$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b5140b3-d8fe-3126-9739-ff6d4cbd876b.roa File: 0b5140b3-d8fe-3126-9739-ff6d4cbd876b.roa (raw, json) Hash identifier: JzXvxCv7goaCzJV47L9Tr92HKB9facqv8IILe7kpCNY= Subject key identifier: 54:47:05:8A:CE:72:09:9B:A2:B5:F6:7F:6F:42:82:82:56:07:46:1E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841186A86C100E1007BE91A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b5140b3-d8fe-3126-9739-ff6d4cbd876b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:86:a8:6c:10:0e:10:07:be:91:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=402f7230-7f16-4971-b40d-608dea683529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:c0:f3:95:59:79:68:18:a4:dc:71:c9:bc: fb:06:78:42:73:5b:05:a8:70:55:c7:9d:3a:ef:a5: 3d:07:d6:55:cd:e0:3b:72:0e:35:3f:97:7d:da:88: be:ea:fe:1d:8b:a0:fa:c7:f0:ed:24:1a:13:f8:25: 8c:49:70:a4:6d:83:ee:3a:bd:87:38:16:1f:d3:a5: 72:34:44:bf:72:d9:81:54:ec:aa:98:28:86:c0:16: 6c:99:6f:f2:48:8d:71:34:e6:1e:dd:88:4c:53:a1: 7d:9f:76:1a:f3:51:35:39:00:79:73:d3:f4:d4:e4: 88:24:e9:75:2a:8f:35:1d:27:98:38:11:54:94:54: 85:87:76:f7:21:16:f3:43:df:09:b0:f8:27:0e:ba: fc:60:1f:5b:4d:67:31:6e:56:c1:c6:c6:e4:61:70: fd:b3:16:2f:65:a7:2c:77:91:5a:0b:99:63:2b:5c: f5:83:b7:5a:b9:9a:20:9f:72:a0:ca:e3:7c:7b:d1: e2:31:e0:22:8b:89:c9:88:43:4b:a8:66:b9:02:2b: b4:59:ae:a3:3e:bd:d5:cb:65:25:32:90:40:e7:2b: ac:fc:7c:de:42:6a:5d:dd:69:07:aa:0b:62:02:b7: 91:8d:90:20:66:6b:aa:c7:ef:4d:a4:2e:f3:e4:8d: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:47:05:8A:CE:72:09:9B:A2:B5:F6:7F:6F:42:82:82:56:07:46:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b5140b3-d8fe-3126-9739-ff6d4cbd876b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3f:34:76:1d:bc:72:e7:00:12:7d:fc:51:19:2c:5b:9e:c7: d8:de:a4:85:8d:6d:b2:e6:b7:5c:de:c1:a5:87:91:29:e3:6c: 62:3b:0a:2a:99:d1:4f:b4:0f:88:6c:6e:60:18:91:1c:ea:9e: 5f:c0:e3:2e:68:37:1e:5e:96:f7:56:6c:67:10:44:a3:48:46: bc:df:71:46:c9:f7:ad:6e:fb:29:2f:16:47:14:97:26:68:6c: 46:86:33:8b:38:7e:7d:50:09:ce:ac:06:d7:d8:cf:5d:e5:68: f5:4f:30:cf:f2:e7:8c:59:3f:ce:10:f3:8b:82:f3:52:89:5f: 98:a6:1c:85:d7:d1:d2:8f:b8:59:04:ac:48:d0:38:c4:e7:dc: c5:7c:c1:f2:0d:1d:fa:52:c4:3d:14:a8:7a:cf:b4:6b:8d:d4: 29:cb:6a:e0:4c:bb:d6:67:8f:cc:0f:82:31:1e:c9:d1:73:8d: 9b:4b:e5:79:bd:83:26:78:44:c3:78:7a:3f:8b:9e:dc:31:19: 20:e6:e8:9e:ff:60:32:e0:22:97:05:16:07:f7:9f:94:58:09: df:64:ad:87:cf:8a:43:2f:cb:00:2e:a2:0a:6e:b9:15:1e:56: 68:b5:0e:be:82:0f:d6:3c:e0:32:ec:36:eb:80:1e:c6:2b:d7: 82:5d:db:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYaobBAOEAe+kaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDAyZjcyMzAtN2YxNi00OTcxLWI0MGQtNjA4ZGVhNjgzNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjPA85VZeWgYpNxxybz7BnhCc1sFqHBVx506 76U9B9ZVzeA7cg41P5d92oi+6v4di6D6x/DtJBoT+CWMSXCkbYPuOr2HOBYf06Vy NES/ctmBVOyqmCiGwBZsmW/ySI1xNOYe3YhMU6F9n3Ya81E1OQB5c9P01OSIJOl1 Ko81HSeYOBFUlFSFh3b3IRbzQ98JsPgnDrr8YB9bTWcxblbBxsbkYXD9sxYvZacs d5FaC5ljK1z1g7dauZogn3KgyuN8e9HiMeAii4nJiENLqGa5Aiu0Wa6jPr3Vy2Ul MpBA5yus/HzeQmpd3WkHqgtiAreRjZAgZmuqx+9NpC7z5I1VNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRHBYrOcgmborX2f29CgoJWB0YeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGI1MTQwYjMtZDhmZS0z MTI2LTk3MzktZmY2ZDRjYmQ4NzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo/NHYdvHLnABJ9/FEZLFuex9jepIWNbbLmt1zewaWHkSnjbGI7CiqZ 0U+0D4hsbmAYkRzqnl/A4y5oNx5elvdWbGcQRKNIRrzfcUbJ961u+ykvFkcUlyZo bEaGM4s4fn1QCc6sBtfYz13laPVPMM/y54xZP84Q84uC81KJX5imHIXX0dKPuFkE rEjQOMTn3MV8wfINHfpSxD0UqHrPtGuN1CnLauBMu9Znj8wPgjEeydFzjZtL5Xm9 gyZ4RMN4ej+LntwxGSDm6J7/YDLgIpcFFgf3n5RYCd9krYfPikMvywAuogpuuRUe Vmi1Dr6CD9Y84DLsNuuAHsYr14Jd28w= -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:01 2025 by rpki-client