$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa File: 3c656b6b-cda2-308f-9d04-80808e67e293.roa (raw, json) Hash identifier: zOOzlMwimCVOcRWq6Vj9I0hZt89M/011D9fJRJtN47o= Subject key identifier: 87:21:E9:92:BC:95:92:4D:66:47:96:35:91:7F:40:9D:9E:76:9F:69 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841231342DE10752C58E1500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:31:34:2d:e1:07:52:c5:8e:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=05bbc3d7-a7a6-43b9-a9c7-5a424100002b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:a0:94:23:54:45:ab:19:d1:e6:53:f5:29: 1f:76:c4:70:5d:e7:03:98:06:24:14:64:be:80:40: 26:50:04:b0:38:9e:1d:cb:f0:8b:c5:ce:ba:0b:94: e2:bb:85:10:74:ec:40:01:7e:e9:c5:ff:00:06:18: da:c8:24:dd:5a:4c:7e:09:3f:77:3e:85:18:72:16: f3:5a:98:9d:68:bb:0c:3a:37:d2:6b:6f:5b:b8:ab: 8c:30:b8:47:b0:b7:17:b0:6a:2f:b1:fa:fc:9e:c1: 9b:ca:cc:b6:fe:cb:c0:80:18:30:21:55:fa:cf:7d: a3:9b:f1:99:cd:d5:05:ae:ad:71:61:0a:f6:31:0b: 59:7a:1f:2c:c5:ea:0c:d0:43:9c:da:39:9e:59:69: 47:4d:87:a1:bd:2f:d1:23:6d:ca:77:d6:f6:a6:7e: 93:3a:0e:08:28:bf:5b:c5:ae:61:7f:04:53:1e:23: 8d:b9:9e:28:77:a0:aa:f0:f5:3a:c2:54:9e:64:77: 15:0a:df:53:75:b1:83:ae:5f:05:d7:3f:a6:60:42: 80:61:bb:6c:98:39:d8:27:e5:d7:3c:4f:22:41:dd: 10:4f:8f:5a:ca:60:19:79:49:ce:de:e3:e2:14:43: f6:66:da:48:34:8d:88:fb:7c:88:ff:a0:c2:76:62: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:21:E9:92:BC:95:92:4D:66:47:96:35:91:7F:40:9D:9E:76:9F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:52:f6:56:de:db:46:97:9d:2c:c3:3a:15:d3:a6:6c:08:dd: 31:d2:d1:df:fa:1c:1d:28:8c:9f:c3:1c:97:65:d1:3f:4b:f0: 89:d3:97:5d:bf:f5:bd:0e:0e:d7:bc:a3:b6:3f:13:b0:ff:51: 33:fb:8a:fa:f2:dd:f6:f0:b1:d9:e5:0a:85:ae:fd:72:7c:a8: 63:c3:a2:b2:5d:15:85:8a:90:bb:a1:ed:e0:f1:f3:32:4f:29: 99:d7:bc:0f:77:a7:08:9c:7b:95:ae:46:ba:8a:18:bf:51:be: 5f:c2:40:2c:d7:8b:60:de:ea:c4:1b:89:72:58:64:75:cb:48: 99:35:65:c6:3c:2c:47:c8:4d:f8:02:26:92:1e:92:ed:09:f8: a0:8e:0b:52:db:fe:3d:f1:0a:b8:f2:11:98:50:5b:e3:a5:48: c3:1f:10:9e:84:45:70:a2:95:bf:89:7e:9c:aa:1a:69:e8:e3: c4:a4:88:c4:4c:79:3f:28:c5:ec:39:55:85:15:fb:a7:ad:d5: 16:ad:b6:9e:65:c3:fa:83:50:b3:a4:ef:4d:da:65:ca:3e:e8: 0e:b8:ea:ee:36:02:a1:48:31:60:7d:0e:9d:b5:1d:56:82:bf: 0b:d4:42:9d:e9:e9:fa:e8:c0:69:f8:23:e4:df:9a:b4:fb:c9: 63:1e:42:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjE0LeEHUsWOFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDViYmMzZDctYTdhNi00M2I5LWE5YzctNWE0MjQxMDAwMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxWglCNURasZ0eZT9SkfdsRwXecDmAYkFGS+ gEAmUASwOJ4dy/CLxc66C5Tiu4UQdOxAAX7pxf8ABhjayCTdWkx+CT93PoUYchbz WpidaLsMOjfSa29buKuMMLhHsLcXsGovsfr8nsGbysy2/svAgBgwIVX6z32jm/GZ zdUFrq1xYQr2MQtZeh8sxeoM0EOc2jmeWWlHTYehvS/RI23Kd9b2pn6TOg4IKL9b xa5hfwRTHiONuZ4od6Cq8PU6wlSeZHcVCt9TdbGDrl8F1z+mYEKAYbtsmDnYJ+XX PE8iQd0QT49aymAZeUnO3uPiFEP2ZtpINI2I+3yI/6DCdmImywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIch6ZK8lZJNZkeWNZF/QJ2edp9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2M2NTZiNmItY2RhMi0z MDhmLTlkMDQtODA4MDhlNjdlMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2DrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhS9lbe20aXnSzDOhXTpmwI3THS0d/6HB0ojJ/DHJdl0T9L8InTl12/ 9b0ODte8o7Y/E7D/UTP7ivry3fbwsdnlCoWu/XJ8qGPDorJdFYWKkLuh7eDx8zJP KZnXvA93pwice5WuRrqKGL9Rvl/CQCzXi2De6sQbiXJYZHXLSJk1ZcY8LEfITfgC JpIeku0J+KCOC1Lb/j3xCrjyEZhQW+OlSMMfEJ6ERXCilb+JfpyqGmno48SkiMRM eT8oxew5VYUV+6et1Rattp5lw/qDULOk703aZco+6A646u42AqFIMWB9Dp21HVaC vwvUQp3p6frowGn4I+TfmrT7yWMeQgc= -----END CERTIFICATE-----Generated at Mon Aug 4 14:48:44 2025 by rpki-client