$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a2bdc4-401d-3385-a004-a6db5099550f.roa File: 56a2bdc4-401d-3385-a004-a6db5099550f.roa (raw, json) Hash identifier: +yDK4qKadaQa98frcwaVZG1ndl0kz9Eg05OyLtBWQnI= Subject key identifier: D6:0E:69:A6:79:6F:E9:11:76:D8:F0:00:F4:6D:BC:B5:A4:D5:4D:18 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122C62DF13779B28B3BED0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a2bdc4-401d-3385-a004-a6db5099550f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2c:62:df:13:77:9b:28:b3:be:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ff666bf2-9ae9-45ef-8692-36dc8eb8a424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:cc:9e:ee:05:92:3a:c3:60:d3:88:e9:92: 69:f9:8d:10:4e:0c:73:13:89:0f:c1:17:ed:83:e0: 41:e2:86:fc:12:b9:80:57:83:fc:c6:95:82:ba:9b: 75:c3:90:5b:ca:2b:19:1b:5f:10:2f:14:f9:44:28: 25:0c:50:a7:84:81:f1:1e:6c:ec:4d:42:e9:79:6d: e2:33:74:28:f4:51:be:26:cf:b6:9d:87:43:f7:0d: 58:6c:82:75:a1:2f:f1:3a:15:4a:14:64:8f:5d:54: 52:0d:77:8a:e4:5f:61:53:af:26:41:83:7a:65:b3: 83:1c:4e:e6:91:e6:bb:ac:cc:6a:a6:e8:89:aa:bd: 1b:65:3e:be:09:b4:68:30:73:fa:ab:bb:64:05:2b: 4e:87:11:d8:10:e7:2b:65:b6:44:1f:f5:2b:8e:33: 11:0a:fb:f9:8b:21:8b:f2:62:cd:41:97:40:93:b2: 93:56:18:f5:0d:39:fd:57:e2:31:dd:fe:2b:62:e2: 7b:da:95:06:d9:c5:3a:56:fd:9b:16:85:54:94:35: 60:36:bf:d1:24:53:25:c1:20:f5:08:24:95:ff:3e: d6:4a:ff:0a:a7:e5:a0:35:3e:44:50:82:46:6f:f5: eb:38:43:3d:57:41:c0:46:fe:3a:90:36:7b:ff:ae: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0E:69:A6:79:6F:E9:11:76:D8:F0:00:F4:6D:BC:B5:A4:D5:4D:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a2bdc4-401d-3385-a004-a6db5099550f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:86:a1:95:60:c0:ff:70:c1:10:be:40:9e:1a:43:9b:6a:7b: 6c:3d:48:65:03:9f:df:e7:45:69:5e:eb:b1:62:04:84:c7:2b: 7a:3d:57:a0:0a:72:fc:73:97:39:ac:8e:0e:e1:1c:03:4f:80: 01:04:e8:c7:61:95:42:4c:d4:e8:c8:b8:11:0c:17:26:26:f8: 5f:6d:2c:81:55:83:b0:6c:b5:87:14:00:b9:e8:77:41:71:43: aa:70:b9:29:d2:5a:78:97:fa:99:de:b6:07:8b:b4:6f:9b:93: c3:db:dc:c6:3d:a6:48:10:14:ff:66:f7:05:5d:c3:19:10:29: 1f:58:e6:17:66:3f:ae:e5:ad:24:e3:e5:a8:0e:c5:0c:95:fc: 7b:f6:0b:9e:2f:2e:10:b6:72:b5:e6:13:7a:92:ec:d7:82:b9: 8c:b0:3d:7e:f8:8c:4e:bf:6b:be:b9:36:c5:ff:fd:78:23:85: 28:24:68:6f:ee:5e:c8:ca:0b:7c:fc:72:5b:8e:8b:e2:d2:ce: 4a:43:22:ee:1b:60:5e:0d:18:ec:5a:04:c9:75:c4:47:7e:0a: 21:fa:25:64:6a:3d:a3:94:e2:9b:d9:5d:95:0b:3f:31:9c:3f: a5:c8:4c:90:da:e2:ff:f9:f7:76:70:1c:77:bc:ab:25:5a:83: a4:e7:22:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEixi3xN3myizvtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmY2NjZiZjItOWFlOS00NWVmLTg2OTItMzZkYzhlYjhhNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulzMnu4FkjrDYNOI6ZJp+Y0QTgxzE4kPwRft g+BB4ob8ErmAV4P8xpWCupt1w5BbyisZG18QLxT5RCglDFCnhIHxHmzsTULpeW3i M3Qo9FG+Js+2nYdD9w1YbIJ1oS/xOhVKFGSPXVRSDXeK5F9hU68mQYN6ZbODHE7m kea7rMxqpuiJqr0bZT6+CbRoMHP6q7tkBStOhxHYEOcrZbZEH/UrjjMRCvv5iyGL 8mLNQZdAk7KTVhj1DTn9V+Ix3f4rYuJ72pUG2cU6Vv2bFoVUlDVgNr/RJFMlwSD1 CCSV/z7WSv8Kp+WgNT5EUIJGb/XrOEM9V0HARv46kDZ7/66hSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYOaaZ5b+kRdtjwAPRtvLWk1U0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTZhMmJkYzQtNDAxZC0z Mzg1LWEwMDQtYTZkYjUwOTk1NTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqGoZVgwP9wwRC+QJ4aQ5tqe2w9SGUDn9/nRWle67FiBITHK3o9V6AK cvxzlzmsjg7hHANPgAEE6MdhlUJM1OjIuBEMFyYm+F9tLIFVg7BstYcUALnod0Fx Q6pwuSnSWniX+pnetgeLtG+bk8Pb3MY9pkgQFP9m9wVdwxkQKR9Y5hdmP67lrSTj 5agOxQyV/Hv2C54vLhC2crXmE3qS7NeCuYywPX74jE6/a765NsX//XgjhSgkaG/u XsjKC3z8cluOi+LSzkpDIu4bYF4NGOxaBMl1xEd+CiH6JWRqPaOU4pvZXZULPzGc P6XITJDa4v/593ZwHHe8qyVag6TnIlQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:25 2025 by rpki-client