$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa File: 00c8ed4f-37f4-323f-8afb-55168be0c0df.roa (raw, json) Hash identifier: Jax9RPQ9gYE0wzZpCrwR1coG8rVHD5uOlp4flFcAg1o= Subject key identifier: 05:F0:C2:7A:5E:D7:15:8E:4D:C0:27:FA:22:A5:43:D4:02:CF:AC:84 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841190B062D47F0BD13DA600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:90:b0:62:d4:7f:0b:d1:3d:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=99ad34af-a36e-4e3c-9fe7-4f9d0d99918c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:a8:be:dd:b3:4e:1b:3e:3c:64:4e:83:67: e2:0e:09:ef:3b:ea:44:6d:4b:0c:b1:54:45:65:94: 2f:2d:f3:0f:fe:06:9c:ca:28:45:f1:e1:1f:9a:d0: fc:b5:7d:91:7c:0b:22:c4:6b:67:6b:1f:9b:18:32: 8c:8a:5d:72:e9:ed:73:f6:a3:81:fa:b6:3c:9d:24: 61:37:b7:d2:c2:44:d6:2f:7f:9b:bf:dc:f3:67:d5: 92:2d:04:29:f3:27:e5:6e:16:74:97:ff:89:d2:77: 65:14:71:e4:7a:65:c8:ea:02:3d:66:8c:08:fd:81: aa:a5:ef:f0:e8:34:45:a2:e4:58:15:ba:84:cb:1a: b1:23:d8:57:f7:58:44:d9:d9:89:f5:96:c0:65:91: 0a:e6:33:a3:63:96:69:3d:50:90:8f:dd:39:7b:1b: b8:d0:2c:43:40:c9:a0:22:50:b3:7f:41:4f:fc:97: 9b:65:2d:91:ae:69:4f:c3:6a:c1:49:b7:48:1d:39: 5b:0a:b9:31:78:5b:cc:18:41:ff:a5:3d:14:73:99: a1:22:c4:c7:ed:41:13:42:06:d9:18:ec:1b:75:54: 58:c2:98:85:02:bb:28:5d:ae:16:b0:8e:4a:0e:a8: 48:78:23:5b:46:3b:99:08:71:4f:e8:45:c1:23:f9: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F0:C2:7A:5E:D7:15:8E:4D:C0:27:FA:22:A5:43:D4:02:CF:AC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:83:93:0a:ee:90:aa:1f:af:e5:33:fe:5e:d4:5d:b3:2d:45: 31:97:1d:fa:13:11:cf:f6:15:25:a0:f1:01:23:ab:a9:ee:e5: 5a:60:bb:b1:8c:19:d9:c7:31:9c:30:1e:6f:04:15:d6:c2:f1: 97:c7:e8:5c:0e:7e:35:07:c5:87:ca:de:8d:7d:42:58:86:ff: 9a:59:00:d1:6c:06:69:2e:23:4b:a5:0b:a0:99:04:ae:37:77: 25:f2:9f:c8:9b:ab:6b:d7:6f:28:e2:09:9b:08:3d:cb:d1:6b: 68:d5:8b:97:06:69:76:b4:4f:62:31:7a:0f:4c:a7:f9:60:36: 64:65:36:f0:54:4f:5a:da:9e:2e:ce:d1:f6:be:08:df:8d:6e: 25:00:d5:f9:6f:1e:2a:a7:c6:cf:1b:eb:62:80:f9:e7:2f:09: b7:11:1d:6a:43:aa:41:f4:23:ae:79:8f:f7:1d:81:50:8a:c0: 50:a8:e9:8f:eb:0c:ed:d6:46:dd:53:4d:55:79:e2:ff:7a:4f: d9:70:30:5d:34:34:63:bd:b9:b0:9c:c8:12:f0:99:d3:d6:63: f8:37:69:86:45:d5:78:a4:bd:28:f5:04:7f:9b:04:ff:cd:53: 51:e5:73:94:15:63:ed:8b:82:1b:43:51:15:fb:6f:7f:14:3e: be:70:73:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZCwYtR/C9E9pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTlhZDM0YWYtYTM2ZS00ZTNjLTlmZTctNGY5ZDBkOTk5MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQmovt2zThs+PGROg2fiDgnvO+pEbUsMsVRF ZZQvLfMP/gacyihF8eEfmtD8tX2RfAsixGtnax+bGDKMil1y6e1z9qOB+rY8nSRh N7fSwkTWL3+bv9zzZ9WSLQQp8yflbhZ0l/+J0ndlFHHkemXI6gI9ZowI/YGqpe/w 6DRFouRYFbqEyxqxI9hX91hE2dmJ9ZbAZZEK5jOjY5ZpPVCQj905exu40CxDQMmg IlCzf0FP/JebZS2RrmlPw2rBSbdIHTlbCrkxeFvMGEH/pT0Uc5mhIsTH7UETQgbZ GOwbdVRYwpiFArsoXa4WsI5KDqhIeCNbRjuZCHFP6EXBI/lVxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXwwnpe1xWOTcAn+iKlQ9QCz6yEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDBjOGVkNGYtMzdmNC0z MjNmLThhZmItNTUxNjhiZTBjMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImDkwrukKofr+Uz/l7UXbMtRTGXHfoTEc/2FSWg8QEjq6nu5Vpgu7GM GdnHMZwwHm8EFdbC8ZfH6FwOfjUHxYfK3o19QliG/5pZANFsBmkuI0ulC6CZBK43 dyXyn8ibq2vXbyjiCZsIPcvRa2jVi5cGaXa0T2Ixeg9Mp/lgNmRlNvBUT1rani7O 0fa+CN+NbiUA1flvHiqnxs8b62KA+ecvCbcRHWpDqkH0I655j/cdgVCKwFCo6Y/r DO3WRt1TTVV54v96T9lwMF00NGO9ubCcyBLwmdPWY/g3aYZF1XikvSj1BH+bBP/N U1Hlc5QVY+2LghtDURX7b38UPr5wc6k= -----END CERTIFICATE-----Generated at Mon Aug 4 15:03:14 2025 by rpki-client