$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06f81788-7bad-32bc-b7c2-e0bbdd35e0a0.roa File: 06f81788-7bad-32bc-b7c2-e0bbdd35e0a0.roa (raw, json) Hash identifier: z/zHwAvSxKtVfr5KgdjaKkR1ZXl/Z6e3RzuWeWr3g5E= Subject key identifier: 62:1F:05:EB:DB:77:17:88:99:33:65:A0:C7:0A:D1:C1:FC:B8:ED:91 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9A663ADFAF50E9BFDCE8F5C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06f81788-7bad-32bc-b7c2-e0bbdd35e0a0.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 15169 IP address blocks: 172.217.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:3a:df:af:50:e9:bf:dc:e8:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=9873dc3b-21c7-4820-871f-c23eb22080c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0a:9b:94:9b:87:ea:98:ec:7d:37:d8:e6:8c: 29:21:90:2e:30:83:86:2d:8d:b4:78:31:02:9b:7c: 8c:f8:eb:b4:22:73:f9:7c:4a:69:50:62:15:05:34: 86:51:39:9b:3f:dd:5b:36:d2:0a:f7:b6:e0:ad:90: 83:d4:73:41:f2:31:a3:fc:1f:03:44:89:ad:ba:e8: 72:ec:3b:08:16:48:81:90:ae:65:26:35:38:78:6a: 36:b3:43:ce:76:78:2e:a6:fe:d1:6a:ff:83:3e:de: cd:b0:cf:ab:6e:ba:13:b5:1e:d7:38:0e:7c:64:1a: 52:6a:2a:09:68:bc:08:f9:2b:b8:b3:75:73:b3:3b: 0e:8b:2f:61:9b:ce:da:5d:8b:05:46:0d:3d:a8:88: 1c:d6:86:a9:54:17:7e:de:69:7c:71:7b:70:68:4f: 40:3d:6f:f8:e4:14:32:41:b2:f6:9d:13:55:cc:3e: 3a:65:35:ef:fd:df:2f:6e:93:2a:be:3d:41:5f:ba: d5:ce:b2:b3:3d:26:7b:a1:2f:b5:9a:f5:49:5a:6c: 76:30:16:92:af:8d:68:94:01:34:ec:c7:84:5e:cd: f9:95:a9:a2:c1:1f:c1:eb:b1:fc:23:01:a4:f4:c1: 6e:f4:f3:d5:ef:56:7f:cc:c3:ab:ea:5d:08:6a:de: 47:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1F:05:EB:DB:77:17:88:99:33:65:A0:C7:0A:D1:C1:FC:B8:ED:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06f81788-7bad-32bc-b7c2-e0bbdd35e0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d7:95:fb:96:1c:a5:1c:a2:4d:31:ac:be:8c:04:ed:7d:30: 61:00:cb:a5:13:5d:88:80:de:3d:4a:1b:45:53:68:82:fb:d3: a4:1f:71:a5:e0:85:df:3f:84:42:f1:a6:16:0a:dc:0a:19:83: 8f:fe:5d:9a:20:b4:a2:7f:07:f2:34:16:9c:dc:52:3a:7b:8f: 53:8a:49:52:4f:d2:f7:af:8e:91:93:45:97:e1:50:fd:7d:d1: 7d:1c:89:5c:d9:bd:80:07:30:9e:ab:ee:76:99:f5:81:e2:9e: f4:db:11:39:6c:19:87:34:63:ce:d7:32:84:2c:0a:de:d0:5f: 8f:14:65:14:00:54:6c:14:63:17:5d:8f:e4:9b:08:da:47:83: 6a:03:91:08:35:09:cb:8e:5f:37:ee:ce:1e:00:1d:00:c1:68: 6a:1a:b1:f3:7a:31:4b:d2:cd:9a:b2:72:26:92:13:85:e1:80: 83:90:d9:61:6c:48:4c:3b:ba:d9:54:1d:25:53:17:b3:bb:0b: fb:7e:2a:93:cd:b6:f8:29:27:b6:8e:43:d8:b0:e0:0b:f7:e1: af:3a:c2:fb:27:41:25:f0:70:70:b2:98:42:f9:17:44:82:e1: 8a:08:5b:1b:6a:e4:61:1d:53:4f:97:9f:be:1c:75:52:7a:05: 87:04:3f:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjrfr1Dpv9zo9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk OTg3M2RjM2ItMjFjNy00ODIwLTg3MWYtYzIzZWIyMjA4MGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgqblJuH6pjsfTfY5owpIZAuMIOGLY20eDEC m3yM+Ou0InP5fEppUGIVBTSGUTmbP91bNtIK97bgrZCD1HNB8jGj/B8DRImtuuhy 7DsIFkiBkK5lJjU4eGo2s0POdngupv7Rav+DPt7NsM+rbroTtR7XOA58ZBpSaioJ aLwI+Su4s3VzszsOiy9hm87aXYsFRg09qIgc1oapVBd+3ml8cXtwaE9APW/45BQy QbL2nRNVzD46ZTXv/d8vbpMqvj1BX7rVzrKzPSZ7oS+1mvVJWmx2MBaSr41olAE0 7MeEXs35lamiwR/B67H8IwGk9MFu9PPV71Z/zMOr6l0Iat5H0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIfBevbdxeImTNloMcK0cH8uO2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDZmODE3ODgtN2JhZC0z MmJjLWI3YzItZTBiYmRkMzVlMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrXlfuWHKUcok0xrL6MBO19MGEAy6UTXYiA3j1KG0VTaIL706QfcaXg hd8/hELxphYK3AoZg4/+XZogtKJ/B/I0FpzcUjp7j1OKSVJP0vevjpGTRZfhUP19 0X0ciVzZvYAHMJ6r7naZ9YHinvTbETlsGYc0Y87XMoQsCt7QX48UZRQAVGwUYxdd j+SbCNpHg2oDkQg1CcuOXzfuzh4AHQDBaGoasfN6MUvSzZqyciaSE4XhgIOQ2WFs SEw7utlUHSVTF7O7C/t+KpPNtvgpJ7aOQ9iw4Av34a86wvsnQSXwcHCymEL5F0SC 4YoIWxtq5GEdU0+Xn74cdVJ6BYcEP8g= -----END CERTIFICATE-----Generated at Wed Aug 6 00:36:35 2025 by rpki-client