$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1b949b-bffc-3a6c-bc50-f17df077e577.roa File: 1e1b949b-bffc-3a6c-bc50-f17df077e577.roa (raw, json) Hash identifier: SKi+2H2l2jD0kIKpgXMzorpO55paK00xgPjQ10f/2nE= Subject key identifier: 1F:3E:76:3E:7B:85:CB:43:A8:A6:D5:44:9A:F5:BB:C5:74:E8:8A:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9A663BC24728933E97485100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1b949b-bffc-3a6c-bc50-f17df077e577.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 15169 IP address blocks: 172.217.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:3b:c2:47:28:93:3e:97:48:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=b9e57a08-fb76-4fc6-8583-59d8443192fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:44:a0:40:7b:27:e0:0d:a8:14:d7:d9:a6: ca:93:bc:57:a4:59:d2:55:41:a5:68:b7:a1:64:36: ab:f6:46:ad:09:47:2e:c0:2d:c6:a8:9f:65:02:aa: 0c:aa:32:86:69:e5:6d:ea:31:dd:8e:3c:b7:98:32: 2c:94:43:e3:ad:21:5e:ac:32:43:98:05:5e:d2:16: a2:45:83:2d:62:d5:3d:2a:85:e9:ed:3d:f1:6f:c7: 03:b7:08:2a:37:dd:7d:2b:a0:41:47:a5:0d:c7:4f: 81:e2:20:f8:a4:ab:0c:0d:82:8c:54:5d:b8:e7:06: 57:07:2d:3b:05:c9:d9:04:b7:ab:35:5e:4a:57:a6: 88:69:52:a2:13:e9:b5:dd:3f:94:1f:8d:78:cb:4e: e4:38:7c:d5:5e:48:ff:cd:c8:83:60:2e:a3:a6:ac: b6:2d:35:c2:70:12:13:ce:17:a2:65:ea:a9:f6:fc: 35:fc:91:0e:78:c8:4e:72:5c:d4:49:6a:23:1c:aa: 81:9f:f8:58:07:0b:35:10:30:bd:f2:82:de:2b:75: 9b:52:8e:49:a0:c2:5b:5a:ab:51:93:14:4b:e8:7b: d0:bf:17:fa:31:a6:6a:d3:a1:24:dc:0c:08:aa:16: 4e:a8:a4:72:99:c4:8c:5b:a5:6c:d9:fa:de:ae:63: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3E:76:3E:7B:85:CB:43:A8:A6:D5:44:9A:F5:BB:C5:74:E8:8A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1b949b-bffc-3a6c-bc50-f17df077e577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:cb:90:e6:9a:95:72:d6:fa:f4:d0:60:6f:06:a0:e8:6b:d4: 2e:81:ea:6f:63:e3:f8:6e:98:e9:c8:9a:85:bb:c5:3f:ec:fb: 44:b1:be:e4:dd:3a:1c:79:0a:ec:ae:d3:bc:cb:33:35:f6:73: 29:b9:ee:6f:09:7e:c7:b9:d0:5c:0a:98:5d:26:2b:91:60:bc: 1b:c0:be:3e:39:48:e6:74:6e:37:f6:5c:5b:57:3a:a7:1b:50: a1:d8:46:0f:80:dc:97:27:06:92:4a:f8:5b:e5:fe:c9:96:2e: e6:f3:9d:b2:de:7c:93:42:20:82:ed:19:a8:fe:ec:73:c2:a6: fb:2b:9d:01:fc:c7:e5:ca:91:39:01:b2:81:82:f9:c2:74:3d: 41:90:eb:74:ec:be:e4:17:a5:7b:aa:ac:00:6e:23:5c:c4:88: 50:7d:e7:8a:2c:19:bb:71:c7:25:83:49:22:27:42:06:fe:b1: e9:76:9e:d7:1e:98:87:57:52:d4:27:70:b3:a8:ae:6e:f3:1e: 19:83:4e:3b:c5:2a:3f:46:bb:eb:d4:60:f9:19:fb:21:9b:df: 04:74:5f:83:8c:90:9f:cb:fa:7d:2d:80:2b:c9:f4:32:ef:9c: 56:44:8e:e9:98:49:18:b7:f9:42:95:76:89:f0:f2:60:c5:99: 2b:ca:c9:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjvCRyiTPpdIUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk YjllNTdhMDgtZmI3Ni00ZmM2LTg1ODMtNTlkODQ0MzE5MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoJEoEB7J+ANqBTX2abKk7xXpFnSVUGlaLeh ZDar9katCUcuwC3GqJ9lAqoMqjKGaeVt6jHdjjy3mDIslEPjrSFerDJDmAVe0hai RYMtYtU9KoXp7T3xb8cDtwgqN919K6BBR6UNx0+B4iD4pKsMDYKMVF245wZXBy07 BcnZBLerNV5KV6aIaVKiE+m13T+UH414y07kOHzVXkj/zciDYC6jpqy2LTXCcBIT zheiZeqp9vw1/JEOeMhOclzUSWojHKqBn/hYBws1EDC98oLeK3WbUo5JoMJbWqtR kxRL6HvQvxf6MaZq06Ek3AwIqhZOqKRymcSMW6Vs2frermMJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8+dj57hctDqKbVRJr1u8V06IphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWUxYjk0OWItYmZmYy0z YTZjLWJjNTAtZjE3ZGYwNzdlNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjLkOaalXLW+vTQYG8GoOhr1C6B6m9j4/humOnImoW7xT/s+0SxvuTd Ohx5Cuyu07zLMzX2cym57m8Jfse50FwKmF0mK5FgvBvAvj45SOZ0bjf2XFtXOqcb UKHYRg+A3JcnBpJK+Fvl/smWLubznbLefJNCIILtGaj+7HPCpvsrnQH8x+XKkTkB soGC+cJ0PUGQ63TsvuQXpXuqrABuI1zEiFB954osGbtxxyWDSSInQgb+sel2ntce mIdXUtQncLOorm7zHhmDTjvFKj9Gu+vUYPkZ+yGb3wR0X4OMkJ/L+n0tgCvJ9DLv nFZEjumYSRi3+UKVdonw8mDFmSvKyVs= -----END CERTIFICATE-----Generated at Mon Aug 4 16:00:00 2025 by rpki-client