$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa File: 1a1b3802-ea48-3d76-a847-7894a6c024c8.roa (raw, json) Hash identifier: 7oLOrLVvA+pUkZEz8N//spk+OhLdpjsOc2jjmFtLIKg= Subject key identifier: 62:A1:52:3E:01:73:64:D5:68:FC:D8:3F:EC:D3:53:8D:AA:89:1F:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122EB9E8F24EB328781F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2e:b9:e8:f2:4e:b3:28:78:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ba724ff3-9297-4e89-86aa-08f3109beb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:04:ef:ee:32:40:2a:eb:6f:a2:47:9a:0c: 18:ec:7e:ef:56:83:46:6e:ec:8a:ce:4c:09:f8:18: bd:a9:c9:b0:2d:84:04:15:fd:a0:3e:fb:5c:e3:28: b1:83:46:2f:db:ac:2f:02:db:0b:54:a3:61:7c:7d: 69:54:0b:ea:94:1d:f0:85:0d:32:87:ff:f4:be:43: b5:75:49:2e:7f:a7:03:91:55:4b:57:c8:54:0c:69: 6b:07:57:6b:b5:b3:12:7f:06:4a:9c:f1:11:af:d9: aa:98:d5:28:4e:28:4f:d3:40:c9:28:0b:4e:22:76: ed:8c:e1:7c:ab:eb:a2:67:cb:da:62:e0:2a:c8:2f: 4b:c6:d1:da:3e:39:67:bf:14:b7:86:5b:cf:e6:da: c2:05:da:13:e8:b1:dc:8d:3c:f2:b8:d4:a9:a1:ed: ce:8d:6b:70:08:ed:fa:65:fc:88:e1:5c:98:a4:14: 1a:c6:fe:b6:cc:3f:0f:46:e5:87:ba:ec:a9:b5:5b: f6:5f:9d:19:22:94:88:09:24:4c:9a:0d:83:be:14: fe:7e:dd:59:ba:85:79:d8:90:46:67:e8:ac:ca:ba: f5:9c:85:59:c7:66:3f:17:6d:27:c6:60:77:e7:82: 9b:c5:6c:ea:cc:12:1c:81:f6:d7:e0:c7:4c:dd:2e: f8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A1:52:3E:01:73:64:D5:68:FC:D8:3F:EC:D3:53:8D:AA:89:1F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:d5:ad:b1:b9:af:76:c6:5d:47:04:f5:da:23:99:70:8a:4f: 46:32:68:c1:95:79:1c:4a:2b:16:9e:61:ee:97:26:b0:45:47: 88:62:09:8b:7d:19:54:42:5f:2d:2c:8c:dc:3a:f4:38:bd:2a: 0a:d8:c6:8b:3d:5c:4c:23:35:f2:40:7d:a3:c5:29:23:0c:e1: 96:65:7b:c0:e9:d4:bf:3d:3b:d2:e9:87:76:2f:f6:4c:f6:6d: 5c:ac:37:ac:62:60:e4:76:91:e1:68:1a:41:bb:da:85:3d:c1: 38:78:2f:d7:dc:23:bb:c6:c1:0a:ed:56:24:02:d6:77:08:39: 0d:1a:ce:d1:ef:89:80:a0:e2:cb:b1:a6:20:8a:83:9f:3e:1f: 05:95:81:34:29:23:f0:c5:44:22:df:b2:72:b0:9c:b7:6f:09: 41:12:5a:4a:27:eb:4a:68:da:b2:7d:7f:42:b3:f5:85:85:92: 6d:2e:b5:f6:a1:6f:e3:b4:22:0d:cc:64:38:41:f0:12:e5:ae: 82:cd:12:9f:12:f0:d4:05:ba:54:0e:a8:91:0e:5a:2b:46:6d: 45:8b:15:9e:7a:8f:c2:dc:42:c8:b5:27:4c:62:ec:18:a2:c2: 78:62:1a:fe:a7:c4:75:dc:4a:33:9c:53:0c:59:4b:9e:96:73: 59:4f:a2:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEi656PJOsyh4H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmE3MjRmZjMtOTI5Ny00ZTg5LTg2YWEtMDhmMzEwOWJlYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivQE7+4yQCrrb6JHmgwY7H7vVoNGbuyKzkwJ +Bi9qcmwLYQEFf2gPvtc4yixg0Yv26wvAtsLVKNhfH1pVAvqlB3whQ0yh//0vkO1 dUkuf6cDkVVLV8hUDGlrB1drtbMSfwZKnPERr9mqmNUoTihP00DJKAtOInbtjOF8 q+uiZ8vaYuAqyC9LxtHaPjlnvxS3hlvP5trCBdoT6LHcjTzyuNSpoe3OjWtwCO36 ZfyI4VyYpBQaxv62zD8PRuWHuuyptVv2X50ZIpSICSRMmg2DvhT+ft1ZuoV52JBG Z+isyrr1nIVZx2Y/F20nxmB354KbxWzqzBIcgfbX4MdM3S74rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKhUj4Bc2TVaPzYP+zTU42qiR9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWExYjM4MDItZWE0OC0z ZDc2LWE4NDctNzg5NGE2YzAyNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/VrbG5r3bGXUcE9dojmXCKT0YyaMGVeRxKKxaeYe6XJrBFR4hiCYt9 GVRCXy0sjNw69Di9KgrYxos9XEwjNfJAfaPFKSMM4ZZle8Dp1L89O9Lph3Yv9kz2 bVysN6xiYOR2keFoGkG72oU9wTh4L9fcI7vGwQrtViQC1ncIOQ0aztHviYCg4sux piCKg58+HwWVgTQpI/DFRCLfsnKwnLdvCUESWkon60po2rJ9f0Kz9YWFkm0utfah b+O0Ig3MZDhB8BLlroLNEp8S8NQFulQOqJEOWitGbUWLFZ56j8LcQsi1J0xi7Bii wnhiGv6nxHXcSjOcUwxZS56Wc1lPogI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:10 2025 by rpki-client