$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa File: 353aa361-816d-338e-89e8-88e5fd85eccc.roa (raw, json) Hash identifier: qglqzHQvmr+v8aOOZCvzcDDW1N3MnL1WClZICccw4Zw= Subject key identifier: 92:51:1D:1C:74:A3:14:EB:B1:14:45:E5:C2:EE:45:CD:3D:73:C1:AE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122CF880328FCACD503520 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2c:f8:80:32:8f:ca:cd:50:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4c16c4f4-5a83-4564-8f8a-9ea2653cb9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:b1:e6:7e:c0:d2:52:c1:51:2c:eb:15:93: d3:d0:07:78:a5:e2:ce:48:96:91:66:60:4a:29:7d: ae:8f:59:f2:7c:fd:07:c6:c6:6c:2d:f2:92:57:1d: f9:00:95:0e:3c:40:78:33:c6:32:1d:d3:88:6e:ca: 1d:3b:85:e2:14:e7:f1:6a:55:e1:99:8b:8a:d8:5a: 75:44:24:96:f9:f0:65:d9:3e:ed:00:7d:eb:77:0c: f7:2e:4e:ee:91:98:62:ac:fe:36:1f:a1:11:84:ee: 14:36:af:75:26:11:82:30:5c:f2:17:6e:b8:64:aa: fe:67:2f:66:7a:d1:66:a4:76:2f:bc:ce:d8:bc:55: 4d:cf:1e:95:25:09:ac:69:b3:be:8d:e1:a4:02:93: 2a:c5:94:01:fa:4d:64:c0:03:eb:c0:b8:77:ce:be: f0:4c:9d:05:56:01:03:99:78:df:42:16:b6:cc:58: df:71:13:c9:6d:90:e6:92:e5:b6:42:6d:1d:b5:25: db:2c:2d:d3:d7:c7:2c:1e:90:a4:0f:82:e7:0d:f2: 5b:b4:d6:69:a0:6f:7f:57:3c:ee:2f:70:c6:ed:5e: 1a:e3:25:ba:f8:3b:f1:b1:23:a1:13:28:9f:f8:f1: 78:80:f7:ff:5a:bf:3f:93:6c:aa:bc:2e:d0:10:23: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:51:1D:1C:74:A3:14:EB:B1:14:45:E5:C2:EE:45:CD:3D:73:C1:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:96:10:97:89:86:b4:ff:95:cd:d8:50:ba:69:18:d4:21:13: 06:1e:86:45:22:07:91:cc:14:a7:2f:6c:0e:12:1c:4c:c7:b3: 9b:d0:d0:1d:17:2a:29:ee:df:4c:62:b5:94:37:a9:03:58:cd: f1:5d:c8:af:8b:59:10:fd:35:d9:7a:61:3a:22:5d:43:1d:c3: c0:94:f5:b0:ff:b8:04:02:58:00:a3:9d:c5:c1:25:21:ff:ee: 6f:8a:99:cb:dd:da:aa:f4:79:a0:78:fe:0a:5e:6a:dd:8d:a2: e4:93:85:f5:29:94:9d:4b:b1:db:cc:7f:b9:4a:c8:3a:f6:9f: 9d:c9:bd:60:34:79:17:1d:9b:4b:f7:d5:76:4a:4b:26:fa:19: 9c:c1:0c:44:e2:15:23:6a:90:09:9d:ff:61:af:65:13:b1:ca: 66:88:d0:54:8f:76:02:e4:d2:08:71:07:1f:84:2d:f5:ea:79: 80:75:ea:12:38:c5:73:58:a4:3d:73:bd:13:8d:21:1e:c4:a5: 80:0a:51:a0:16:6f:19:5f:73:64:45:d3:4d:7f:63:20:ee:4e: b1:53:bb:d3:ff:38:ff:16:51:4d:66:67:19:bd:e8:ab:35:f9: cc:3a:f8:e8:08:41:aa:df:5e:74:6d:b2:4f:dd:55:a4:cd:62: 01:c5:e5:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiz4gDKPys1QNSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGMxNmM0ZjQtNWE4My00NTY0LThmOGEtOWVhMjY1M2NiOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldyx5n7A0lLBUSzrFZPT0Ad4peLOSJaRZmBK KX2uj1nyfP0HxsZsLfKSVx35AJUOPEB4M8YyHdOIbsodO4XiFOfxalXhmYuK2Fp1 RCSW+fBl2T7tAH3rdwz3Lk7ukZhirP42H6ERhO4UNq91JhGCMFzyF264ZKr+Zy9m etFmpHYvvM7YvFVNzx6VJQmsabO+jeGkApMqxZQB+k1kwAPrwLh3zr7wTJ0FVgED mXjfQha2zFjfcRPJbZDmkuW2Qm0dtSXbLC3T18csHpCkD4LnDfJbtNZpoG9/Vzzu L3DG7V4a4yW6+DvxsSOhEyif+PF4gPf/Wr8/k2yqvC7QECNhGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJRHRx0oxTrsRRF5cLuRc09c8GuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzUzYWEzNjEtODE2ZC0z MzhlLTg5ZTgtODhlNWZkODVlY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6WEJeJhrT/lc3YULppGNQhEwYehkUiB5HMFKcvbA4SHEzHs5vQ0B0X Kinu30xitZQ3qQNYzfFdyK+LWRD9Ndl6YToiXUMdw8CU9bD/uAQCWACjncXBJSH/ 7m+Kmcvd2qr0eaB4/gpeat2NouSThfUplJ1LsdvMf7lKyDr2n53JvWA0eRcdm0v3 1XZKSyb6GZzBDETiFSNqkAmd/2GvZROxymaI0FSPdgLk0ghxBx+ELfXqeYB16hI4 xXNYpD1zvRONIR7EpYAKUaAWbxlfc2RF001/YyDuTrFTu9P/OP8WUU1mZxm96Ks1 +cw6+OgIQarfXnRtsk/dVaTNYgHF5QY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:08 2025 by rpki-client