$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1259bc77-3c13-370b-bc49-417ac4bc544b.roa File: 1259bc77-3c13-370b-bc49-417ac4bc544b.roa (raw, json) Hash identifier: DdW2TF8Z2wPbFHeBMrFzVhwLhWPt2u6c3szXcqQg75E= Subject key identifier: B3:4A:ED:CA:CD:61:AE:02:A3:98:E5:CF:FC:5C:75:C4:15:7F:95:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8412310FDAA6819A5A28BAC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1259bc77-3c13-370b-bc49-417ac4bc544b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:31:0f:da:a6:81:9a:5a:28:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a9b673cb-5090-44fd-b4be-fadbb5bf3ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:32:ba:ae:e5:38:a6:c6:70:f9:4a:c3:15: 2e:22:c4:df:73:97:96:91:66:f0:cc:c9:1a:1b:eb: 20:d3:a6:1a:fb:0b:4a:8f:ed:3f:ad:69:8c:16:fc: a8:6b:f1:98:3b:08:b1:4e:1c:5e:87:61:b5:a3:fd: 9d:95:73:77:e4:e1:fd:23:50:1c:79:9d:de:ba:d2: 94:9c:77:a9:fd:8f:99:9e:6f:b8:3d:fc:be:4a:d7: 53:8b:40:6f:8e:f8:75:8e:c0:a1:b3:c7:97:5f:74: 69:64:de:ea:28:3f:cf:1b:2a:68:d3:f7:c4:38:77: e8:32:eb:c2:d8:b1:8e:0f:82:c4:7f:b8:4a:d7:9f: e7:81:06:ca:64:6d:b2:a1:c6:19:37:db:8a:87:07: e1:3e:56:b5:89:84:0d:11:f0:95:a1:6c:f4:1a:b5: 55:df:99:c3:47:92:5a:07:f2:4c:cd:99:88:e0:57: fa:fe:b6:ba:88:4b:f7:e0:8e:99:40:99:0b:60:ea: 5c:46:49:ea:4c:51:34:d8:88:35:3d:e0:df:e7:f4: 27:ec:89:3f:47:b8:10:0a:f4:50:a1:34:b0:dc:ab: 56:57:73:cd:31:b4:c6:7e:fb:e4:e1:02:ca:75:c8: 92:51:c8:35:fc:64:f4:fe:3e:68:f2:4c:4f:06:ad: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4A:ED:CA:CD:61:AE:02:A3:98:E5:CF:FC:5C:75:C4:15:7F:95:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1259bc77-3c13-370b-bc49-417ac4bc544b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:3c:3f:1c:aa:c0:47:73:f1:9e:ad:2b:65:b8:3b:b7:67:88: 13:56:84:37:ac:d0:2d:5c:5a:c1:15:d0:6d:b2:18:6c:95:da: e0:81:3d:32:fc:0a:f5:32:0a:4f:45:47:64:61:f8:d6:a8:f7: 5c:cb:f4:5c:01:07:62:8f:e9:76:d9:c4:cc:87:18:71:27:52: e1:b5:4c:54:29:1f:ef:23:50:f1:a8:d5:d9:bd:ce:5d:c5:c8: 5d:88:6a:0d:b8:23:8a:aa:7d:23:da:38:69:bc:57:b8:15:f1: 20:e9:be:58:a7:51:76:42:7b:21:28:6c:5d:31:7b:b0:b6:d2: c8:42:a4:c9:b3:0e:5e:50:7a:aa:a0:a6:a4:fa:e2:fe:21:31: 7f:76:c5:1c:db:39:38:b9:2e:37:50:cb:9b:3f:07:4a:25:44: f1:01:fa:e2:4f:d5:0d:2f:02:8b:ae:e8:6c:5a:b6:05:3d:ca: 09:b1:9f:cc:72:47:d7:19:82:c4:4d:a3:3c:7c:f4:9b:d2:7a: 46:60:e6:fe:ba:fc:2e:08:af:2f:8d:41:80:28:ea:ab:5e:6f: 95:ed:ba:c8:40:a0:68:c7:13:dd:b9:92:06:d0:9a:10:28:1b: 8b:a4:9d:89:40:8d:04:68:f3:59:fe:fb:01:b6:ed:e5:6e:db: 51:f5:c6:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjEP2qaBmloousAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTliNjczY2ItNTA5MC00NGZkLWI0YmUtZmFkYmI1YmYzYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhIyuq7lOKbGcPlKwxUuIsTfc5eWkWbwzMka G+sg06Ya+wtKj+0/rWmMFvyoa/GYOwixThxeh2G1o/2dlXN35OH9I1AceZ3eutKU nHep/Y+Znm+4Pfy+StdTi0Bvjvh1jsChs8eXX3RpZN7qKD/PGypo0/fEOHfoMuvC 2LGOD4LEf7hK15/ngQbKZG2yocYZN9uKhwfhPla1iYQNEfCVoWz0GrVV35nDR5Ja B/JMzZmI4Ff6/ra6iEv34I6ZQJkLYOpcRknqTFE02Ig1PeDf5/Qn7Ik/R7gQCvRQ oTSw3KtWV3PNMbTGfvvk4QLKdciSUcg1/GT0/j5o8kxPBq1x1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNK7crNYa4Co5jlz/xcdcQVf5WIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTI1OWJjNzctM2MxMy0z NzBiLWJjNDktNDE3YWM0YmM1NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE8PxyqwEdz8Z6tK2W4O7dniBNWhDes0C1cWsEV0G2yGGyV2uCBPTL8 CvUyCk9FR2Rh+Nao91zL9FwBB2KP6XbZxMyHGHEnUuG1TFQpH+8jUPGo1dm9zl3F yF2Iag24I4qqfSPaOGm8V7gV8SDpvlinUXZCeyEobF0xe7C20shCpMmzDl5Qeqqg pqT64v4hMX92xRzbOTi5LjdQy5s/B0olRPEB+uJP1Q0vAouu6GxatgU9ygmxn8xy R9cZgsRNozx89JvSekZg5v66/C4Iry+NQYAo6qteb5XtushAoGjHE925kgbQmhAo G4uknYlAjQRo81n++wG27eVu21H1xuc= -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:34 2025 by rpki-client