$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa File: 3abee81f-b508-3c4e-9dc5-859969e3d79e.roa (raw, json) Hash identifier: Wfwqu2DWfX/pS+GYv1AW7PcE9yXGzKv/av0qY0y7hGQ= Subject key identifier: 45:10:97:5B:D5:9B:E1:22:03:82:E4:1F:8B:10:5B:72:58:FB:E3:AE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118F9AD631454F13460800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8f:9a:d6:31:45:4f:13:46:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b0e07605-043e-49cb-9730-24df5e2ea9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4e:07:0f:0a:11:a2:9f:80:32:be:c4:c6:53: e6:aa:4a:f7:da:61:55:a5:73:28:da:4b:92:0b:3c: a9:54:9a:61:cc:b6:61:8c:2b:70:31:cf:4a:91:b7: bd:72:2b:13:ce:3d:16:41:ce:09:3d:bd:5c:c4:7a: 13:22:ad:b6:6e:bc:6c:41:1e:3f:79:a9:fc:82:ad: a5:70:18:da:b4:dc:4c:9d:e2:bd:88:37:d1:22:ea: fb:88:80:03:cb:40:a7:b1:b6:b8:8b:b8:dc:4d:98: 76:fe:99:04:cf:9f:28:3a:bc:cc:cc:71:38:95:d3: a3:1f:80:73:38:e7:dc:91:63:b2:8c:a1:ef:05:fd: 29:5d:f4:d4:6e:39:2f:93:b9:98:69:ee:0d:56:58: d2:19:43:d0:8c:87:90:29:a2:31:8a:d6:25:2d:68: cb:76:41:13:35:ec:cd:35:bc:3f:83:a3:6e:59:45: b9:4d:c8:85:4e:22:21:db:fc:51:32:fd:6e:04:93: 3c:8a:bf:ff:5d:70:68:d6:43:d2:ca:a8:de:15:d2: 8d:96:d0:91:9a:fb:ac:03:6e:db:11:44:d3:96:65: e9:e7:07:af:fd:d2:90:b9:ab:3c:f2:e0:28:86:ac: ce:ec:b5:f8:1c:0d:38:86:c3:f6:41:ca:52:87:7b: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:10:97:5B:D5:9B:E1:22:03:82:E4:1F:8B:10:5B:72:58:FB:E3:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:67:11:d8:c0:d5:cb:58:85:c9:44:62:d8:d5:d0:4c:98:bc: 76:a3:2b:61:ce:44:ad:32:9b:eb:58:e2:9d:eb:06:21:03:52: 4c:c4:33:ed:45:d5:4f:85:d8:48:a3:b6:14:94:0a:d5:70:20: 70:6a:1d:1e:80:ec:6b:77:69:a4:ec:f6:0d:91:96:d2:a4:ef: 5c:6e:ab:a5:4a:22:ae:7f:87:15:45:fb:e1:7e:5d:ca:3f:ae: 16:98:f0:59:45:5c:29:b2:52:09:4e:95:bb:6c:d1:e6:09:ef: 3d:b7:a7:5a:f1:1b:84:28:66:c3:ac:4f:86:8a:c7:e8:17:a0: ae:87:84:b5:82:c8:4e:a6:eb:ba:49:93:aa:63:5b:d6:f7:50: 74:83:54:ad:d2:b7:6e:a7:80:b6:ee:26:0a:11:d5:39:14:76: a3:6d:cf:21:00:b8:12:93:b8:2c:71:7d:4e:f4:bd:12:8a:ea: 35:ab:96:d0:cb:89:d5:ca:25:e1:9d:e6:7e:5f:08:fe:b3:07: 2d:0d:e6:be:9b:f1:ef:a3:cd:20:ba:2e:b3:9d:0d:c1:18:e2: b6:14:c3:34:99:8e:5b:21:02:01:e1:f8:4a:39:c5:1a:96:1a: 4c:ea:e3:d2:b7:0e:57:6d:ce:0d:bd:35:ba:0e:a0:cd:b8:a8: cd:19:f5:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEY+a1jFFTxNGCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjBlMDc2MDUtMDQzZS00OWNiLTk3MzAtMjRkZjVlMmVhOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi04HDwoRop+AMr7ExlPmqkr32mFVpXMo2kuS CzypVJphzLZhjCtwMc9Kkbe9cisTzj0WQc4JPb1cxHoTIq22brxsQR4/ean8gq2l cBjatNxMneK9iDfRIur7iIADy0Cnsba4i7jcTZh2/pkEz58oOrzMzHE4ldOjH4Bz OOfckWOyjKHvBf0pXfTUbjkvk7mYae4NVljSGUPQjIeQKaIxitYlLWjLdkETNezN Nbw/g6NuWUW5TciFTiIh2/xRMv1uBJM8ir//XXBo1kPSyqjeFdKNltCRmvusA27b EUTTlmXp5wev/dKQuas88uAohqzO7LX4HA04hsP2QcpSh3uKsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUQl1vVm+EiA4LkH4sQW3JY++OuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FiZWU4MWYtYjUwOC0z YzRlLTlkYzUtODU5OTY5ZTNkNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVnEdjA1ctYhclEYtjV0EyYvHajK2HORK0ym+tY4p3rBiEDUkzEM+1F 1U+F2EijthSUCtVwIHBqHR6A7Gt3aaTs9g2RltKk71xuq6VKIq5/hxVF++F+Xco/ rhaY8FlFXCmyUglOlbts0eYJ7z23p1rxG4QoZsOsT4aKx+gXoK6HhLWCyE6m67pJ k6pjW9b3UHSDVK3St26ngLbuJgoR1TkUdqNtzyEAuBKTuCxxfU70vRKK6jWrltDL idXKJeGd5n5fCP6zBy0N5r6b8e+jzSC6LrOdDcEY4rYUwzSZjlshAgHh+Eo5xRqW Gkzq49K3Dldtzg29NboOoM24qM0Z9Qk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:58:30 2025 by rpki-client