$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa File: d5e70c7e-2fb9-323c-a160-17182970c9ca.roa (raw, json) Hash identifier: PkEb5Uxzl9pxam3k83ccBlkEEi8TlLT11p4nKurlX38= Subject key identifier: A7:74:3C:0C:49:8C:78:4E:4B:94:55:35:A0:AA:CA:29:4B:C7:87:95 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118667EEECA1927200BA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 173.194.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:86:67:ee:ec:a1:92:72:00:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a0606753-c91a-4d7b-8524-302bd1fd43d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bb:9d:74:44:71:9c:53:49:37:a2:00:b0:94: cb:b3:ee:8a:88:17:11:7f:c9:7c:42:45:29:9e:11: c2:f7:cc:c4:eb:52:c4:76:9f:40:18:a1:54:29:6d: c2:8a:1f:a3:1c:7c:1f:ea:82:1b:d3:57:18:ba:c8: 43:ac:c2:37:e8:ed:a8:3d:07:03:62:48:c5:ed:66: 1a:11:be:a2:4e:31:40:b5:a7:00:c1:6d:e6:80:41: e6:58:02:eb:19:18:65:a3:f8:cf:7c:a3:26:7d:05: 0a:2b:07:76:e8:59:a6:6f:cf:0e:6a:0e:82:80:5e: 4f:07:ef:63:f3:5a:1b:96:23:fb:02:11:fb:76:9e: c6:db:64:7d:fe:34:03:2d:e8:9a:2e:1a:7e:e0:f4: 0a:4f:7b:9c:34:94:86:22:44:7d:13:9d:8a:9d:7d: 83:5e:c1:47:3d:b4:75:5a:9d:63:c6:04:0f:22:8b: 5d:77:50:87:3f:c3:d6:93:4c:7a:56:04:65:8e:fc: 60:df:5c:d9:26:ee:ef:45:db:86:5c:ea:0e:94:53: e0:a9:f4:c8:71:a6:9a:56:49:72:9c:6f:9d:29:c3: 10:19:a6:b0:a4:07:f8:87:50:83:ab:52:5b:46:b5: 0a:55:6d:8b:f6:aa:cd:d4:47:9a:c9:be:06:39:3c: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:74:3C:0C:49:8C:78:4E:4B:94:55:35:A0:AA:CA:29:4B:C7:87:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:c8:40:b9:86:f5:8f:b4:29:0e:57:61:f5:6b:f9:0a:fd:eb: b7:5d:86:d2:91:02:e8:dc:09:ea:f2:5b:3c:4f:56:d9:f3:8a: ea:d2:37:13:10:a4:9a:c3:b8:38:ce:2a:5d:03:8d:d4:22:ee: f6:f1:9e:0f:54:fe:cc:76:93:cc:40:f7:15:1b:61:de:73:9a: 82:38:18:81:74:55:f7:0e:03:c2:92:df:a8:06:0b:f0:de:d3: 5d:36:16:c8:63:cf:38:82:64:c9:57:2f:67:1a:50:8c:a7:32: 4f:33:bf:4a:01:71:bd:57:77:b4:ca:bd:01:77:8c:7a:8f:ba: 95:1d:35:33:91:e4:93:3c:4d:9f:f5:73:4c:b3:22:3f:36:72: b5:42:a4:a2:7e:27:37:4b:f6:ab:9a:dd:d4:39:61:cd:1a:33: ca:ef:ad:eb:80:90:73:e3:f1:b7:82:71:fc:4d:7b:a8:80:f5: 92:03:5c:42:a5:7e:43:3e:38:64:83:32:10:62:2d:58:51:6b: 95:66:42:7b:55:b6:68:5f:59:5e:1c:16:b4:61:b1:54:d3:99: e0:13:b6:17:c2:cb:65:83:52:2d:cf:61:bc:f9:95:5c:c2:77: 1d:36:76:b8:49:d3:ae:11:d0:2d:a5:a9:9f:e8:29:ce:5b:a3: 0c:28:5d:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYZn7uyhknIAuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTA2MDY3NTMtYzkxYS00ZDdiLTg1MjQtMzAyYmQxZmQ0M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7uddERxnFNJN6IAsJTLs+6KiBcRf8l8QkUp nhHC98zE61LEdp9AGKFUKW3Cih+jHHwf6oIb01cYushDrMI36O2oPQcDYkjF7WYa Eb6iTjFAtacAwW3mgEHmWALrGRhlo/jPfKMmfQUKKwd26Fmmb88Oag6CgF5PB+9j 81obliP7AhH7dp7G22R9/jQDLeiaLhp+4PQKT3ucNJSGIkR9E52KnX2DXsFHPbR1 Wp1jxgQPIotdd1CHP8PWk0x6VgRljvxg31zZJu7vRduGXOoOlFPgqfTIcaaaVkly nG+dKcMQGaawpAf4h1CDq1JbRrUKVW2L9qrN1Eeayb4GOTwzBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd0PAxJjHhOS5RVNaCqyilLx4eVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDVlNzBjN2UtMmZiOS0z MjNjLWExNjAtMTcxODI5NzBjOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfIQLmG9Y+0KQ5XYfVr+Qr967ddhtKRAujcCeryWzxPVtnziurSNxMQ pJrDuDjOKl0DjdQi7vbxng9U/sx2k8xA9xUbYd5zmoI4GIF0VfcOA8KS36gGC/De 0102FshjzziCZMlXL2caUIynMk8zv0oBcb1Xd7TKvQF3jHqPupUdNTOR5JM8TZ/1 c0yzIj82crVCpKJ+JzdL9qua3dQ5Yc0aM8rvreuAkHPj8beCcfxNe6iA9ZIDXEKl fkM+OGSDMhBiLVhRa5VmQntVtmhfWV4cFrRhsVTTmeATthfCy2WDUi3PYbz5lVzC dx02drhJ064R0C2lqZ/oKc5bowwoXSg= -----END CERTIFICATE-----Generated at Mon Aug 4 22:21:44 2025 by rpki-client