$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a73698e7-143c-3f7a-bcab-8eb773cdd637.roa File: a73698e7-143c-3f7a-bcab-8eb773cdd637.roa (raw, json) Hash identifier: kiyvJY+FuBH76b3Gu0QUzQyhIoyMtEb9HMz96cW1ueY= Subject key identifier: 7C:E0:B1:D5:30:CC:C1:BD:41:8D:36:B2:59:60:A4:38:37:D6:13:63 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE2AEB8B55E87AF2C35700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a73698e7-143c-3f7a-bcab-8eb773cdd637.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 173.194.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2a:eb:8b:55:e8:7a:f2:c3:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ecce5534-e28e-4124-ba92-4df29426a0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:98:4b:7f:11:2b:67:19:fa:67:21:56:a5: e2:88:5e:15:e5:b7:45:20:5b:19:59:23:ee:cf:0f: fa:a5:1e:af:c7:43:25:33:03:c8:82:71:63:17:21: 70:05:23:15:ed:8b:d9:ab:bf:22:3c:48:48:6d:e9: c8:de:43:5e:7a:d0:7c:a3:cb:d7:2d:fb:4e:b5:de: 4d:2b:ea:3f:e3:7e:f0:ca:27:b2:37:1c:33:42:42: 07:4a:6f:72:3e:40:6c:af:42:db:d0:62:0a:d1:e7: 3a:e1:ce:69:01:bb:d9:9f:9f:7d:63:16:5f:9a:14: 17:30:37:c4:83:70:45:ff:e7:3e:6a:4c:ae:d4:0a: 4a:fc:37:3f:43:ea:ce:2e:50:b9:4a:fc:a2:1a:e3: ed:9b:ee:f0:41:2e:ef:3b:7a:45:9c:49:8f:f3:4a: 80:b8:ef:62:84:7f:49:dd:8a:b4:e7:a6:2b:4d:a8: e7:09:80:7d:36:48:cd:4b:8a:b6:28:14:48:40:38: e0:51:ca:27:93:a5:ca:44:5c:47:e6:80:40:21:9b: 71:6f:78:43:f9:da:72:fd:a9:65:7b:b7:70:92:44: dd:a7:69:96:4b:7a:39:4c:70:8e:8c:6b:73:0b:4c: c6:de:4a:dd:c4:d2:e7:66:c8:55:9d:d4:91:ba:5f: 6a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E0:B1:D5:30:CC:C1:BD:41:8D:36:B2:59:60:A4:38:37:D6:13:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a73698e7-143c-3f7a-bcab-8eb773cdd637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d5:ee:8f:2d:d9:66:88:25:61:87:c9:b0:a1:6c:42:87:98: ba:4b:ef:8e:bf:c7:5d:ac:92:34:58:ee:cb:a9:75:75:a7:e3: 9b:bd:12:8e:d7:9c:e5:92:73:e7:9b:76:ba:b3:db:7a:f0:2e: c8:4c:a6:ff:af:cc:9c:d0:8c:6c:c0:23:a9:36:1e:cb:25:43: 79:9e:41:79:49:9b:1c:41:17:eb:bb:97:b8:97:18:70:48:85: 93:57:41:74:a4:55:d4:35:d2:ee:eb:1a:17:29:79:22:71:bc: 43:66:d7:87:fd:2d:c7:30:b3:10:a8:9b:9a:aa:19:72:af:87: c9:02:4a:aa:9d:d5:0b:67:d0:37:27:0c:c0:75:ce:b1:21:5d: cf:ae:b4:52:b8:d1:2c:e0:e9:de:5f:6b:d2:7e:97:f5:70:b0: 87:b8:f6:bb:db:d9:8b:7c:81:b8:0e:63:0d:5a:31:bb:67:dd: 02:90:4f:44:bb:3b:de:b7:63:57:1e:27:31:5c:4c:d8:ba:4c: eb:03:aa:cd:f6:5d:2e:43:73:38:e9:a0:ad:e5:41:2c:83:2b: 68:f9:16:b0:c8:73:93:10:c5:40:10:ef:81:33:cf:b1:36:6b: 87:5d:1e:4b:2a:0d:03:cb:d2:ae:0a:59:b2:dc:9e:3b:b3:14: c0:39:f7:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzirri1XoevLDVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWNjZTU1MzQtZTI4ZS00MTI0LWJhOTItNGRmMjk0MjZhMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ2YS38RK2cZ+mchVqXiiF4V5bdFIFsZWSPu zw/6pR6vx0MlMwPIgnFjFyFwBSMV7YvZq78iPEhIbenI3kNeetB8o8vXLftOtd5N K+o/437wyieyNxwzQkIHSm9yPkBsr0Lb0GIK0ec64c5pAbvZn599YxZfmhQXMDfE g3BF/+c+akyu1ApK/Dc/Q+rOLlC5SvyiGuPtm+7wQS7vO3pFnEmP80qAuO9ihH9J 3Yq056YrTajnCYB9NkjNS4q2KBRIQDjgUconk6XKRFxH5oBAIZtxb3hD+dpy/all e7dwkkTdp2mWS3o5THCOjGtzC0zG3krdxNLnZshVndSRul9qZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzgsdUwzMG9QY02sllgpDg31hNjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTczNjk4ZTctMTQzYy0z ZjdhLWJjYWItOGViNzczY2RkNjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLV7o8t2WaIJWGHybChbEKHmLpL746/x12skjRY7supdXWn45u9Eo7X nOWSc+ebdrqz23rwLshMpv+vzJzQjGzAI6k2HsslQ3meQXlJmxxBF+u7l7iXGHBI hZNXQXSkVdQ10u7rGhcpeSJxvENm14f9LccwsxCom5qqGXKvh8kCSqqd1Qtn0Dcn DMB1zrEhXc+utFK40Szg6d5fa9J+l/VwsIe49rvb2Yt8gbgOYw1aMbtn3QKQT0S7 O963Y1ceJzFcTNi6TOsDqs32XS5DczjpoK3lQSyDK2j5FrDIc5MQxUAQ74Ezz7E2 a4ddHksqDQPL0q4KWbLcnjuzFMA590A= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:32 2025 by rpki-client