$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa File: f9dff4f6-56ef-3886-ada4-55552d4c1936.roa (raw, json) Hash identifier: 51CQ4x8jJauIqd3fbcVIl3yN7ebPikkgKUiiG76qZwI= Subject key identifier: 6C:76:D5:6D:2D:97:CC:4E:92:83:BF:5A:6A:FA:D9:37:CA:7B:C7:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30FA4879F105CC2B1E6E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 173.194.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:fa:48:79:f1:05:cc:2b:1e:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=2057ab9f-8d16-4781-93fe-6e851ecf4c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:f3:11:b6:36:ff:39:dd:7a:8c:61:3f:75: b6:b5:e7:40:cb:16:8a:76:a0:e7:ca:89:59:99:a8: 46:b7:cf:bd:56:0c:40:d9:dd:de:a3:d1:72:c0:d5: cd:da:e6:9a:0d:99:37:b1:0f:32:f2:5a:37:1a:4a: 47:26:3b:36:ec:f7:ce:80:6e:5d:8a:34:cb:4c:62: a4:46:4a:2c:a0:8f:65:c4:15:79:16:8f:a1:ca:50: c0:2d:2b:f2:23:7f:e0:02:2d:f1:56:b8:cd:ad:f2: a0:b6:cf:79:28:1b:f3:28:8e:f8:a9:dd:86:12:e3: ed:b7:e4:8b:df:14:87:bf:54:3c:98:a4:2e:16:1e: b6:bc:9e:37:d9:f1:38:dd:8b:00:62:a4:a3:b6:57: eb:af:03:f5:2d:a5:17:e2:eb:06:3b:c4:3d:85:74: 18:a7:e8:2e:91:e7:28:fb:7f:51:a1:3d:ca:e5:e6: 91:56:a1:5e:77:80:49:0e:14:86:58:8b:a6:e8:5d: e2:9b:5b:9b:71:57:db:d6:b3:ad:45:b2:5c:2b:ff: 7c:c8:a8:66:53:a7:a0:bb:5d:49:08:3b:ed:63:53: 07:90:ea:74:1c:b9:12:32:fb:b4:33:11:95:b2:51: 46:d3:a0:90:66:7d:63:21:a2:64:1c:00:a7:db:56: 9f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:76:D5:6D:2D:97:CC:4E:92:83:BF:5A:6A:FA:D9:37:CA:7B:C7:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:8d:c4:c8:ae:88:14:b8:0a:ac:e1:bb:64:8b:41:a4:53:e4: de:79:a9:26:0c:3c:10:a8:44:2c:f2:a2:c7:14:ad:66:83:c8: 95:ad:a7:20:d9:d8:1c:52:72:16:94:51:15:ac:12:c8:4c:89: ba:eb:80:e3:11:43:18:94:63:e1:45:72:d7:4b:e0:6c:0b:4b: 97:d7:22:b7:b1:1c:f4:0e:82:4b:07:07:b5:43:8f:1a:9b:b0: dd:bf:a9:c6:14:cc:15:5c:35:dc:c6:0c:46:0e:ee:31:de:66: 1f:aa:e8:67:f2:27:26:2d:99:d7:d0:73:ff:ad:0e:f4:54:2a: ca:86:8a:cb:0a:55:a2:30:db:c7:e6:e6:18:d2:d3:4a:d8:41: 72:33:42:dd:55:fc:ad:32:dd:2c:de:f7:82:d4:da:26:8c:e5: 3e:38:53:9c:ba:f5:ec:52:d0:ee:7f:7a:95:a6:1e:b9:b6:6a: 7b:4b:09:22:3e:92:d7:b6:62:14:6d:12:67:26:38:c2:c6:99: a3:d0:74:6a:7f:4e:70:8a:59:1c:8b:02:45:b8:5c:1c:00:a3: 4b:c1:c8:2e:cd:a3:d9:7c:26:5b:a5:57:71:3c:26:e4:ae:ac: e9:7d:38:0b:20:32:cf:ee:3c:84:c6:93:4f:9c:f9:59:9e:32: 75:d7:47:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPpIefEFzCsebgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MjA1N2FiOWYtOGQxNi00NzgxLTkzZmUtNmU4NTFlY2Y0YzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl7zEbY2/zndeoxhP3W2tedAyxaKdqDnyolZ mahGt8+9VgxA2d3eo9FywNXN2uaaDZk3sQ8y8lo3GkpHJjs27PfOgG5dijTLTGKk RkosoI9lxBV5Fo+hylDALSvyI3/gAi3xVrjNrfKgts95KBvzKI74qd2GEuPtt+SL 3xSHv1Q8mKQuFh62vJ432fE43YsAYqSjtlfrrwP1LaUX4usGO8Q9hXQYp+gukeco +39RoT3K5eaRVqFed4BJDhSGWIum6F3im1ubcVfb1rOtRbJcK/98yKhmU6egu11J CDvtY1MHkOp0HLkSMvu0MxGVslFG06CQZn1jIaJkHACn21afWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx21W0tl8xOkoO/Wmr62TfKe8f9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjlkZmY0ZjYtNTZlZi0z ODg2LWFkYTQtNTU1NTJkNGMxOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiNxMiuiBS4Cqzhu2SLQaRT5N55qSYMPBCoRCzyoscUrWaDyJWtpyDZ 2BxSchaUURWsEshMibrrgOMRQxiUY+FFctdL4GwLS5fXIrexHPQOgksHB7VDjxqb sN2/qcYUzBVcNdzGDEYO7jHeZh+q6GfyJyYtmdfQc/+tDvRUKsqGissKVaIw28fm 5hjS00rYQXIzQt1V/K0y3Sze94LU2iaM5T44U5y69exS0O5/epWmHrm2antLCSI+ kte2YhRtEmcmOMLGmaPQdGp/TnCKWRyLAkW4XBwAo0vByC7No9l8JlulV3E8JuSu rOl9OAsgMs/uPITGk0+c+VmeMnXXR3c= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:13 2025 by rpki-client