$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa File: 17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa (raw, json) Hash identifier: 1RODmKsZr3x0KtX4lugrF1Anc8yenSiB6opDn7dqMvI= Subject key identifier: 93:C8:D8:D2:37:A4:0D:D6:2B:46:ED:F2:5F:C4:CB:E6:69:58:C8:A0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A94D0DFA6D94E16EA29ADB480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:df:a6:d9:4e:16:ea:29:ad:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=63bb4a08-e390-43a8-9bdc-f95fbd71952e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:59:d3:a5:f6:3f:2b:cd:96:00:11:b1:4d: 54:9d:52:ba:40:30:57:b7:65:e9:4b:23:f9:f4:a0: 12:3e:f4:6e:73:fa:da:1c:6b:14:d1:85:49:f6:ec: df:76:63:c3:41:6f:c9:4d:ad:28:27:a7:0f:c2:ae: c0:68:8c:48:53:ac:76:fb:33:2a:94:85:35:a4:c6: 68:56:18:8b:f7:f5:12:69:57:a1:11:eb:2b:35:2a: f4:17:53:91:fe:6d:bf:98:3a:73:ee:2b:ec:51:58: 96:96:43:00:83:f1:87:78:4f:34:92:f2:f7:ef:26: 4e:4b:de:75:a1:d7:70:06:84:98:92:84:d2:29:96: 56:d1:f3:ef:ec:0d:15:39:49:c9:9d:12:4a:39:cc: a0:e6:ac:53:6e:10:df:a3:0b:ea:66:3c:e7:16:45: 4f:eb:23:3d:86:b8:2d:06:73:ff:59:6b:85:28:8c: 34:36:bf:a2:dd:f4:fb:3d:4a:99:73:6e:7c:1e:cb: b1:2d:87:31:98:6c:f4:22:d8:33:d6:ef:d4:f5:2c: 03:cd:4a:a8:a2:ae:3b:08:cf:75:9e:9b:95:d7:c3: e0:25:1f:51:0f:42:b7:52:a1:ea:d3:7d:1b:26:37: 93:0d:49:31:8c:37:df:d4:6c:47:e0:6e:aa:eb:fd: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C8:D8:D2:37:A4:0D:D6:2B:46:ED:F2:5F:C4:CB:E6:69:58:C8:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:fe:e5:94:1c:50:4f:a5:5b:01:74:18:6a:f9:c9:26:d2:eb: 40:1f:38:00:93:02:e4:cd:41:ef:69:bb:2e:3a:4a:59:47:ca: 42:66:20:17:ef:f6:5b:4a:c9:cd:b9:59:d0:d1:8c:36:5a:6f: ee:3a:9c:64:21:3b:cd:32:56:21:d6:2c:1d:fa:05:63:68:6a: 26:48:c8:d3:3c:44:16:af:a2:82:11:c1:4e:0e:ed:a9:f9:1e: 6f:8c:0f:5d:6c:5a:e3:f7:2e:40:c4:76:0a:61:99:d1:24:de: a6:ef:8f:4d:02:49:88:7a:50:6a:cf:dc:46:41:b8:59:fa:4b: af:69:6e:5c:35:72:44:a6:69:d6:a9:cf:64:80:ac:53:e5:41: 71:c4:3e:0b:2c:73:9a:ea:a1:ee:d1:58:e3:4c:03:da:34:ff: 62:9d:ef:78:6e:89:f7:50:1b:32:10:a8:ba:05:c3:90:fc:2c: 8a:2c:56:d2:65:a6:dd:ee:9b:8d:d8:29:8a:c2:71:d9:e9:e0: 0d:20:d2:03:8c:95:c2:49:1e:6a:75:39:e9:c2:bb:f9:4f:c6: d7:91:f8:40:22:1e:28:0b:5d:32:d9:33:0a:7a:29:9d:c1:aa: 78:88:c8:75:73:db:8d:2d:30:6a:4a:50:61:e8:c6:25:5e:c8: 0e:88:ef:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0N+m2U4W6imttIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk NjNiYjRhMDgtZTM5MC00M2E4LTliZGMtZjk1ZmJkNzE5NTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnotZ06X2PyvNlgARsU1UnVK6QDBXt2XpSyP5 9KASPvRuc/raHGsU0YVJ9uzfdmPDQW/JTa0oJ6cPwq7AaIxIU6x2+zMqlIU1pMZo VhiL9/USaVehEesrNSr0F1OR/m2/mDpz7ivsUViWlkMAg/GHeE80kvL37yZOS951 oddwBoSYkoTSKZZW0fPv7A0VOUnJnRJKOcyg5qxTbhDfowvqZjznFkVP6yM9hrgt BnP/WWuFKIw0Nr+i3fT7PUqZc258HsuxLYcxmGz0Itgz1u/U9SwDzUqooq47CM91 npuV18PgJR9RD0K3UqHq030bJjeTDUkxjDff1GxH4G6q6/0KawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPI2NI3pA3WK0bt8l/Ey+ZpWMigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTdjZDA3MTEtM2JkNC0z ZTA3LThlNmEtYTVmMDRlYjUwZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKz+5ZQcUE+lWwF0GGr5ySbS60AfOACTAuTNQe9puy46SllHykJmIBfv 9ltKyc25WdDRjDZab+46nGQhO80yViHWLB36BWNoaiZIyNM8RBavooIRwU4O7an5 Hm+MD11sWuP3LkDEdgphmdEk3qbvj00CSYh6UGrP3EZBuFn6S69pblw1ckSmadap z2SArFPlQXHEPgssc5rqoe7RWONMA9o0/2Kd73huifdQGzIQqLoFw5D8LIosVtJl pt3um43YKYrCcdnp4A0g0gOMlcJJHmp1OenCu/lPxteR+EAiHigLXTLZMwp6KZ3B qniIyHVz240tMGpKUGHoxiVeyA6I72o= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:11 2025 by rpki-client