$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/410e946b-75d7-31af-aefe-d32233f8166b.roa File: 410e946b-75d7-31af-aefe-d32233f8166b.roa (raw, json) Hash identifier: 68UUszwwJBiAekGBzGY0ODwv5ZlyR6/LsqH9WURTGbA= Subject key identifier: B1:AB:19:02:1A:68:7C:FB:2A:85:B4:98:FE:BF:3B:85:67:A6:17:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F90BE0FE96CC4635C880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/410e946b-75d7-31af-aefe-d32233f8166b.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.217.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f9:0b:e0:fe:96:cc:46:35:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=e8f2a655-208d-458a-b377-971e35403692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e4:9f:c9:5b:e8:1e:01:89:47:2e:c8:c2:33: ab:ce:0c:e1:18:ab:9a:b2:21:33:9e:bb:7f:e3:ec: 0f:6d:20:33:57:46:c2:9e:7e:9d:4a:6a:0a:47:31: 89:83:87:7f:eb:f8:6b:c8:07:97:ba:bb:80:10:9c: d5:ea:1a:78:8b:7e:0f:b8:c7:27:32:bf:06:92:b9: 8d:5a:ff:18:e4:e4:62:46:67:28:f2:9b:ae:4d:11: 91:0b:b0:99:6d:95:04:32:e1:e8:bf:74:5e:f4:be: c0:41:33:cc:b5:a5:15:58:8e:09:ca:df:85:9d:fc: f3:db:15:20:6b:ac:d2:5c:06:39:47:01:c8:c8:a1: 1a:7e:f2:a7:03:af:a2:79:09:3b:62:28:ff:56:5f: 2b:10:15:6a:59:88:bb:ca:20:5b:c2:18:6c:b1:fb: e8:52:e6:1a:78:e7:b5:29:10:19:ae:8a:2f:f3:5f: 2e:eb:96:70:ea:c5:bd:98:e0:87:19:82:97:50:4e: 09:53:93:91:99:e7:83:c6:03:92:88:34:13:92:c3: 18:16:03:de:78:14:93:0d:7d:a6:03:57:c1:5f:e9: a3:36:1e:3a:2e:f2:52:bb:48:08:c1:31:2a:38:79: cd:f5:4e:73:b3:ad:de:01:51:d4:e8:a1:a1:f1:63: bb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AB:19:02:1A:68:7C:FB:2A:85:B4:98:FE:BF:3B:85:67:A6:17:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/410e946b-75d7-31af-aefe-d32233f8166b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:20:9c:c5:b2:63:b9:6c:f9:8b:4f:bf:ee:42:39:26:9b:e5: 39:50:b9:63:eb:39:76:c0:bb:ae:51:83:61:7e:02:51:49:f3: 40:88:7c:18:91:ef:4b:de:45:65:fc:d0:6d:32:db:6e:40:ec: ed:6a:12:c2:3a:7c:6b:18:8e:bd:b2:73:7c:32:2f:ff:d6:5e: d5:24:d0:d9:74:78:c1:8a:a2:31:4e:7f:4e:59:7e:ed:13:99: 1b:e3:4c:6b:34:41:9a:e2:65:69:d3:75:e7:4a:b7:08:09:47: 6e:e2:94:b0:24:3e:aa:63:e5:ed:3d:82:9d:06:c2:a1:5d:5d: 99:f5:8f:bd:dc:19:ee:2c:1e:c2:d1:5c:e4:00:d0:8f:a2:e2: 9c:0b:e4:1d:82:de:18:d9:2c:be:6c:f3:70:21:ab:21:ad:b8: 09:b2:19:5a:4f:28:54:70:42:46:71:4d:f7:98:64:a7:77:a1: 6b:48:f4:a2:15:e3:80:f3:ad:d8:ae:1b:0d:10:0f:5c:ec:12: 15:b3:a5:93:4d:a9:5f:bb:3a:27:85:c7:60:11:c6:2e:19:9f: 7e:e8:db:7b:58:d8:e8:d6:d7:08:05:15:49:21:d1:3a:0f:e8: b7:76:05:15:8b:9b:19:83:b1:1e:31:55:67:9a:3b:a7:4f:a6: 27:b6:04:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPkL4P6WzEY1yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZThmMmE2NTUtMjA4ZC00NThhLWIzNzctOTcxZTM1NDAzNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuSfyVvoHgGJRy7IwjOrzgzhGKuasiEznrt/ 4+wPbSAzV0bCnn6dSmoKRzGJg4d/6/hryAeXuruAEJzV6hp4i34PuMcnMr8GkrmN Wv8Y5ORiRmco8puuTRGRC7CZbZUEMuHov3Re9L7AQTPMtaUVWI4Jyt+Fnfzz2xUg a6zSXAY5RwHIyKEafvKnA6+ieQk7Yij/Vl8rEBVqWYi7yiBbwhhssfvoUuYaeOe1 KRAZroov818u65Zw6sW9mOCHGYKXUE4JU5ORmeeDxgOSiDQTksMYFgPeeBSTDX2m A1fBX+mjNh46LvJSu0gIwTEqOHnN9U5zs63eAVHU6KGh8WO78QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGrGQIaaHz7KoW0mP6/O4VnphdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDEwZTk0NmItNzVkNy0z MWFmLWFlZmUtZDMyMjMzZjgxNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUgnMWyY7ls+YtPv+5COSab5TlQuWPrOXbAu65Rg2F+AlFJ80CIfBiR 70veRWX80G0y225A7O1qEsI6fGsYjr2yc3wyL//WXtUk0Nl0eMGKojFOf05Zfu0T mRvjTGs0QZriZWnTdedKtwgJR27ilLAkPqpj5e09gp0GwqFdXZn1j73cGe4sHsLR XOQA0I+i4pwL5B2C3hjZLL5s83AhqyGtuAmyGVpPKFRwQkZxTfeYZKd3oWtI9KIV 44DzrdiuGw0QD1zsEhWzpZNNqV+7OieFx2ARxi4Zn37o23tY2OjW1wgFFUkh0ToP 6Ld2BRWLmxmDsR4xVWeaO6dPpie2BKY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:11 2025 by rpki-client