:d2:7f:37:1c:5e:76:e3:c5:d4:75:16:f1:c5:82: b9:d7:48:9b:47:f4:d7:a0:6f:68:a1:b9:d4:df:3c: ff:f6:e3:01:51:49:e7:e1:ba:a8:a9:4c:9d:31:b0: a9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D2:13:49:94:90:F7:B3:14:07:DE:A9:01:AE:CB:19:9D:77:8E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:51:4f:81:fb:39:af:b6:69:8a:1d:77:c1:9f:96:a5:1d:14: 0e:2f:ac:ae:a9:d8:6e:c4:de:5f:0f:dd:32:5b:57:e4:6c:f1: ed:7f:24:1a:ff:91:97:d2:6b:b0:df:9e:8b:3d:ef:d4:62:a4: 9c:91:45:2e:3d:f4:09:bc:8f:3f:a1:da:61:fb:07:70:14:55: f4:4a:c5:e9:63:6a:39:e2:dd:87:3e:d9:2b:8f:31:d4:75:e8: c8:3d:1a:b9:8f:90:3b:94:aa:4a:a9:e6:75:a7:19:63:20:32: a4:9c:e6:3f:18:be:dc:23:81:ff:21:41:25:da:39:c7:05:97: e0:75:b5:06:65:3b:76:8d:58:a7:12:98:2e:05:01:87:79:b4: 6d:b8:48:10:01:5f:e2:c1:02:a0:02:eb:9a:69:d7:3f:7d:ae: 45:c5:83:f4:c0:5d:b5:8b:82:e2:bb:57:8a:a3:d2:5e:de:eb: 2b:61:9f:6c:6a:b0:81:07:b9:35:0c:85:f2:5e:a4:e3:e2:39: c2:fb:26:10:9e:5f:4d:69:ee:7d:c8:60:f6:e1:0c:2e:86:6b: 6c:b3:aa:ee:de:62:e6:1f:77:2f:41:ca:8a:5c:34:08:d1:84: c1:9a:45:81:f4:5d:84:42:00:b5:75:7a:f3:f1:b8:63:e4:16: df:b8:27:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEitba5C+QPW2HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWNlYjJmYzEtOGRlMy00NGNjLTgyMDMtM2U2OTg2YTA4YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvfWf805zi1DYKZBW4Y2QgLWn/yNNVnvmgjP eEf+UYPJrqwmpVxE3YT6VjmUdlswQ/WpeQGBQrE8F7LrzPAUK73PPV8xoWiDl73k Kd8YJ0t8wb9itSQgJIyvCpmghS97kEbmFeK1nVru45uRr1KPDT6YGpJlcOiAYegH SUnsXJ8rBJwatJUCirCcV8IpIjdcYWuHSpv0XZdfGBRVzMDbcCxU5hVDntoybzJ/ 4XsgBO2sv/0HgggD7NS1hUiAeqkc4XgfZ4rklzEybdVFigvMePOO0n83HF5248XU dRbxxYK510ibR/TXoG9oobnU3zz/9uMBUUnn4bqoqUydMbCpQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfSE0mUkPezFAfeqQGuyxmdd46pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWUxYjQ1M2MtOGJjZi0z Y2IzLTgwMjYtOTM1ZmI2MmU5M2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhRT4H7Oa+2aYodd8GflqUdFA4vrK6p2G7E3l8P3TJbV+Rs8e1/JBr/ kZfSa7Dfnos979RipJyRRS499Am8jz+h2mH7B3AUVfRKxeljajni3Yc+2SuPMdR1 6Mg9GrmPkDuUqkqp5nWnGWMgMqSc5j8Yvtwjgf8hQSXaOccFl+B1tQZlO3aNWKcS mC4FAYd5tG24SBABX+LBAqAC65pp1z99rkXFg/TAXbWLguK7V4qj0l7e6ythn2xq sIEHuTUMhfJepOPiOcL7JhCeX01p7n3IYPbhDC6Ga2yzqu7eYuYfdy9ByopcNAjR hMGaRYH0XYRCALV1evPxuGPkFt+4J/0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:06 2025 by rpki-client