$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa File: 3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa (raw, json) Hash identifier: lbtM1tE8j0srqpgMp2DcrUkv36vf9gC7gKYviu/VF/k= Subject key identifier: 05:14:46:E4:FA:1E:5A:7B:85:19:55:9F:74:27:5C:3B:D7:AD:8A:9D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30EF764F66BBF022D655A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.217.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:ef:76:4f:66:bb:f0:22:d6:55:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=63a166e7-b71d-4eae-b80e-483b7feba509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:73:66:41:b7:9c:63:ff:ea:30:88:66:0b: da:d3:ba:d5:8d:69:8a:6c:5c:cb:c1:5f:6c:8c:d2: 26:2e:88:8c:43:7b:cb:ec:3b:e3:58:00:55:6b:77: e0:d6:02:c6:a2:95:3b:b5:1d:e6:7c:45:b2:56:31: 3a:1e:24:3c:d4:d1:c9:a4:da:8b:9d:99:73:cd:75: 26:ba:7f:8a:30:bb:e4:cf:75:70:70:5e:62:f5:18: c0:ee:e7:ef:49:9a:e6:ab:89:4e:91:98:e8:69:c7: cc:68:52:f6:10:a4:7e:a9:78:77:65:3a:7d:c3:5c: d3:fe:35:3d:37:35:ba:17:2e:55:86:40:9b:ad:85: 8e:4e:a2:c7:f6:0e:8e:50:5d:fe:0c:58:54:ea:39: c2:71:a5:8d:e9:8c:75:6f:77:fc:04:25:37:47:ca: 68:be:a4:c3:8f:2d:0d:1a:83:d4:d1:07:65:00:43: 30:59:9d:a8:77:70:74:d9:cb:87:54:47:c3:e1:dd: 8b:17:f9:71:fa:5d:b2:a2:b0:f7:63:0b:15:b3:e1: b0:bf:ae:ea:0c:bb:57:05:01:3c:d0:48:ea:ff:55: 6d:37:bc:f7:61:dd:f8:57:57:f3:d3:59:ad:ea:a7: 62:50:18:2c:2d:c9:1e:38:e0:6b:42:23:17:3f:ce: 42:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:14:46:E4:FA:1E:5A:7B:85:19:55:9F:74:27:5C:3B:D7:AD:8A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5d:a4:01:45:e8:eb:e0:35:9a:24:da:d9:3b:ca:79:49:21: 42:04:f0:e0:65:d2:9a:fb:6f:98:cd:64:a6:65:c5:11:83:22: fa:4e:46:01:c1:7a:05:2c:fb:26:40:7b:59:56:da:8e:74:9a: 66:73:97:ab:ae:4a:49:9a:33:c9:84:3f:cb:f5:aa:2c:8e:6b: a9:cb:36:70:70:2c:b3:d4:c0:79:00:f4:ef:52:a9:54:89:75: a9:7c:a4:c3:63:48:00:26:32:c3:17:6f:72:21:fb:ad:82:e6: 64:40:fe:a5:01:b1:2a:66:a5:08:48:e8:1d:56:1d:d8:44:21: 0d:bb:c6:e5:68:b6:aa:02:5d:ec:89:df:59:de:99:81:04:1e: 8a:02:1a:b9:93:b3:ad:47:46:8d:14:89:c3:02:08:3f:c3:36: fd:3c:41:e5:56:27:39:95:d1:91:70:e9:81:36:92:1d:7e:39: 7e:cc:5d:3a:29:c7:99:96:34:26:07:3e:71:40:df:9f:de:a7: 01:de:d5:3f:af:d5:0b:ea:dd:bb:30:a5:03:5f:aa:b3:d2:2d: 46:5d:d5:1b:94:c7:51:db:cd:90:eb:5a:02:80:75:bc:1a:81: a8:6c:c5:76:56:89:79:14:bf:37:50:95:04:be:25:ba:52:40: fd:08:c7:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMO92T2a78CLWVaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NjNhMTY2ZTctYjcxZC00ZWFlLWI4MGUtNDgzYjdmZWJhNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8pzZkG3nGP/6jCIZgva07rVjWmKbFzLwV9s jNImLoiMQ3vL7DvjWABVa3fg1gLGopU7tR3mfEWyVjE6HiQ81NHJpNqLnZlzzXUm un+KMLvkz3VwcF5i9RjA7ufvSZrmq4lOkZjoacfMaFL2EKR+qXh3ZTp9w1zT/jU9 NzW6Fy5VhkCbrYWOTqLH9g6OUF3+DFhU6jnCcaWN6Yx1b3f8BCU3R8povqTDjy0N GoPU0QdlAEMwWZ2od3B02cuHVEfD4d2LF/lx+l2yorD3YwsVs+Gwv67qDLtXBQE8 0Ejq/1VtN7z3Yd34V1fz01mt6qdiUBgsLckeOOBrQiMXP85ChwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUURuT6Hlp7hRlVn3QnXDvXrYqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2RkYTlmYTgtYjY5Yi0z Y2I0LTliZjEtNTJhZGY5OGYxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpdpAFF6OvgNZok2tk7ynlJIUIE8OBl0pr7b5jNZKZlxRGDIvpORgHB egUs+yZAe1lW2o50mmZzl6uuSkmaM8mEP8v1qiyOa6nLNnBwLLPUwHkA9O9SqVSJ dal8pMNjSAAmMsMXb3Ih+62C5mRA/qUBsSpmpQhI6B1WHdhEIQ27xuVotqoCXeyJ 31nemYEEHooCGrmTs61HRo0UicMCCD/DNv08QeVWJzmV0ZFw6YE2kh1+OX7MXTop x5mWNCYHPnFA35/epwHe1T+v1Qvq3bswpQNfqrPSLUZd1RuUx1HbzZDrWgKAdbwa gahsxXZWiXkUvzdQlQS+JbpSQP0Ix7A= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:21 2025 by rpki-client