$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa File: 5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa (raw, json) Hash identifier: +6RIGPeNDA8MF7L+vCHUeQ+0AvP7+HWthbgHYV6M7cw= Subject key identifier: 1F:02:2B:D6:37:05:F4:86:F8:71:33:C4:4D:8B:3F:FD:DD:4E:B8:59 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841236608A79BE22D2B13180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:36:60:8a:79:be:22:d2:b1:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1df81a04-501f-4e0b-9acb-f16683c1bc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:05:bd:a9:3b:3b:18:bc:e2:b9:4c:2c:8f:f3: 47:db:43:e1:b0:ea:e9:a3:c2:9e:aa:95:95:cf:c8: 50:11:4f:d6:f8:15:98:61:b7:86:95:2f:22:18:9f: 6c:d1:99:a6:21:d4:20:35:cd:ed:ab:ed:e5:54:b6: 57:a5:af:b3:ae:3e:61:58:e8:c1:f2:61:7a:77:f8: 3d:78:b0:47:c3:ea:a7:64:f8:bd:e7:87:65:bf:8c: f7:f0:08:0b:96:24:23:b0:24:13:df:33:56:c3:36: f7:48:10:2d:ca:be:a8:5b:9e:5a:67:de:dd:7a:03: 8a:e7:4e:44:f1:bc:9e:21:8e:04:37:91:8c:ea:79: 69:b5:bf:ae:b2:34:51:57:91:c7:6c:f2:a9:e0:3a: 84:a3:6f:28:6f:5b:c3:1d:15:0e:dd:93:40:1b:60: 78:a7:cd:2e:7a:b4:a1:a7:e8:6a:2b:cf:e4:be:17: 75:ea:21:8c:09:67:a5:7b:97:47:83:b7:a4:78:9c: bf:ac:56:3f:33:6d:ed:63:81:88:0f:e1:31:34:92: e2:a5:53:d5:82:98:d7:77:1d:a4:d9:3c:5e:0e:01: 44:1a:d8:62:ca:cd:85:7e:43:b9:ca:7e:fa:3e:b6: 5e:61:61:e4:a7:8b:57:24:48:60:69:eb:b8:d0:30: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:02:2B:D6:37:05:F4:86:F8:71:33:C4:4D:8B:3F:FD:DD:4E:B8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:12:0b:3f:72:19:ec:78:f0:49:38:87:c5:8a:f9:e0:81:4e: 80:25:f1:54:59:69:1f:55:3b:98:76:59:36:d9:7b:11:31:8d: a1:dc:db:0a:e9:3c:8b:64:46:4e:17:17:59:94:fd:f1:91:eb: ab:26:00:b1:7b:a7:59:a9:e5:bb:4c:47:56:b2:08:78:e5:93: 0f:6c:10:cc:f3:64:be:8c:09:46:77:8e:77:c5:86:1a:07:df: 6a:3e:e3:11:40:36:3c:d1:7f:42:8f:98:52:af:73:d4:fe:a5: 1a:4c:19:17:a0:00:78:17:cb:6e:a1:b4:06:7a:9e:83:42:7f: 36:a6:02:9e:74:3d:0b:e4:1a:5f:f4:6c:60:18:ad:1c:e4:bb: ee:52:82:a7:2c:a0:5f:3d:f5:a4:d3:96:0c:df:20:d5:35:36: a8:7b:8f:97:89:4a:da:d1:40:df:1c:d2:75:7e:3c:22:f8:31: 24:40:37:76:0e:41:94:7f:de:a8:b1:6b:98:a0:ab:fb:16:b0: 4d:13:c1:0c:67:98:ab:bb:7e:c1:c5:c1:31:90:38:2c:0b:27: ec:c5:18:18:04:7f:af:73:86:84:9b:07:50:4f:0c:4f:7d:4a: 41:57:e0:2c:6b:9d:30:88:1b:58:45:79:90:0b:49:af:01:fa: c8:d4:31:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjZginm+ItKxMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWRmODFhMDQtNTAxZi00ZTBiLTlhY2ItZjE2NjgzYzFiYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgW9qTs7GLziuUwsj/NH20PhsOrpo8KeqpWV z8hQEU/W+BWYYbeGlS8iGJ9s0ZmmIdQgNc3tq+3lVLZXpa+zrj5hWOjB8mF6d/g9 eLBHw+qnZPi954dlv4z38AgLliQjsCQT3zNWwzb3SBAtyr6oW55aZ97degOK505E 8byeIY4EN5GM6nlptb+usjRRV5HHbPKp4DqEo28ob1vDHRUO3ZNAG2B4p80uerSh p+hqK8/kvhd16iGMCWele5dHg7ekeJy/rFY/M23tY4GID+ExNJLipVPVgpjXdx2k 2TxeDgFEGthiys2FfkO5yn76PrZeYWHkp4tXJEhgaeu40DAiOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8CK9Y3BfSG+HEzxE2LP/3dTrhZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWQ5YjVhNzctMjBhNC0z NWEyLTk1ZDgtNDM4MGRkNzRhMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0SCz9yGex48Ek4h8WK+eCBToAl8VRZaR9VO5h2WTbZexExjaHc2wrp PItkRk4XF1mU/fGR66smALF7p1mp5btMR1ayCHjlkw9sEMzzZL6MCUZ3jnfFhhoH 32o+4xFANjzRf0KPmFKvc9T+pRpMGRegAHgXy26htAZ6noNCfzamAp50PQvkGl/0 bGAYrRzku+5SgqcsoF899aTTlgzfINU1Nqh7j5eJStrRQN8c0nV+PCL4MSRAN3YO QZR/3qixa5igq/sWsE0TwQxnmKu7fsHFwTGQOCwLJ+zFGBgEf69zhoSbB1BPDE99 SkFX4CxrnTCIG1hFeZALSa8B+sjUMeE= -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:45 2025 by rpki-client