$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa File: c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa (raw, json) Hash identifier: GjCdmAuF5NghYfz1LGbNR8u+/4hCAIFnC4/C8U+asoI= Subject key identifier: 75:B2:95:C4:A5:66:5D:9F:B7:42:99:44:BC:EB:BE:26:E6:25:8F:C1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30EEC2E39EA1DE0A2D6C40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 173.194.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:ee:c2:e3:9e:a1:de:0a:2d:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=8bd426c3-2dbc-464f-b38d-2af0ee6679fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:eb:b5:22:3f:91:e9:9a:b0:28:34:ba:38:18: 61:eb:de:d6:18:5f:fb:b8:00:44:b4:3a:7a:29:a3: 37:94:a1:a2:a5:8d:a1:9a:b3:31:44:3a:18:77:b3: 71:8f:b9:af:30:a5:f6:3f:05:67:77:73:b1:4e:c1: 9d:42:04:09:4c:7c:33:24:24:1a:6f:43:51:04:cf: 5b:91:d0:27:c2:b3:cd:f2:5c:35:d7:3e:96:58:d5: b6:25:f8:9a:c9:87:ef:3c:27:91:70:eb:ac:52:5c: cc:88:17:1d:8a:09:52:c6:2b:cf:16:d1:b5:a9:41: 18:45:4e:10:42:18:97:be:8d:81:85:d8:09:39:25: 71:c6:19:57:b0:32:80:7b:3e:4d:7e:09:e2:04:3c: 76:c1:48:6d:67:f6:e1:c5:8a:9f:d6:e0:b0:4a:ff: 90:1f:09:8e:af:4c:5f:5d:dd:fb:db:55:7e:91:04: cb:d5:aa:86:19:af:0a:e8:cd:2d:63:e9:7d:d6:15: 9c:96:04:1e:40:b3:b0:63:3a:db:cd:ce:9d:3e:92: c1:06:d4:ed:2d:95:86:27:0c:60:3d:43:b1:68:f6: 2e:c9:90:4a:2f:27:60:71:27:71:98:a1:63:0f:92: a4:27:38:d8:09:ce:fe:bf:52:e1:b1:72:cc:54:b6: e9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B2:95:C4:A5:66:5D:9F:B7:42:99:44:BC:EB:BE:26:E6:25:8F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:be:07:95:b7:ab:a6:57:f4:0d:b2:2a:56:42:b5:e0:3a:ae: 11:94:d3:42:44:f6:fe:8d:48:09:ac:15:d1:21:3a:60:76:4f: 45:97:5d:24:82:bc:37:5e:64:db:6e:ae:e8:18:3d:c0:68:f7: 05:59:7f:db:42:48:32:15:da:c2:bc:b9:08:e5:16:67:a5:03: de:20:85:c2:19:5d:26:93:6b:c4:78:af:b7:e4:ec:af:56:14: 63:a6:20:7d:ba:1f:1a:c3:69:dd:05:6b:8b:6a:a3:f6:d4:24: 42:34:94:4f:d8:2c:39:c3:95:bd:49:b0:99:4e:1a:81:ac:ed: 4d:a2:c0:74:9d:6d:59:ab:09:fa:b4:41:5c:c6:0e:05:f4:30: ae:bf:5c:14:f6:3b:64:3e:6f:98:39:ed:fa:e6:18:86:94:67: 50:60:d7:79:93:b2:2a:80:71:6a:9d:21:32:fc:ac:0f:b5:da: 6f:c8:d5:f8:ed:e0:72:dd:2b:d0:93:a9:14:23:07:60:65:0d: 72:8f:83:5b:dc:8d:46:0f:b9:78:2e:e9:17:44:1e:fc:d7:04: 37:39:f5:22:55:53:cc:b8:9b:4d:9c:e4:4f:07:e8:26:ae:7f: ea:4b:72:2d:0e:df:36:9d:81:6a:92:8a:37:10:83:79:81:0a: fd:e1:de:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMO7C456h3gotbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk OGJkNDI2YzMtMmRiYy00NjRmLWIzOGQtMmFmMGVlNjY3OWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOu1Ij+R6ZqwKDS6OBhh697WGF/7uABEtDp6 KaM3lKGipY2hmrMxRDoYd7Nxj7mvMKX2PwVnd3OxTsGdQgQJTHwzJCQab0NRBM9b kdAnwrPN8lw11z6WWNW2JfiayYfvPCeRcOusUlzMiBcdiglSxivPFtG1qUEYRU4Q QhiXvo2BhdgJOSVxxhlXsDKAez5NfgniBDx2wUhtZ/bhxYqf1uCwSv+QHwmOr0xf Xd3721V+kQTL1aqGGa8K6M0tY+l91hWclgQeQLOwYzrbzc6dPpLBBtTtLZWGJwxg PUOxaPYuyZBKLydgcSdxmKFjD5KkJzjYCc7+v1LhsXLMVLbpSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWylcSlZl2ft0KZRLzrvibmJY/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzhlMDVlOGMtMmExZi0z MGM0LWE0ZTUtY2ZjZjAxOTJiNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG+B5W3q6ZX9A2yKlZCteA6rhGU00JE9v6NSAmsFdEhOmB2T0WXXSSC vDdeZNturugYPcBo9wVZf9tCSDIV2sK8uQjlFmelA94ghcIZXSaTa8R4r7fk7K9W FGOmIH26HxrDad0Fa4tqo/bUJEI0lE/YLDnDlb1JsJlOGoGs7U2iwHSdbVmrCfq0 QVzGDgX0MK6/XBT2O2Q+b5g57frmGIaUZ1Bg13mTsiqAcWqdITL8rA+12m/I1fjt 4HLdK9CTqRQjB2BlDXKPg1vcjUYPuXgu6RdEHvzXBDc59SJVU8y4m02c5E8H6Cau f+pLci0O3zadgWqSijcQg3mBCv3h3ho= -----END CERTIFICATE-----Generated at Mon Aug 4 16:00:07 2025 by rpki-client