$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0746cd43-8cf8-3bac-a347-c85fe78e4cd8.roa File: 0746cd43-8cf8-3bac-a347-c85fe78e4cd8.roa (raw, json) Hash identifier: Fb7gCnFuqXbHQ3eGFzH1EDEuWcnIuYSUfY0F/dDEX9A= Subject key identifier: 2E:CC:56:8F:66:8A:25:75:98:E6:AD:72:8C:8B:DE:A3:05:9F:59:98 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122FC41562288CB4241140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0746cd43-8cf8-3bac-a347-c85fe78e4cd8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2f:c4:15:62:28:8c:b4:24:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0a1af730-907b-45d9-a4c3-e0328a4031cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:13:65:c0:37:d0:c2:d4:38:b8:ca:90:7a: 88:6c:07:d4:ac:a7:4a:7b:6a:d0:7f:f0:d7:c1:4a: 00:97:ef:e4:f3:0a:95:59:a7:a4:91:1b:e5:a8:13: de:a9:b8:ca:cb:0a:05:b4:3a:de:8c:df:5a:ab:00: 31:26:69:05:66:65:8b:78:91:9c:38:52:35:9d:33: e5:6e:74:99:be:89:2b:ae:6c:f8:3d:64:df:58:a5: 5a:64:1f:14:e3:9a:dd:1c:3a:fc:27:9c:86:92:f4: a8:ad:80:bd:b6:ca:58:8b:63:89:3f:eb:46:a4:07: 74:d5:d2:22:80:95:c4:a7:58:b8:81:ec:1f:26:c8: 59:a4:3c:97:b4:49:08:25:aa:a4:fa:cb:4b:50:82: d0:61:2c:e0:6b:47:8c:fc:b1:6f:9a:ed:38:44:76: 24:b2:2b:99:02:b0:c9:f0:96:b5:a9:12:b3:b0:9f: e4:9e:0b:5f:f2:e0:2e:f2:d6:59:55:bc:4b:4f:43: 9a:c9:d8:60:ba:d5:e4:11:b2:59:bb:5c:77:e4:2f: aa:4d:8a:75:4e:f0:2d:94:8d:9b:b3:9d:4b:23:43: 7c:40:16:d8:7f:dd:dd:37:be:bd:6a:8d:07:40:5e: 73:49:7d:40:77:81:d8:0c:3c:51:d7:f1:55:e1:65: 7d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CC:56:8F:66:8A:25:75:98:E6:AD:72:8C:8B:DE:A3:05:9F:59:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0746cd43-8cf8-3bac-a347-c85fe78e4cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2b:11:1a:f6:49:50:ed:cc:17:4d:58:4e:c7:0a:59:d6:dc: df:e4:04:8f:3e:14:9a:2e:64:46:17:63:85:02:ee:e1:14:62: d2:66:4e:d6:20:4f:b1:13:1b:2d:0a:63:be:e6:8b:33:19:1c: f0:c3:42:57:52:06:b0:77:62:97:c2:cd:d6:eb:d1:a7:24:2d: df:90:b8:94:2d:38:d6:ac:42:08:48:13:f0:32:b9:74:78:84: dc:b5:b3:27:67:a0:26:38:8a:70:3a:78:3b:38:59:07:88:bb: 35:7d:c9:f6:68:77:86:82:db:fe:66:86:ec:cd:9b:9c:d7:f0: 79:07:ba:59:af:19:bb:60:b0:b8:5c:e6:35:0e:fb:71:92:30: c1:91:88:64:ac:5f:6e:cc:64:9d:47:d0:38:8d:b0:9e:17:ee: 3c:1b:74:37:f5:e6:1d:0f:76:0c:70:b5:8e:52:63:62:d1:b2: 3b:12:2e:eb:b7:d2:ff:6e:d8:1f:74:c1:cc:1d:ab:5e:24:55: fa:a6:71:d9:14:4a:fe:c0:6e:a3:05:6a:98:65:a2:27:b4:21: 57:cc:d5:bc:4c:09:85:3b:40:c4:92:e4:38:35:e9:b0:9c:21: 88:4e:16:39:c7:0d:cf:4d:d9:42:5d:08:c4:aa:f4:ee:42:d6: a6:03:81:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEi/EFWIojLQkEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGExYWY3MzAtOTA3Yi00NWQ5LWE0YzMtZTAzMjhhNDAzMWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp30TZcA30MLUOLjKkHqIbAfUrKdKe2rQf/DX wUoAl+/k8wqVWaekkRvlqBPeqbjKywoFtDrejN9aqwAxJmkFZmWLeJGcOFI1nTPl bnSZvokrrmz4PWTfWKVaZB8U45rdHDr8J5yGkvSorYC9tspYi2OJP+tGpAd01dIi gJXEp1i4gewfJshZpDyXtEkIJaqk+stLUILQYSzga0eM/LFvmu04RHYksiuZArDJ 8Ja1qRKzsJ/kngtf8uAu8tZZVbxLT0OaydhgutXkEbJZu1x35C+qTYp1TvAtlI2b s51LI0N8QBbYf93dN769ao0HQF5zSX1Ad4HYDDxR1/FV4WV9cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7MVo9miiV1mOatcoyL3qMFn1mYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDc0NmNkNDMtOGNmOC0z YmFjLWEzNDctYzg1ZmU3OGU0Y2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYrERr2SVDtzBdNWE7HClnW3N/kBI8+FJouZEYXY4UC7uEUYtJmTtYg T7ETGy0KY77mizMZHPDDQldSBrB3YpfCzdbr0ackLd+QuJQtONasQghIE/AyuXR4 hNy1sydnoCY4inA6eDs4WQeIuzV9yfZod4aC2/5mhuzNm5zX8HkHulmvGbtgsLhc 5jUO+3GSMMGRiGSsX27MZJ1H0DiNsJ4X7jwbdDf15h0PdgxwtY5SY2LRsjsSLuu3 0v9u2B90wcwdq14kVfqmcdkUSv7AbqMFaphloie0IVfM1bxMCYU7QMSS5Dg16bCc IYhOFjnHDc9N2UJdCMSq9O5C1qYDgSU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:37 2025 by rpki-client