$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01b287ca-315e-3ef2-a32d-d6dc727966c2.roa File: 01b287ca-315e-3ef2-a32d-d6dc727966c2.roa (raw, json) Hash identifier: WoGeBBvsht8Q31TkFi8ZZorhXSfFT+TkHQ9BcdhzO5Y= Subject key identifier: 75:02:25:30:DE:9A:E4:40:DC:66:B1:EC:F3:56:A4:54:CB:68:45:E9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411726C2258D75221ABFC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01b287ca-315e-3ef2-a32d-d6dc727966c2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 209.85.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:72:6c:22:58:d7:52:21:ab:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bfb65ab0-7551-46af-b207-a612dc7050ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:a2:cf:c9:65:97:fc:e2:a7:27:6b:ce:fe: f1:6b:5e:b2:c1:2a:1b:f8:aa:8f:32:2e:be:6e:29: 5b:98:00:19:14:43:a1:09:7f:3f:24:85:33:62:38: b4:58:3a:74:51:e0:8d:4d:c0:b9:60:6d:15:93:ef: 5d:c2:1f:a1:f1:8b:a0:a3:ff:54:a6:3f:27:a3:46: 07:ba:6d:63:88:13:8c:82:b1:dd:f5:ee:85:55:33: 1b:47:e7:66:ee:e8:bd:e2:f2:42:ed:0d:57:e0:24: 2c:46:5c:14:c4:1e:e7:9e:d2:71:82:bc:44:fa:6e: 2e:18:e5:c5:05:45:91:ff:ca:e2:b5:25:9a:80:71: 1d:ce:c7:4c:39:9c:01:d2:97:c3:16:34:10:c4:c1: 38:ae:e3:a0:c6:81:e4:1b:5f:63:63:38:9b:ec:b1: dc:96:34:c1:f9:29:aa:7a:52:a9:de:23:1b:ae:1b: f0:20:bb:90:19:7a:59:f8:0a:c7:e3:b6:4c:7d:4c: 5d:02:d6:46:4b:6e:8c:01:04:94:6e:86:a6:c0:ca: a4:34:3a:4a:98:c3:3c:47:3f:ce:dd:94:06:13:9b: 02:d2:c2:48:bb:84:33:36:c7:dd:19:0c:78:c1:a4: bd:27:1c:23:94:6f:16:01:da:0f:2d:0c:89:f3:d2: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:02:25:30:DE:9A:E4:40:DC:66:B1:EC:F3:56:A4:54:CB:68:45:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01b287ca-315e-3ef2-a32d-d6dc727966c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ce:8d:ec:f0:2f:fe:16:d8:41:d3:7e:24:b1:f6:c4:86:6a: a7:88:b5:ed:a0:cf:fe:9d:00:14:dc:2f:78:2d:74:5f:3a:93: 86:25:2f:6b:f7:96:7c:cd:55:1f:7d:f5:4e:be:43:07:46:93: 58:7f:c6:75:45:2e:0c:9a:72:f3:d7:95:12:2a:5e:69:0c:51: 00:ba:d2:aa:9e:17:b2:05:00:e5:14:9c:b4:e5:ba:dd:24:1c: b1:ef:03:06:49:b5:53:19:6b:e2:e5:a9:fa:64:47:c7:ca:af: 37:03:4c:b0:31:74:04:77:9c:6d:ad:4c:bb:e6:31:10:5e:18: cd:31:0f:4c:92:7e:be:0f:1b:08:23:4b:49:13:5a:9e:2c:11: 87:5e:fb:fb:c6:ca:c7:93:65:88:59:b5:0f:d4:60:8a:7e:25: 21:e4:1b:38:0e:8e:26:f0:31:75:75:3a:b7:76:02:4c:f4:e1: 40:6a:53:44:e7:80:79:22:a2:3a:75:84:03:52:35:54:13:1c: 7c:24:75:ee:8f:f4:de:ac:46:69:34:37:90:31:b9:fd:0f:de: 78:a1:4c:d4:c6:11:de:82:1a:58:34:39:8a:53:e6:43:49:5c: d8:db:a8:cb:b6:2f:3a:9b:a3:07:cc:5e:a6:1e:28:46:60:ce: bc:89:17:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXJsIljXUiGr/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmZiNjVhYjAtNzU1MS00NmFmLWIyMDctYTYxMmRjNzA1MGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCeiz8lll/zipydrzv7xa16ywSob+KqPMi6+ bilbmAAZFEOhCX8/JIUzYji0WDp0UeCNTcC5YG0Vk+9dwh+h8Yugo/9Upj8no0YH um1jiBOMgrHd9e6FVTMbR+dm7ui94vJC7Q1X4CQsRlwUxB7nntJxgrxE+m4uGOXF BUWR/8ritSWagHEdzsdMOZwB0pfDFjQQxME4ruOgxoHkG19jYzib7LHcljTB+Smq elKp3iMbrhvwILuQGXpZ+ArH47ZMfUxdAtZGS26MAQSUboamwMqkNDpKmMM8Rz/O 3ZQGE5sC0sJIu4QzNsfdGQx4waS9JxwjlG8WAdoPLQyJ89LvHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUCJTDemuRA3Gax7PNWpFTLaEXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFiMjg3Y2EtMzE1ZS0z ZWYyLWEzMmQtZDZkYzcyNzk2NmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfOjezwL/4W2EHTfiSx9sSGaqeIte2gz/6dABTcL3gtdF86k4YlL2v3 lnzNVR999U6+QwdGk1h/xnVFLgyacvPXlRIqXmkMUQC60qqeF7IFAOUUnLTlut0k HLHvAwZJtVMZa+LlqfpkR8fKrzcDTLAxdAR3nG2tTLvmMRBeGM0xD0ySfr4PGwgj S0kTWp4sEYde+/vGyseTZYhZtQ/UYIp+JSHkGzgOjibwMXV1Ord2Akz04UBqU0Tn gHkiojp1hANSNVQTHHwkde6P9N6sRmk0N5Axuf0P3nihTNTGEd6CGlg0OYpT5kNJ XNjbqMu2LzqbowfMXqYeKEZgzryJF5c= -----END CERTIFICATE-----Generated at Mon Aug 4 19:11:11 2025 by rpki-client