$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa File: 2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa (raw, json) Hash identifier: sBuFoH8PkFxtC/URPegy+wpxmtYmUedQT4FZ1bdlDKU= Subject key identifier: 7E:86:93:AC:B0:2F:E4:26:70:AC:96:3E:25:EB:CC:02:5F:54:EA:20 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584AA9C0DC6C836A72C718320C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa Signing time: Mon 28 Jul 2025 01:00:51 +0000 ROA not before: Mon 28 Jul 2025 01:00:51 +0000 ROA not after: Sun 26 Oct 2025 01:00:51 +0000 asID: 15169 IP address blocks: 172.217.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:c0:dc:6c:83:6a:72:c7:18:32:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 28 01:00:51 2025 GMT Not After : Oct 26 01:00:51 2025 GMT Subject: CN=e5ea341b-0d06-46a2-974b-f2c93b4e0df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:23:f0:80:cb:f6:d6:1a:ef:3f:6b:a5:46:fa: 6e:42:1a:37:72:8c:5e:65:f4:8c:da:24:ba:09:8e: 40:87:22:c6:cc:28:f3:fb:91:ed:be:df:2f:52:66: 4e:5c:38:6b:05:8e:68:a0:86:c3:3f:7f:f9:00:ee: 37:d0:f9:85:0d:29:4e:21:d2:76:aa:88:6b:30:b0: 99:56:b9:1d:44:c8:83:39:cb:b1:41:35:34:e1:bd: 3b:40:31:41:16:1e:49:11:14:bf:12:34:0e:52:17: b8:67:a3:e3:d7:76:75:c6:6d:87:82:ba:ed:3d:06: 0f:30:af:14:ca:48:57:8d:b0:56:40:7e:3d:e4:95: d0:c0:46:e7:d3:17:25:de:76:0e:53:a1:96:99:43: bf:16:31:fa:4f:55:dd:a2:ab:f0:de:30:1c:52:06: 12:f7:83:82:49:57:e5:6b:4c:66:ca:8f:b3:0d:7c: e2:fa:59:ae:4b:61:83:69:c3:d1:5a:0c:36:b6:5c: 35:2d:07:91:63:f2:42:68:7c:ec:14:bf:65:7e:ed: 6d:63:46:24:b4:f0:f5:e4:8f:a2:65:77:6e:92:0c: 65:4f:c4:be:2f:06:2a:8c:9b:71:40:a5:2d:d6:2d: 16:bf:8e:f0:bc:f8:88:94:38:c8:11:bd:2e:1d:7d: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:86:93:AC:B0:2F:E4:26:70:AC:96:3E:25:EB:CC:02:5F:54:EA:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7f:58:de:a8:20:48:0f:46:87:14:bf:f9:3f:8c:07:2a:75: d6:36:c3:34:9c:c2:57:76:3a:15:bf:2f:d5:4e:c1:ae:72:86: f0:bb:61:ed:b4:4b:f4:f6:85:95:65:8b:74:e7:7c:a1:4e:29: 72:77:74:2f:e5:01:f3:25:54:80:f8:80:c8:4f:00:41:b3:14: 8d:75:9e:d5:28:b5:7b:39:fd:77:57:50:e1:0a:24:2e:06:c9: b6:5f:58:0a:b9:d3:d1:b0:c5:49:05:a0:51:f1:e8:b4:d0:44: 1c:8b:18:d0:10:eb:01:76:5f:8d:e7:63:d0:cc:8e:77:c1:0c: 95:08:3a:28:be:e8:d0:7f:e1:95:70:eb:03:b1:1b:96:0f:d9: d6:14:6d:36:96:21:2c:47:4d:cb:7d:4a:d6:7f:03:cc:77:65: 30:9e:98:15:28:41:36:92:5c:8d:f5:f7:64:38:36:31:2c:66: 32:0c:5c:3a:0e:7d:4c:f3:5b:8f:f5:53:78:ab:af:93:de:09: b7:7e:20:c5:11:ba:a0:1a:dc:ec:63:2a:53:96:8d:b5:e1:56: 0f:50:5f:12:42:03:5c:ef:4f:9d:0f:0f:2f:c6:83:a5:c7:e1: e6:9e:61:ea:f4:6b:d8:fe:3a:27:f6:54:27:b4:43:64:e1:4e: c3:74:58:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqpwNxsg2pyxxgyDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyODAxMDA1MVoXDTI1MTAyNjAxMDA1MVowLzEtMCsGA1UEAxMk ZTVlYTM0MWItMGQwNi00NmEyLTk3NGItZjJjOTNiNGUwZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiPwgMv21hrvP2ulRvpuQho3coxeZfSM2iS6 CY5AhyLGzCjz+5Htvt8vUmZOXDhrBY5ooIbDP3/5AO430PmFDSlOIdJ2qohrMLCZ VrkdRMiDOcuxQTU04b07QDFBFh5JERS/EjQOUhe4Z6Pj13Z1xm2HgrrtPQYPMK8U ykhXjbBWQH495JXQwEbn0xcl3nYOU6GWmUO/FjH6T1Xdoqvw3jAcUgYS94OCSVfl a0xmyo+zDXzi+lmuS2GDacPRWgw2tlw1LQeRY/JCaHzsFL9lfu1tY0YktPD15I+i ZXdukgxlT8S+LwYqjJtxQKUt1i0Wv47wvPiIlDjIEb0uHX2SUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6Gk6ywL+QmcKyWPiXrzAJfVOogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmVlYTVlNDMtNGEyNy0z OTI4LTlhNmItZmJiNWNmMjMwODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl/WN6oIEgPRocUv/k/jAcqddY2wzScwld2OhW/L9VOwa5yhvC7Ye20 S/T2hZVli3TnfKFOKXJ3dC/lAfMlVID4gMhPAEGzFI11ntUotXs5/XdXUOEKJC4G ybZfWAq509GwxUkFoFHx6LTQRByLGNAQ6wF2X43nY9DMjnfBDJUIOii+6NB/4ZVw 6wOxG5YP2dYUbTaWISxHTct9StZ/A8x3ZTCemBUoQTaSXI3192Q4NjEsZjIMXDoO fUzzW4/1U3irr5PeCbd+IMURuqAa3OxjKlOWjbXhVg9QXxJCA1zvT50PDy/Gg6XH 4eaeYer0a9j+Oif2VCe0Q2ThTsN0WKs= -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:55 2025 by rpki-client