$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c08f2550-d467-3bdd-99e1-447b55007004.roa File: c08f2550-d467-3bdd-99e1-447b55007004.roa (raw, json) Hash identifier: SYkiGPVc0p71n6WDui/pp2tb0ktl+IZqP7sbIQ7boKw= Subject key identifier: DB:01:D9:CD:EA:C3:AF:47:D6:9A:EA:32:3B:1E:44:F0:9D:4C:38:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841181D610CDB0BBE76E0E40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c08f2550-d467-3bdd-99e1-447b55007004.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:81:d6:10:cd:b0:bb:e7:6e:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=12d59c01-f7e7-40fc-9696-34092588c2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bb:1e:47:6b:ad:b0:42:11:69:1f:6b:b9:da: 80:87:11:aa:f2:ff:d5:6b:b4:1c:1d:0a:12:26:9b: a6:1c:3e:dd:cc:9c:23:e4:6a:17:94:c2:45:86:ab: b7:2f:2a:cc:14:3d:70:d3:e5:5e:19:17:95:85:b1: e0:96:e9:36:69:77:62:8d:63:9f:be:7d:46:f4:06: 7b:4c:3b:0e:34:4c:2d:c9:28:38:87:29:90:8b:80: a3:8b:75:15:d0:6e:2d:bf:db:0d:e2:47:6b:67:58: 1a:8c:52:94:29:ac:29:fc:04:2d:b0:0c:27:c0:c1: bf:8b:a6:54:66:2c:5e:d5:72:47:09:ef:6b:d8:58: d5:c2:05:b1:8e:d8:8e:63:0b:46:c0:83:1c:f9:0f: 25:4f:5d:f0:9f:d1:51:31:01:c6:cf:a0:39:f1:64: 6e:85:e2:6d:0a:4a:cb:d4:a5:3b:dd:64:a6:bc:97: 9b:69:8c:ea:a1:a9:aa:4a:a1:cf:1b:2f:ce:80:5e: 09:da:5f:c0:dd:43:e8:da:da:22:0a:4f:65:3c:d4: 3e:8a:17:26:f2:af:70:be:3f:30:9a:95:a5:76:84: d0:9b:e7:45:c6:2c:ed:7c:14:1d:3d:47:74:b3:a9: ee:fc:68:bb:52:cd:ea:68:72:5c:ec:b6:6d:f7:ad: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:01:D9:CD:EA:C3:AF:47:D6:9A:EA:32:3B:1E:44:F0:9D:4C:38:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c08f2550-d467-3bdd-99e1-447b55007004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:a2:f0:d4:fa:a7:54:7f:ee:80:0a:27:8d:f3:6a:d2:30:15: 3d:82:bd:6a:b1:f2:10:b4:3a:12:fc:10:64:81:1d:c0:99:f7: 45:b0:a1:84:3b:55:e4:43:1f:4a:21:0b:db:6c:15:25:46:af: 9e:16:54:20:e2:f2:71:2e:57:ba:84:af:96:b9:50:6f:9f:71: 78:ab:dc:fa:e7:7b:9b:7f:52:1b:33:10:95:d8:12:d6:10:c4: 5e:49:ea:5e:36:2d:a1:de:a8:f2:99:2a:cd:84:2e:54:ec:22: 1b:7d:65:ba:00:98:9c:de:d6:e8:85:a4:4e:04:e5:5c:3a:59: 21:1b:7a:45:51:cf:e4:07:f3:8d:c6:38:22:25:21:09:4c:b7: 7a:9c:96:e8:8c:52:26:8e:88:8c:d6:14:42:2f:c3:d4:a4:d8: bb:74:20:c3:22:5c:fe:26:ee:b8:b4:11:77:4e:43:f1:5f:31: f2:fa:81:c8:12:3a:65:0f:eb:fc:b2:84:e7:3f:ae:b2:97:f8: 80:3f:c8:ac:5c:0c:74:32:b6:6a:a6:ae:cb:b8:a5:a1:a2:5b: dd:50:21:dd:31:2b:97:5d:d1:6e:1a:7a:c7:26:50:2d:ae:25: 43:7c:0d:fe:88:bc:68:dc:90:e8:e3:d3:1e:89:6c:a3:c9:d6: dd:f9:01:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYHWEM2wu+duDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTJkNTljMDEtZjdlNy00MGZjLTk2OTYtMzQwOTI1ODhjMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7seR2utsEIRaR9rudqAhxGq8v/Va7QcHQoS JpumHD7dzJwj5GoXlMJFhqu3LyrMFD1w0+VeGReVhbHgluk2aXdijWOfvn1G9AZ7 TDsONEwtySg4hymQi4Cji3UV0G4tv9sN4kdrZ1gajFKUKawp/AQtsAwnwMG/i6ZU Zixe1XJHCe9r2FjVwgWxjtiOYwtGwIMc+Q8lT13wn9FRMQHGz6A58WRuheJtCkrL 1KU73WSmvJebaYzqoamqSqHPGy/OgF4J2l/A3UPo2toiCk9lPNQ+ihcm8q9wvj8w mpWldoTQm+dFxiztfBQdPUd0s6nu/Gi7Us3qaHJc7LZt9632oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsB2c3qw69H1prqMjseRPCdTDhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzA4ZjI1NTAtZDQ2Ny0z YmRkLTk5ZTEtNDQ3YjU1MDA3MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOi8NT6p1R/7oAKJ43zatIwFT2CvWqx8hC0OhL8EGSBHcCZ90WwoYQ7 VeRDH0ohC9tsFSVGr54WVCDi8nEuV7qEr5a5UG+fcXir3Prne5t/UhszEJXYEtYQ xF5J6l42LaHeqPKZKs2ELlTsIht9ZboAmJze1uiFpE4E5Vw6WSEbekVRz+QH843G OCIlIQlMt3qcluiMUiaOiIzWFEIvw9Sk2Lt0IMMiXP4m7ri0EXdOQ/FfMfL6gcgS OmUP6/yyhOc/rrKX+IA/yKxcDHQytmqmrsu4paGiW91QId0xK5dd0W4aescmUC2u JUN8Df6IvGjckOjj0x6JbKPJ1t35Ab8= -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:17 2025 by rpki-client