$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4981af08-7878-344a-892f-01ab6f8b7d9d.roa File: 4981af08-7878-344a-892f-01ab6f8b7d9d.roa (raw, json) Hash identifier: v1ShdNlAGhBr+jgHK3m3j9AT0xz5vC7FzigSlpOyWf8= Subject key identifier: 14:EC:85:2C:21:15:5A:B0:51:72:EE:D2:C4:DE:C8:04:44:B6:AA:12 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841187BAB8F29602D3F290A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4981af08-7878-344a-892f-01ab6f8b7d9d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:87:ba:b8:f2:96:02:d3:f2:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fc6b4155-84d5-4e47-817a-18365f89a480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8e:19:b1:ba:98:2e:ed:cf:74:48:de:b7:1f: 0f:59:d2:ed:be:dc:07:05:cc:5a:89:b6:d8:72:ae: 3a:e3:b5:77:aa:52:37:88:20:74:62:39:7e:11:21: 27:f0:8e:d5:b0:4e:83:c0:04:9c:0f:ea:fb:34:25: e9:99:61:8a:d4:b8:35:76:ee:99:d0:80:f1:c8:81: 93:62:70:1c:cc:9f:89:9f:63:b6:f1:1b:43:6e:6c: 94:91:c4:cd:be:5e:35:c1:cc:b6:74:83:8d:b4:9d: f1:d3:79:59:8e:ba:ff:c2:a6:83:f1:06:bd:14:c5: 42:10:6e:d1:7f:67:4b:e5:ed:a3:ec:a6:50:ad:41: bd:1d:46:10:3b:a1:11:69:56:34:5e:56:40:21:28: b9:a4:a9:6b:af:bc:5d:2f:4f:65:06:f2:6d:d2:22: c3:84:1b:a7:88:66:bf:54:9d:85:ea:0e:f6:06:7b: ae:76:b1:33:78:7e:f2:74:c4:3d:75:39:7e:5d:d8: 67:55:dd:7b:a5:d6:3f:87:4f:63:da:78:ad:95:ea: f0:01:41:92:cb:9b:b5:17:83:80:6b:7d:ec:d9:8b: b9:29:c3:06:49:9e:94:94:90:5f:9d:a4:bc:35:69: 7a:1d:99:4d:1d:8f:cb:49:fc:15:14:20:68:72:38: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EC:85:2C:21:15:5A:B0:51:72:EE:D2:C4:DE:C8:04:44:B6:AA:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4981af08-7878-344a-892f-01ab6f8b7d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9c:7b:93:2f:c2:e8:52:d1:ba:29:fa:23:78:56:4e:a8:a8: 4a:3e:a4:46:b5:4e:33:e5:a5:bf:83:54:8d:f6:a5:e9:5c:1f: e8:9c:d7:36:36:e8:15:02:a2:b5:22:af:e0:36:fd:71:d5:c0: 44:4e:7d:4f:93:87:0a:e7:0e:24:4c:54:74:2b:f2:8e:1a:d6: 2b:76:46:d7:46:3a:07:72:60:29:32:47:54:73:92:01:8f:5e: 25:bc:06:c1:1b:a4:b3:48:d9:6e:d6:a7:6e:51:2a:8d:c6:8a: 89:b0:b8:13:d4:b3:8c:6b:fe:9a:a3:11:33:f9:72:a2:1c:ac: 11:7d:a8:94:e2:08:16:23:fa:04:b7:0b:02:e7:36:1a:4c:a1: d9:f2:4d:a1:d3:8a:93:07:4d:57:d8:a1:40:f3:d9:a0:12:be: 74:c5:29:8b:aa:e9:a2:f5:1a:6c:55:e4:56:a3:ce:88:6a:67: d4:7a:3b:7e:b3:7d:ee:28:6a:81:6a:bb:6b:bd:f2:aa:93:25: 77:d4:0f:af:6e:2c:b9:4e:04:14:00:4a:2f:58:79:94:d3:f3: 0d:4e:30:65:44:6d:c0:db:73:c5:3c:9c:5f:2e:63:26:20:48: c6:c7:fa:08:f3:a9:ea:76:d5:6e:b7:1d:9a:a4:da:a8:af:ca: 16:4e:68:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYe6uPKWAtPykKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmM2YjQxNTUtODRkNS00ZTQ3LTgxN2EtMTgzNjVmODlhNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I4ZsbqYLu3PdEjetx8PWdLtvtwHBcxaibbY cq4647V3qlI3iCB0Yjl+ESEn8I7VsE6DwAScD+r7NCXpmWGK1Lg1du6Z0IDxyIGT YnAczJ+Jn2O28RtDbmyUkcTNvl41wcy2dIONtJ3x03lZjrr/wqaD8Qa9FMVCEG7R f2dL5e2j7KZQrUG9HUYQO6ERaVY0XlZAISi5pKlrr7xdL09lBvJt0iLDhBuniGa/ VJ2F6g72BnuudrEzeH7ydMQ9dTl+XdhnVd17pdY/h09j2nitlerwAUGSy5u1F4OA a33s2Yu5KcMGSZ6UlJBfnaS8NWl6HZlNHY/LSfwVFCBocjgn4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTshSwhFVqwUXLu0sTeyAREtqoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDk4MWFmMDgtNzg3OC0z NDRhLTg5MmYtMDFhYjZmOGI3ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAice5MvwuhS0bop+iN4Vk6oqEo+pEa1TjPlpb+DVI32pelcH+ic1zY2 6BUCorUir+A2/XHVwEROfU+ThwrnDiRMVHQr8o4a1it2RtdGOgdyYCkyR1RzkgGP XiW8BsEbpLNI2W7Wp25RKo3GiomwuBPUs4xr/pqjETP5cqIcrBF9qJTiCBYj+gS3 CwLnNhpModnyTaHTipMHTVfYoUDz2aASvnTFKYuq6aL1GmxV5FajzohqZ9R6O36z fe4oaoFqu2u98qqTJXfUD69uLLlOBBQASi9YeZTT8w1OMGVEbcDbc8U8nF8uYyYg SMbH+gjzqep21W63HZqk2qivyhZOaJc= -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:42 2025 by rpki-client