$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30045496-fbf9-3b3d-abd4-a8521a8506ee.roa File: 30045496-fbf9-3b3d-abd4-a8521a8506ee.roa (raw, json) Hash identifier: FQJgC5aSbFi8mW7uQdQDsiNcfsXSxcsaO0lEfw3kqI4= Subject key identifier: 96:E4:0C:A0:F2:5F:7E:B1:36:AA:5C:E5:97:A5:31:96:C2:8C:17:B2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9A663AEFECA8735E5D0D8BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30045496-fbf9-3b3d-abd4-a8521a8506ee.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 15169 IP address blocks: 172.217.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:3a:ef:ec:a8:73:5e:5d:0d:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=a95eb1ac-4768-40fe-a4b7-f0fbefa71c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:1c:c4:23:08:80:74:ca:56:06:6e:4b:87: b4:09:83:58:27:8f:b0:1a:dc:74:b0:ae:42:5b:8d: fc:f7:03:a4:c0:13:de:37:96:84:58:ae:33:c0:e2: 9a:3e:7a:96:f4:f8:94:be:2f:02:eb:58:c1:80:65: 0c:fe:47:be:36:95:f5:e8:9d:fd:c1:76:bc:28:3b: 67:71:d0:47:90:0f:ef:d8:87:81:46:dc:e1:81:1a: 98:71:ef:19:c2:5b:80:f3:3e:d5:16:a6:f3:04:29: 50:52:a9:d5:f9:7b:47:6f:72:79:7d:31:44:70:2d: c2:25:48:94:0e:03:7a:a9:c6:fb:89:e4:ac:b4:c6: 8d:ad:aa:0f:c3:4e:b2:8c:7c:f4:d2:da:9d:bc:ab: b7:76:00:56:9f:42:e0:8b:ec:c6:65:23:2b:5d:88: a8:41:e2:a5:74:d6:9c:2c:44:2a:ca:8e:ca:85:bf: f8:b5:ff:4e:75:69:d7:25:16:9b:e7:fc:dd:98:78: 9f:12:cd:03:b4:d5:9e:7b:a0:86:8b:af:a7:ea:f4: f4:fa:ea:00:91:0a:88:1e:01:a1:20:88:74:1e:00: db:52:1b:7e:40:be:b0:74:a8:9e:7a:ac:09:59:0e: 90:5d:ef:4e:88:9c:92:8d:91:13:78:a5:92:9b:c9: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E4:0C:A0:F2:5F:7E:B1:36:AA:5C:E5:97:A5:31:96:C2:8C:17:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30045496-fbf9-3b3d-abd4-a8521a8506ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:19:74:eb:eb:a8:8b:d7:b9:06:27:03:2b:13:7a:93:17:f5: f8:7c:7d:6b:38:ed:2f:e1:bf:d0:67:ca:47:8a:fa:a7:26:ac: dc:e5:59:69:78:6b:91:d3:42:90:15:1a:b2:c8:52:45:75:ef: f6:60:e9:60:e1:44:14:ce:00:dc:95:2f:8f:a5:9d:7a:aa:80: a4:af:42:de:d4:9c:ba:d2:09:2e:3a:78:00:58:bd:e6:ef:44: 20:11:b6:3a:9c:71:60:36:0d:07:28:d7:41:95:1a:52:bd:5e: c9:73:ea:43:50:29:da:db:89:49:be:59:20:c8:cc:45:d3:fd: 6d:b5:90:49:36:30:6c:ff:dc:59:14:e2:bf:d4:fc:57:51:99: f0:0b:bc:eb:37:f9:e5:32:e6:07:6b:0b:33:6a:7c:19:6e:fd: 42:3d:4d:ce:36:20:2b:b6:4a:a8:57:78:a1:4e:00:6d:bd:12: fb:76:81:30:22:79:44:65:d9:3d:62:a2:8d:9c:37:56:de:3d: 47:79:8b:6b:43:ad:ea:bf:7a:83:2c:5f:4d:be:fa:48:e0:f6: d1:37:2e:b4:bf:08:fa:3b:89:36:9d:08:0a:ff:d6:71:0c:87: 5d:18:e5:1e:aa:31:ae:63:c4:0f:9b:af:1d:ba:78:d1:63:7e: 13:2c:eb:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjrv7KhzXl0Ni8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk YTk1ZWIxYWMtNDc2OC00MGZlLWE0YjctZjBmYmVmYTcxYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyocxCMIgHTKVgZuS4e0CYNYJ4+wGtx0sK5C W4389wOkwBPeN5aEWK4zwOKaPnqW9PiUvi8C61jBgGUM/ke+NpX16J39wXa8KDtn cdBHkA/v2IeBRtzhgRqYce8ZwluA8z7VFqbzBClQUqnV+XtHb3J5fTFEcC3CJUiU DgN6qcb7ieSstMaNraoPw06yjHz00tqdvKu3dgBWn0Lgi+zGZSMrXYioQeKldNac LEQqyo7Khb/4tf9OdWnXJRab5/zdmHifEs0DtNWee6CGi6+n6vT0+uoAkQqIHgGh IIh0HgDbUht+QL6wdKieeqwJWQ6QXe9OiJySjZETeKWSm8lE9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbkDKDyX36xNqpc5ZelMZbCjBeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzAwNDU0OTYtZmJmOS0z YjNkLWFiZDQtYTg1MjFhODUwNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkZdOvrqIvXuQYnAysTepMX9fh8fWs47S/hv9BnykeK+qcmrNzlWWl4 a5HTQpAVGrLIUkV17/Zg6WDhRBTOANyVL4+lnXqqgKSvQt7UnLrSCS46eABYvebv RCARtjqccWA2DQco10GVGlK9Xslz6kNQKdrbiUm+WSDIzEXT/W21kEk2MGz/3FkU 4r/U/FdRmfALvOs3+eUy5gdrCzNqfBlu/UI9Tc42ICu2SqhXeKFOAG29Evt2gTAi eURl2T1ioo2cN1bePUd5i2tDreq/eoMsX02++kjg9tE3LrS/CPo7iTadCAr/1nEM h10Y5R6qMa5jxA+brx26eNFjfhMs6y8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:48:08 2025 by rpki-client