$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa File: 0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa (raw, json) Hash identifier: p8QCugF6/ndYiFngZSP4Td2Y0YHGqSrZBhsdEfSda7M= Subject key identifier: 1F:06:5B:A1:E7:91:14:7E:34:13:C8:48:B4:AB:5D:0F:87:46:99:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC1178733C78D234A4600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c1:17:87:33:c7:8d:23:4a:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8403e136-ee7d-4eda-acce-cd75f1862069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:8e:cb:e7:18:bd:2d:6a:79:5f:84:f3:a5: 95:0e:3a:88:74:84:7b:57:d7:f9:5d:0c:72:ad:5f: 50:50:c5:a8:45:59:8a:55:38:17:b0:bd:2a:09:bf: 45:af:b4:67:4a:14:bc:81:97:e0:a0:4b:0c:e7:98: 5f:db:43:3c:0c:0b:2a:9a:85:d1:64:de:b3:e3:a9: 33:74:7b:2f:7b:c9:ae:63:72:8b:f5:1f:f6:ef:7a: f9:70:1d:0d:41:ab:f9:e3:0e:f8:18:c6:19:99:49: a1:56:40:c2:27:ca:00:db:9f:95:87:ea:b7:1c:4a: df:5a:d3:8c:b8:d1:74:c4:13:ad:35:90:17:c5:11: 03:3e:f3:9f:0d:29:e4:48:61:0e:21:76:42:c1:3b: 5c:9d:2c:d8:10:f5:14:cc:91:0f:77:35:f4:d9:57: 4d:ac:27:e8:f1:b8:a6:f0:78:9b:ea:14:f6:f1:94: bc:f3:ed:f7:fe:7a:94:fb:90:0c:09:c7:80:a4:41: 97:a8:3e:15:57:a9:9c:13:4b:96:83:96:78:d6:d3: 69:cc:3a:c1:d3:3e:3b:d7:86:7e:c1:ff:cd:5f:b9: d6:a8:42:5b:34:ef:81:dd:43:e4:31:e3:81:0f:37: 52:83:f0:25:a7:57:06:84:22:64:3c:2c:a9:f7:9e: 76:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:06:5B:A1:E7:91:14:7E:34:13:C8:48:B4:AB:5D:0F:87:46:99:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:16:33:dc:96:93:bd:5c:57:85:d8:0d:a2:cf:23:87:4f:d0: 8d:98:d4:ca:6e:b6:0c:6c:6b:4c:76:e7:2d:5e:47:44:0a:dd: d5:f2:41:6a:ff:97:20:65:f1:26:46:0e:4c:33:85:2f:c8:b3: c5:31:ca:2c:3c:dc:a4:e2:a3:85:37:80:b3:b5:c6:e2:08:bd: 59:27:51:2d:ce:25:2b:d7:10:a5:d2:a1:48:34:b6:4e:d1:a6: 2e:0b:3f:d7:0e:1e:70:c3:5b:6c:19:51:56:d5:bf:df:69:8b: 50:50:52:8c:17:01:c2:b7:77:6f:b3:e5:33:96:7b:c8:18:c5: 45:10:91:91:ab:26:b2:e4:3e:26:5f:c3:d1:a4:6f:4b:34:7f: 6a:fb:77:98:47:8d:4e:55:4f:10:61:c6:e1:a0:c1:a9:fe:f4: 77:2a:1f:fe:1d:b8:fb:ef:aa:61:b2:39:61:1c:34:fb:52:08: 51:af:4c:3d:4a:9d:24:04:17:54:a6:1a:d1:2c:ec:e2:a3:c0: 24:f8:3d:12:b5:10:c9:e1:e1:ba:86:f4:2d:ed:83:c9:b4:f9: 8f:70:f1:b4:56:5b:95:cd:f2:7e:7b:64:74:8e:df:8b:db:ad: 0d:0b:2c:af:4d:86:99:be:d6:d9:52:2b:86:28:15:2e:9e:0d: 48:e9:7c:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusEXhzPHjSNKRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODQwM2UxMzYtZWU3ZC00ZWRhLWFjY2UtY2Q3NWYxODYyMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhWOy+cYvS1qeV+E86WVDjqIdIR7V9f5XQxy rV9QUMWoRVmKVTgXsL0qCb9Fr7RnShS8gZfgoEsM55hf20M8DAsqmoXRZN6z46kz dHsve8muY3KL9R/273r5cB0NQav54w74GMYZmUmhVkDCJ8oA25+Vh+q3HErfWtOM uNF0xBOtNZAXxREDPvOfDSnkSGEOIXZCwTtcnSzYEPUUzJEPdzX02VdNrCfo8bim 8Hib6hT28ZS88+33/nqU+5AMCceApEGXqD4VV6mcE0uWg5Z41tNpzDrB0z4714Z+ wf/NX7nWqEJbNO+B3UPkMeOBDzdSg/Alp1cGhCJkPCyp95525wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8GW6HnkRR+NBPISLSrXQ+HRpkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGY0YjcyNGItM2M4My0z NzdlLWEzZmEtNDljMTM0ZjkzZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUWM9yWk71cV4XYDaLPI4dP0I2Y1Mputgxsa0x25y1eR0QK3dXyQWr/ lyBl8SZGDkwzhS/Is8Uxyiw83KTio4U3gLO1xuIIvVknUS3OJSvXEKXSoUg0tk7R pi4LP9cOHnDDW2wZUVbVv99pi1BQUowXAcK3d2+z5TOWe8gYxUUQkZGrJrLkPiZf w9Gkb0s0f2r7d5hHjU5VTxBhxuGgwan+9HcqH/4duPvvqmGyOWEcNPtSCFGvTD1K nSQEF1SmGtEs7OKjwCT4PRK1EMnh4bqG9C3tg8m0+Y9w8bRWW5XN8n57ZHSO34vb rQ0LLK9Nhpm+1tlSK4YoFS6eDUjpfEg= -----END CERTIFICATE-----Generated at Mon Jun 16 04:39:55 2025 by rpki-client