$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa File: 42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa (raw, json) Hash identifier: MxH4TsvC0uNwvSRdjn1wiXmJv/1F4oTRpquxpwDI1/k= Subject key identifier: 3B:E6:4D:73:34:3C:77:08:36:F0:3C:85:F9:64:90:9B:0A:8A:5D:FF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F94443FF51F4E9556D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.217.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f9:44:43:ff:51:f4:e9:55:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=90514f1c-b36b-4f25-a8bd-a2f797452e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9e:26:3f:50:d9:38:26:d1:0a:a0:3e:a9:23: 32:b7:68:02:77:ae:89:cc:c0:de:11:70:5b:a7:f7: 63:72:d7:76:4f:fb:f7:60:b3:26:89:54:d0:77:9e: 50:c1:63:17:b8:f3:57:0a:67:cc:71:97:cd:32:54: 5c:be:dc:02:01:dd:c1:4f:b2:4e:a8:66:13:cb:09: 49:3c:06:44:e4:76:ec:25:d8:61:9b:2d:1f:3d:12: dd:91:13:43:12:c9:e1:ce:a6:80:d5:1a:bf:56:4d: 25:b2:ff:4f:8b:9e:4f:6f:bd:2f:48:55:96:e8:0f: 9a:0b:d7:11:e2:32:e1:54:d1:f8:a3:07:c0:da:98: f0:ed:52:3d:6e:43:c6:e3:42:8f:af:73:0f:04:bb: 95:25:ec:e6:11:c6:21:42:2f:9f:c4:1e:68:5e:2a: a8:10:27:c5:71:e6:47:a5:7a:d4:54:ac:65:b3:61: 03:d4:f7:be:90:45:a3:27:63:34:db:71:47:d3:eb: dc:f4:9e:ae:92:0b:c6:84:82:38:8c:b1:73:13:31: 17:57:31:73:3e:1b:5d:28:e5:b3:11:38:30:de:3e: b2:a4:a1:bd:cf:fe:98:5d:80:59:10:61:b5:fc:14: c8:64:64:00:d7:dc:b9:75:be:26:22:85:e9:0c:70: 58:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E6:4D:73:34:3C:77:08:36:F0:3C:85:F9:64:90:9B:0A:8A:5D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:99:70:4c:e9:12:21:d4:a2:ef:68:60:28:52:bb:b8:e4:9b: 60:1d:e1:a5:92:98:c2:f5:1b:d2:55:bb:77:37:75:5f:45:4e: 55:6d:69:0f:43:bb:10:e9:7e:17:81:86:fb:40:97:28:96:c2: 23:85:d2:20:06:ba:1d:27:37:5b:a2:28:95:30:57:59:79:00: bd:c7:0b:91:c0:c4:5e:44:b9:2a:79:41:49:99:f5:35:20:7c: 1b:41:a4:6f:36:d1:4a:bd:08:f6:85:e0:84:60:4c:54:a8:55: 10:5a:e5:e5:2c:e4:d2:f1:68:84:c7:9c:4d:26:aa:4d:c5:a3: 10:2c:a6:f8:7f:f8:07:10:d2:7f:9e:3d:af:1e:33:8c:3a:c0: c3:78:5e:19:11:a2:41:7a:95:e5:ff:43:ab:10:07:33:7e:4f: aa:b7:ad:99:6f:97:63:2f:eb:ba:95:e7:ba:60:79:c2:c7:00: 27:a0:04:01:9c:c3:bb:4d:6f:95:13:5f:92:35:9b:6a:97:7e: 7c:b5:6c:32:c3:5f:c5:a3:a5:7e:ce:13:d8:38:8b:66:15:f6: 77:cc:e0:fc:47:86:30:ea:18:6c:6d:22:b2:4b:c8:46:a1:38: 68:6e:0f:0f:98:f3:99:e5:87:47:87:60:11:cc:8b:f5:b3:fe: 71:30:b8:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPlEQ/9R9OlVbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk OTA1MTRmMWMtYjM2Yi00ZjI1LWE4YmQtYTJmNzk3NDUyZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl54mP1DZOCbRCqA+qSMyt2gCd66JzMDeEXBb p/djctd2T/v3YLMmiVTQd55QwWMXuPNXCmfMcZfNMlRcvtwCAd3BT7JOqGYTywlJ PAZE5HbsJdhhmy0fPRLdkRNDEsnhzqaA1Rq/Vk0lsv9Pi55Pb70vSFWW6A+aC9cR 4jLhVNH4owfA2pjw7VI9bkPG40KPr3MPBLuVJezmEcYhQi+fxB5oXiqoECfFceZH pXrUVKxls2ED1Pe+kEWjJ2M023FH0+vc9J6ukgvGhII4jLFzEzEXVzFzPhtdKOWz ETgw3j6ypKG9z/6YXYBZEGG1/BTIZGQA19y5db4mIoXpDHBYBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvmTXM0PHcINvA8hflkkJsKil3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDJhZmNlYmItMTVkYy0z OGE5LWE2MGEtMjc2YTllYmYxZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICZcEzpEiHUou9oYChSu7jkm2Ad4aWSmML1G9JVu3c3dV9FTlVtaQ9D uxDpfheBhvtAlyiWwiOF0iAGuh0nN1uiKJUwV1l5AL3HC5HAxF5EuSp5QUmZ9TUg fBtBpG820Uq9CPaF4IRgTFSoVRBa5eUs5NLxaITHnE0mqk3FoxAspvh/+AcQ0n+e Pa8eM4w6wMN4XhkRokF6leX/Q6sQBzN+T6q3rZlvl2Mv67qV57pgecLHACegBAGc w7tNb5UTX5I1m2qXfny1bDLDX8WjpX7OE9g4i2YV9nfM4PxHhjDqGGxtIrJLyEah OGhuDw+Y85nlh0eHYBHMi/Wz/nEwuA0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:49 2025 by rpki-client