$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa File: f9dff4f6-56ef-3886-ada4-55552d4c1936.roa (raw, json) Hash identifier: Xa51vrVs1Sij/mKA5m1GF80GS6pjSp136jym1UdXMi0= Subject key identifier: D0:BE:12:73:8C:50:FE:63:10:B8:92:5B:29:D5:F2:4C:34:8D:37:59 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA38CEDD8434038CA98140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:38:ce:dd:84:34:03:8c:a9:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=cb2e2e68-529c-4023-9a12-c4486ee4de76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c9:e5:da:e2:ee:d1:0c:7a:47:95:bf:eb:a2: bc:47:47:4f:5e:18:e9:08:d8:62:9a:3e:54:b0:f4: 76:51:45:35:b1:3c:38:ed:0f:ed:d4:8a:93:07:6f: 38:91:8f:60:a3:68:33:64:ac:a9:8e:c9:22:46:09: 0d:ff:54:a0:4a:47:9f:77:76:ec:82:f4:0a:92:9b: 4d:5c:32:79:a9:43:37:08:34:b7:f5:a8:17:5b:9a: 15:1a:fe:2c:9d:e1:1c:f1:15:5f:80:2f:ca:14:04: cd:5b:f9:d4:af:1d:42:1c:34:0f:de:fc:10:f3:63: d2:28:8d:a9:7d:4f:21:5b:ea:6f:f1:07:10:03:01: f7:23:c6:19:4f:d8:ab:2f:1e:d9:cf:6d:a2:fa:e0: 84:dc:e6:5f:a7:13:d0:86:43:c4:10:46:61:cf:fc: b4:a9:93:97:c8:43:cb:85:8c:26:4a:53:69:5d:30: 7e:30:d2:fa:b2:5f:b1:8a:73:16:e3:2e:91:89:73: a6:94:0f:f7:71:57:81:54:af:81:0b:00:e6:f6:75: 9d:b8:4e:c2:9f:03:52:ea:d5:43:b2:9d:dc:1c:ec: ed:9d:96:99:b5:9a:0f:2a:56:5e:cf:c8:bc:c5:36: fa:76:4b:51:39:a2:61:72:44:b7:48:be:5e:8c:df: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BE:12:73:8C:50:FE:63:10:B8:92:5B:29:D5:F2:4C:34:8D:37:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c2:2b:6a:f9:a7:5c:70:9a:fb:de:b1:b0:53:41:b4:ce:8a: 14:f2:8c:8c:a8:98:8f:50:97:a1:2c:92:ed:c5:f3:ba:61:72: cf:89:0f:62:bc:84:6d:96:a2:46:4c:89:05:7e:11:92:a5:cb: e0:c1:e4:6d:a5:c4:b1:9b:5b:57:8a:15:25:00:9f:e9:90:c0: c4:1c:14:b9:b7:17:31:36:be:a0:c1:38:6e:32:8f:19:96:d6: 22:38:e3:8a:11:e8:4e:7d:47:2b:64:54:a1:4d:6b:14:28:81: 22:15:69:2b:0d:92:11:c8:66:ad:a5:71:fd:0b:aa:35:04:02: 91:bd:5a:de:78:03:16:a3:7d:74:65:0e:14:fc:be:58:e4:0c: 70:16:d8:80:b3:fe:7e:88:a9:95:42:05:d4:a9:5a:43:78:4b: 53:c0:92:bd:3f:ed:d4:71:35:35:c2:5f:12:27:fc:e5:7c:78: 11:07:24:3a:d5:4b:86:15:1c:98:95:15:1e:d3:49:18:2a:50: c7:a9:5c:c1:a3:0d:11:fa:b8:38:21:53:a8:a5:d2:f9:88:e8: 83:37:33:78:ae:c5:4e:ea:6d:b4:2c:10:01:7f:fb:6c:c8:fb: 95:54:82:fd:2e:35:bb:cc:a2:f1:3f:54:01:02:61:df:96:73: 48:b1:97:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jjO3YQ0A4ypgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk Y2IyZTJlNjgtNTI5Yy00MDIzLTlhMTItYzQ0ODZlZTRkZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8nl2uLu0Qx6R5W/66K8R0dPXhjpCNhimj5U sPR2UUU1sTw47Q/t1IqTB284kY9go2gzZKypjskiRgkN/1SgSkefd3bsgvQKkptN XDJ5qUM3CDS39agXW5oVGv4sneEc8RVfgC/KFATNW/nUrx1CHDQP3vwQ82PSKI2p fU8hW+pv8QcQAwH3I8YZT9irLx7Zz22i+uCE3OZfpxPQhkPEEEZhz/y0qZOXyEPL hYwmSlNpXTB+MNL6sl+xinMW4y6RiXOmlA/3cVeBVK+BCwDm9nWduE7CnwNS6tVD sp3cHOztnZaZtZoPKlZez8i8xTb6dktROaJhckS3SL5ejN+7xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC+EnOMUP5jELiSWynV8kw0jTdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjlkZmY0ZjYtNTZlZi0z ODg2LWFkYTQtNTU1NTJkNGMxOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrCK2r5p1xwmvvesbBTQbTOihTyjIyomI9Ql6Esku3F87phcs+JD2K8 hG2WokZMiQV+EZKly+DB5G2lxLGbW1eKFSUAn+mQwMQcFLm3FzE2vqDBOG4yjxmW 1iI444oR6E59RytkVKFNaxQogSIVaSsNkhHIZq2lcf0LqjUEApG9Wt54AxajfXRl DhT8vljkDHAW2ICz/n6IqZVCBdSpWkN4S1PAkr0/7dRxNTXCXxIn/OV8eBEHJDrV S4YVHJiVFR7TSRgqUMepXMGjDRH6uDghU6il0vmI6IM3M3iuxU7qbbQsEAF/+2zI +5VUgv0uNbvMovE/VAECYd+Wc0ixl40= -----END CERTIFICATE-----Generated at Sun Jun 15 15:43:01 2025 by rpki-client