$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa File: 2363796e-1a6a-3118-a421-6fa84d42857f.roa (raw, json) Hash identifier: kHtuBqdn3vDu4QMPctecJqZ4geucyD8IWutMGatuLCg= Subject key identifier: F4:24:CF:DD:E2:D6:4C:99:E3:83:41:47:0A:DD:61:6B:B4:0F:19:03 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30FA09030DC1013C1CD070 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.217.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:fa:09:03:0d:c1:01:3c:1c:d0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=261f642f-3729-441d-a5ce-71422d6640c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:e2:34:80:d6:53:37:f4:22:18:78:94:db: 5a:71:1d:cc:6f:be:1d:14:c5:7f:bf:e3:73:90:25: ed:29:df:ef:de:9b:13:a3:f7:e5:17:6e:f2:34:dc: c5:7b:b2:df:57:d1:cc:6e:c0:c8:fd:47:aa:25:9f: 37:49:4c:63:c3:bd:4a:1d:b4:e6:a6:ad:e0:40:d6: ca:5f:71:21:e8:2b:99:ed:cd:06:53:a7:1b:b6:ec: 25:52:8d:f1:28:92:3c:4d:8d:6c:d5:e8:ff:79:a3: 8f:87:41:f9:92:14:ea:35:53:1f:84:e9:a9:b0:8b: bb:ff:ea:d7:d3:8c:d2:1d:d4:d2:60:8d:bc:fd:de: ad:c5:64:b7:79:44:ef:ab:73:f9:cd:f3:b8:60:8e: 1b:10:cf:49:bd:a7:79:b3:77:ee:0e:01:8b:61:4c: 93:fd:31:46:ec:90:1f:d8:db:89:c1:a6:6a:ba:99: 33:d4:92:bd:7d:9e:0c:1d:69:f0:c2:4f:6d:6d:0c: b6:21:f5:5b:b2:e1:48:20:4a:fb:42:da:88:e0:e1: 99:7d:b2:70:9a:74:28:0f:1e:71:db:31:b2:dd:44: 07:35:cd:33:71:66:09:a7:0c:b6:78:eb:41:d9:9d: bc:ec:8d:00:26:bf:09:02:d5:63:66:af:73:bc:b2: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:CF:DD:E2:D6:4C:99:E3:83:41:47:0A:DD:61:6B:B4:0F:19:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a2:4f:12:04:c7:99:cf:e7:2e:1d:0f:b0:f2:51:b6:7e:45: 7f:b8:f4:bc:61:a0:00:2d:9e:9c:6e:e8:8f:e3:28:bc:a5:ad: 09:89:4c:a1:eb:35:ac:38:f6:d5:f4:c5:be:3d:00:a7:08:29: ef:ea:1a:2c:c6:43:67:dc:8a:a6:a2:9c:05:b8:71:ca:7f:42: 21:77:df:25:45:bc:e8:bd:00:d9:dc:24:7d:12:fd:ce:7a:da: f1:63:7c:90:69:92:3c:f5:97:92:29:cc:a1:08:fb:60:82:90: 19:b1:01:31:00:a7:b8:35:ff:61:c2:33:fd:a2:3d:bf:61:2b: 77:7f:10:7e:d9:f3:8d:7a:cf:85:ed:62:70:6d:95:46:44:ca: 0a:bb:4a:8f:a7:26:8c:24:ab:9b:8b:b7:98:d0:db:f4:00:96: 51:ff:34:6d:a1:a3:8b:b8:aa:a8:fb:c6:ab:8a:26:0f:e5:a9: 70:90:3c:7a:ba:1d:48:49:5e:02:93:0c:57:46:ac:20:9b:c8: 17:0c:9c:58:9d:68:1e:b8:c9:cf:f7:8d:cf:a3:34:fa:01:09: bf:e0:b4:11:7c:73:8b:4c:ce:52:f8:05:40:ad:c9:fe:ee:84: b6:38:a9:f9:a4:ad:02:b7:90:5c:3d:c7:17:63:5f:b8:fe:c7: 17:1a:f0:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPoJAw3BATwc0HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MjYxZjY0MmYtMzcyOS00NDFkLWE1Y2UtNzE0MjJkNjY0MGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCPiNIDWUzf0Ihh4lNtacR3Mb74dFMV/v+Nz kCXtKd/v3psTo/flF27yNNzFe7LfV9HMbsDI/UeqJZ83SUxjw71KHbTmpq3gQNbK X3Eh6CuZ7c0GU6cbtuwlUo3xKJI8TY1s1ej/eaOPh0H5khTqNVMfhOmpsIu7/+rX 04zSHdTSYI28/d6txWS3eUTvq3P5zfO4YI4bEM9Jvad5s3fuDgGLYUyT/TFG7JAf 2NuJwaZqupkz1JK9fZ4MHWnwwk9tbQy2IfVbsuFIIEr7QtqI4OGZfbJwmnQoDx5x 2zGy3UQHNc0zcWYJpwy2eOtB2Z287I0AJr8JAtVjZq9zvLIFYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQkz93i1kyZ44NBRwrdYWu0DxkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjM2Mzc5NmUtMWE2YS0z MTE4LWE0MjEtNmZhODRkNDI4NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGiTxIEx5nP5y4dD7DyUbZ+RX+49LxhoAAtnpxu6I/jKLylrQmJTKHr Naw49tX0xb49AKcIKe/qGizGQ2fciqainAW4ccp/QiF33yVFvOi9ANncJH0S/c56 2vFjfJBpkjz1l5IpzKEI+2CCkBmxATEAp7g1/2HCM/2iPb9hK3d/EH7Z8416z4Xt YnBtlUZEygq7So+nJowkq5uLt5jQ2/QAllH/NG2ho4u4qqj7xquKJg/lqXCQPHq6 HUhJXgKTDFdGrCCbyBcMnFidaB64yc/3jc+jNPoBCb/gtBF8c4tMzlL4BUCtyf7u hLY4qfmkrQK3kFw9xxdjX7j+xxca8EY= -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:21 2025 by rpki-client