$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa File: 0299a712-fc10-3ade-be7c-01c58b9e9b23.roa (raw, json) Hash identifier: Tgjy7Y99QEVBaAUmxNBVfqQr+VPYwOrFgYv690LPbBs= Subject key identifier: 09:79:21:94:48:22:FB:F1:8F:4E:EF:AE:8B:9D:DB:A4:C0:CE:E9:F7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841226D4FC1D7FBECB436F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:26:d4:fc:1d:7f:be:cb:43:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=28b01541-5d00-42e1-9ec0-9bb961d2ecb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:d5:c8:b2:86:9d:ff:9e:68:30:2d:02:d4: b9:dd:cd:7c:ea:4e:05:98:19:18:b4:59:55:e6:14: c9:ea:11:a8:68:a5:81:2a:96:8c:89:65:0d:46:1d: cb:71:66:67:77:2f:d4:c8:70:4e:53:fc:e5:6d:17: 43:82:20:a7:4f:6f:99:2c:0d:f3:13:66:39:35:27: 8d:86:3a:6b:b2:f8:c1:17:5e:fa:13:40:9b:1e:4f: 74:db:16:da:71:29:24:dc:b0:d5:61:9f:29:27:ad: e1:5c:73:a0:19:4c:cc:25:0c:4f:b2:a8:81:e8:54: 9e:1e:03:14:9b:ae:eb:b6:d5:fa:37:a2:0d:bf:0e: a0:52:2e:16:16:e4:7a:1a:31:4b:03:04:0a:36:47: 40:c5:9b:19:98:5e:00:a6:46:df:56:da:fb:c9:c8: aa:62:30:03:d4:41:e4:00:70:c6:42:b4:58:69:5e: dc:4f:16:34:cf:c4:f4:49:83:06:a7:ec:83:0f:8c: 18:db:34:3b:1e:75:9e:51:bc:c4:53:5e:27:25:45: a4:0f:b3:9b:79:57:fa:74:c3:0f:3b:24:6d:8a:3e: f3:7f:63:04:36:ec:e7:ea:d5:53:07:8f:55:6c:36: 04:3c:ba:50:e6:81:27:4a:36:45:b3:cc:9f:d3:14: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:79:21:94:48:22:FB:F1:8F:4E:EF:AE:8B:9D:DB:A4:C0:CE:E9:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:33:80:2f:93:27:7f:7c:b2:a0:cb:b7:06:8e:df:00:ca:b4: 87:14:9f:f2:db:91:e1:d3:73:85:82:54:84:a0:df:ba:b2:8b: 72:cb:6e:2b:fc:3e:10:56:35:19:ef:86:f0:ad:8d:be:3a:92: d2:26:cd:61:90:cb:d7:4c:17:09:de:8f:c7:98:7a:a4:bb:c6: 7b:84:6d:93:28:55:0c:44:90:e9:f8:a6:b8:27:18:ca:ef:56: f0:6f:39:ae:79:b1:39:9a:29:1b:85:eb:d4:54:f6:a1:dc:a0: d5:7d:1d:73:d5:24:6d:b4:1b:ff:12:90:56:94:19:a7:57:98: bb:bf:2d:23:9c:94:4b:d4:90:70:eb:1b:17:5d:a3:87:26:7e: ad:f7:b3:02:f2:7a:6c:6f:d0:f8:55:97:3f:c9:df:8e:ac:f0: 7e:22:c5:9f:98:7e:ea:04:d8:d0:f4:3c:64:ed:c3:49:6f:f7: c7:51:8b:c3:17:81:e3:f8:23:0e:ec:3b:e5:29:19:17:7d:e3: cd:49:7b:62:7d:58:62:66:ef:3f:ee:9f:d7:5f:0f:a1:2f:bc: 36:34:02:fd:6e:ac:ee:92:ce:ac:bc:aa:a0:57:8c:0f:60:f5: 8a:58:d1:89:8a:8e:58:88:f8:06:8e:99:d2:7d:75:90:71:d2: 2d:18:fe:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEibU/B1/vstDb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjhiMDE1NDEtNWQwMC00MmUxLTllYzAtOWJiOTYxZDJlY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU/VyLKGnf+eaDAtAtS53c186k4FmBkYtFlV 5hTJ6hGoaKWBKpaMiWUNRh3LcWZndy/UyHBOU/zlbRdDgiCnT2+ZLA3zE2Y5NSeN hjprsvjBF176E0CbHk902xbacSkk3LDVYZ8pJ63hXHOgGUzMJQxPsqiB6FSeHgMU m67rttX6N6INvw6gUi4WFuR6GjFLAwQKNkdAxZsZmF4ApkbfVtr7yciqYjAD1EHk AHDGQrRYaV7cTxY0z8T0SYMGp+yDD4wY2zQ7HnWeUbzEU14nJUWkD7ObeVf6dMMP OyRtij7zf2MENuzn6tVTB49VbDYEPLpQ5oEnSjZFs8yf0xSFXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl5IZRIIvvxj07vroud26TAzun3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI5OWE3MTItZmMxMC0z YWRlLWJlN2MtMDFjNThiOWU5YjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0zgC+TJ398sqDLtwaO3wDKtIcUn/LbkeHTc4WCVISg37qyi3LLbiv8 PhBWNRnvhvCtjb46ktImzWGQy9dMFwnej8eYeqS7xnuEbZMoVQxEkOn4prgnGMrv VvBvOa55sTmaKRuF69RU9qHcoNV9HXPVJG20G/8SkFaUGadXmLu/LSOclEvUkHDr Gxddo4cmfq33swLyemxv0PhVlz/J346s8H4ixZ+YfuoE2ND0PGTtw0lv98dRi8MX geP4Iw7sO+UpGRd9481Je2J9WGJm7z/un9dfD6EvvDY0Av1urO6Szqy8qqBXjA9g 9YpY0YmKjliI+AaOmdJ9dZBx0i0Y/k4= -----END CERTIFICATE-----Generated at Mon Aug 4 22:13:43 2025 by rpki-client