$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa File: 0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa (raw, json) Hash identifier: uYdJL/+sSH6Yp7/+ZaUQ/Dh7T3cL0fmrTLtVq7w7dRM= Subject key identifier: 9A:1A:FE:35:5B:C4:2D:3F:C7:EE:B3:77:74:3E:22:0F:5E:54:43:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841183E7B93A78BF3FA29B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:83:e7:b9:3a:78:bf:3f:a2:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a1148b0f-b380-4932-85eb-e32285c62aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:24:01:e7:28:af:db:ad:b4:24:72:6e:98:ec: b4:14:c3:37:09:95:cb:9d:a9:31:9d:56:62:ad:70: b2:c3:cc:c8:44:51:36:94:84:23:c9:af:49:7d:73: 77:eb:ed:96:ef:56:00:27:2b:c1:83:32:89:c4:ef: 5d:71:8e:20:2c:7c:4f:c3:da:2c:e8:f8:0b:92:2a: be:07:17:57:43:73:e5:7d:f5:e8:b1:ae:02:d2:06: c3:ae:78:e7:7d:f2:99:16:a9:cf:4b:ea:95:66:5d: ae:dd:6b:00:c8:28:fb:84:7b:d0:2d:42:c0:4d:d2: 3b:fb:09:12:2c:21:ae:9c:2c:c9:15:37:fa:cb:ac: 25:7d:1a:6a:1c:4f:16:08:7b:16:08:59:9d:e7:7a: d5:71:f5:a0:96:eb:5e:ad:63:71:a5:f0:d6:95:9c: 76:ed:ff:95:d0:f6:de:fa:8c:dc:fc:4e:a7:71:d3: 3b:ee:b5:ef:11:cb:74:7e:d1:c1:a5:20:63:cf:34: 8f:6d:c1:16:d9:20:7b:fc:80:a2:ba:0e:39:d6:6c: b0:01:00:26:ed:b4:b5:10:05:ed:56:27:d4:fb:15: 27:6c:fa:98:8a:b2:35:86:54:47:56:94:76:04:de: 5c:6a:ef:f6:7b:2e:67:af:34:ab:7a:a6:72:bc:f0: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1A:FE:35:5B:C4:2D:3F:C7:EE:B3:77:74:3E:22:0F:5E:54:43:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:34:fc:03:f8:56:fa:be:09:a7:c0:ec:f2:a3:0b:fb:03:27: 3d:bf:7b:0d:83:40:f0:18:42:5b:63:5f:c5:f4:dd:7a:81:8f: 96:84:8d:67:7c:80:26:c0:c2:4e:b4:9c:a2:55:74:8c:13:a7: 19:8e:f0:ab:3b:4e:50:26:e8:d2:27:ab:bd:31:eb:41:2b:3d: f2:c7:40:80:3a:63:eb:93:fd:ff:f4:8d:be:96:5d:68:f4:c6: b4:c1:eb:ee:63:4d:74:b4:dc:15:aa:07:9e:09:80:7b:88:1a: 00:05:33:dd:65:ab:5d:8a:a7:a3:f1:f5:d3:13:bf:70:ed:33: a3:65:b1:d4:54:d8:37:b4:01:ae:a2:c9:6e:db:a5:92:b4:d8: f8:16:68:75:de:3e:93:3c:cb:ca:99:f9:fb:9e:55:6e:63:7d: 34:fe:f8:27:be:0c:e9:d6:67:76:60:07:b2:7b:1d:9c:9d:a7: f7:f3:9e:e4:c7:cc:b8:3b:1e:fc:75:45:84:2d:9c:6f:4e:79: 95:f2:0d:67:60:e6:30:ed:d9:cb:e8:d8:04:9a:b4:f1:f1:6b: ce:dd:f1:f7:13:13:05:e6:64:37:ee:2f:c8:4f:7c:f0:3c:7b: 11:57:15:e4:c8:7e:6d:ba:0a:02:03:a5:8d:7f:27:08:90:09: 5c:a7:2d:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYPnuTp4vz+im4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTExNDhiMGYtYjM4MC00OTMyLTg1ZWItZTMyMjg1YzYyYWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniQB5yiv2620JHJumOy0FMM3CZXLnakxnVZi rXCyw8zIRFE2lIQjya9JfXN36+2W71YAJyvBgzKJxO9dcY4gLHxPw9os6PgLkiq+ BxdXQ3PlffXosa4C0gbDrnjnffKZFqnPS+qVZl2u3WsAyCj7hHvQLULATdI7+wkS LCGunCzJFTf6y6wlfRpqHE8WCHsWCFmd53rVcfWgluterWNxpfDWlZx27f+V0Pbe +ozc/E6ncdM77rXvEct0ftHBpSBjzzSPbcEW2SB7/ICiug451mywAQAm7bS1EAXt VifU+xUnbPqYirI1hlRHVpR2BN5cau/2ey5nrzSreqZyvPBhLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoa/jVbxC0/x+6zd3Q+Ig9eVEMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGI0YTMxYjUtM2QyZi0z ZmY4LWE3YjgtZGI4OTU5NzJiZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI0/AP4Vvq+CafA7PKjC/sDJz2/ew2DQPAYQltjX8X03XqBj5aEjWd8 gCbAwk60nKJVdIwTpxmO8Ks7TlAm6NInq70x60ErPfLHQIA6Y+uT/f/0jb6WXWj0 xrTB6+5jTXS03BWqB54JgHuIGgAFM91lq12Kp6Px9dMTv3DtM6NlsdRU2De0Aa6i yW7bpZK02PgWaHXePpM8y8qZ+fueVW5jfTT++Ce+DOnWZ3ZgB7J7HZydp/fznuTH zLg7Hvx1RYQtnG9OeZXyDWdg5jDt2cvo2ASatPHxa87d8fcTEwXmZDfuL8hPfPA8 exFXFeTIfm26CgIDpY1/JwiQCVynLbo= -----END CERTIFICATE-----Generated at Mon Aug 4 16:00:16 2025 by rpki-client