$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/35fce67e-1ca8-39f2-8e85-058c8423c83a.roa File: 35fce67e-1ca8-39f2-8e85-058c8423c83a.roa (raw, json) Hash identifier: Av6omC52cr4pAPIWX3jZKKcmFWip3UdW5vSK+Pr+B2w= Subject key identifier: 95:AD:26:05:20:15:E9:36:EF:D7:D5:1D:B7:24:38:97:AB:CE:80:40 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F671A2BF06F19FEFD200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/35fce67e-1ca8-39f2-8e85-058c8423c83a.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.217.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f6:71:a2:bf:06:f1:9f:ef:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=d6dd4da2-f4df-470f-9c9d-d1519d560171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:88:7d:2c:00:87:83:6c:39:d1:c6:ea:f3:a8: 3e:1c:d9:e0:99:36:7c:e4:3f:a5:de:38:95:2d:2a: 7c:5d:3e:3c:41:b6:2b:67:e8:7f:5a:47:96:32:d9: ce:3e:27:7c:e0:cb:69:73:ea:69:3c:56:5e:4d:c4: e5:27:79:cc:04:1a:52:ed:55:7e:00:84:6d:d2:99: 36:92:60:2a:5f:81:9f:df:ac:ef:96:8b:77:05:55: 40:64:3f:8c:f0:da:38:54:49:af:ee:b5:82:4d:ae: a6:4a:75:6e:8b:5a:cd:99:59:17:3f:db:8e:b1:0e: b9:e7:5f:c5:3d:64:8d:87:69:b6:df:94:1c:06:7e: 54:09:0c:90:e4:2f:ff:01:b3:59:cd:b5:1e:c5:71: e2:ab:e5:ed:c9:a9:ff:c5:77:1a:a0:ab:05:f8:a0: 9d:7b:f8:ec:0b:04:fe:46:03:81:04:b3:ad:95:44: d1:cb:13:22:be:b5:31:c0:90:9a:75:aa:ea:4b:12: 4c:06:87:6a:27:21:4f:3d:de:be:2d:ba:f0:36:c6: 46:de:90:3e:ce:73:5b:db:b9:0d:4b:19:ac:c7:c2: 23:a9:2e:9a:62:32:fb:b1:d3:53:f2:63:ab:c1:ef: ad:c7:d5:ef:6e:c4:e9:e2:5a:c5:df:dc:bc:58:55: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AD:26:05:20:15:E9:36:EF:D7:D5:1D:B7:24:38:97:AB:CE:80:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/35fce67e-1ca8-39f2-8e85-058c8423c83a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:09:95:d2:fa:f2:19:01:d3:16:29:75:4e:95:97:e9:22:8a: 64:7d:c0:7e:99:fe:b5:9a:a1:dd:f1:1c:7a:07:6b:d3:2c:5f: 42:36:8b:5f:68:56:7a:44:70:cb:c6:94:70:51:1b:e5:5c:ea: e9:53:f2:37:bd:dd:60:89:83:ac:0a:5a:dc:ab:a5:b8:fe:b5: 2c:75:e3:25:d8:a7:4c:f6:5a:4f:e7:9f:37:09:22:25:34:3e: 83:a7:42:fb:02:01:b4:59:ff:80:2c:eb:c7:c9:4d:0b:7c:6f: 12:78:bc:7f:6a:8b:41:bc:da:35:32:67:9c:9c:d9:c7:ca:1f: d5:37:bf:53:6d:68:fc:fe:86:78:06:ae:3c:41:1d:92:ab:9c: 0e:02:f2:81:8e:57:e8:b1:a1:d5:1f:1e:3a:bd:ef:8e:8f:bf: fd:6f:45:51:5b:52:72:f2:7e:7c:0d:a0:77:36:58:36:ae:2a: 26:91:fb:85:aa:59:1a:03:71:9e:33:93:f7:eb:ce:c3:ed:54: fb:b3:42:d3:e5:c3:c4:4a:dc:0d:c4:1a:10:bc:ab:ee:1a:d7: c8:09:80:93:89:38:7c:25:f6:bc:f6:c4:52:d4:77:7d:e8:91: 42:0b:fe:a5:54:de:94:fa:80:75:3f:a4:b1:96:c9:84:b5:39: 67:f8:67:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPZxor8G8Z/v0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZDZkZDRkYTItZjRkZi00NzBmLTljOWQtZDE1MTlkNTYwMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoh9LACHg2w50cbq86g+HNngmTZ85D+l3jiV LSp8XT48QbYrZ+h/WkeWMtnOPid84Mtpc+ppPFZeTcTlJ3nMBBpS7VV+AIRt0pk2 kmAqX4Gf36zvlot3BVVAZD+M8No4VEmv7rWCTa6mSnVui1rNmVkXP9uOsQ6551/F PWSNh2m235QcBn5UCQyQ5C//AbNZzbUexXHiq+Xtyan/xXcaoKsF+KCde/jsCwT+ RgOBBLOtlUTRyxMivrUxwJCadarqSxJMBodqJyFPPd6+LbrwNsZG3pA+znNb27kN Sxmsx8IjqS6aYjL7sdNT8mOrwe+tx9XvbsTp4lrF39y8WFUiawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWtJgUgFek279fVHbckOJerzoBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzVmY2U2N2UtMWNhOC0z OWYyLThlODUtMDU4Yzg0MjNjODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwJldL68hkB0xYpdU6Vl+kiimR9wH6Z/rWaod3xHHoHa9MsX0I2i19o VnpEcMvGlHBRG+Vc6ulT8je93WCJg6wKWtyrpbj+tSx14yXYp0z2Wk/nnzcJIiU0 PoOnQvsCAbRZ/4As68fJTQt8bxJ4vH9qi0G82jUyZ5yc2cfKH9U3v1NtaPz+hngG rjxBHZKrnA4C8oGOV+ixodUfHjq9746Pv/1vRVFbUnLyfnwNoHc2WDauKiaR+4Wq WRoDcZ4zk/frzsPtVPuzQtPlw8RK3A3EGhC8q+4a18gJgJOJOHwl9rz2xFLUd33o kUIL/qVU3pT6gHU/pLGWyYS1OWf4Z0U= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:36 2025 by rpki-client