$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa File: 63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa (raw, json) Hash identifier: bMXqr/M6C/c/qBzrLWBHMrxQjAaFCCphUQF8a5iy9CY= Subject key identifier: 8E:61:0D:B2:1A:B5:58:F2:0E:A2:EE:1E:11:85:E1:75:7B:CE:0E:94 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841224D5331B6F0736499D60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:24:d5:33:1b:6f:07:36:49:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ba7eb828-9936-48cc-931f-a2932e974c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:27:92:50:38:c3:9b:63:94:ba:fc:41:eb: e6:f7:3c:6c:b4:9d:e8:99:fa:c0:90:ae:8e:69:ca: c0:16:db:00:9f:6f:6f:39:59:e1:59:8f:64:c2:c1: 6d:c4:c3:20:c3:95:d3:a8:b2:39:48:47:38:60:16: a5:98:2c:81:23:54:c9:93:1f:33:76:f2:05:ba:63: ee:5e:df:e1:53:72:03:d3:1e:ee:2b:16:19:10:a6: f3:f3:27:22:23:3c:b8:01:9d:7d:e9:f8:8d:3f:11: 7d:8e:bf:ff:dd:78:5e:fe:a5:4f:7e:af:b4:3a:c8: 47:ef:17:b1:49:7e:9c:64:36:33:dd:c1:0b:30:09: a4:84:8e:4e:95:62:fe:3b:fd:31:20:d7:9c:e8:fa: b7:fe:7f:55:fc:81:da:90:a4:c2:3f:71:a4:0e:75: 1a:d1:78:fd:e2:fa:5c:21:da:92:59:3e:e8:db:44: d4:23:81:59:64:64:c3:01:a8:06:5d:7f:1e:25:84: 74:1a:a4:53:07:2f:58:cc:ab:c3:c2:0b:ee:ec:e3: 8a:8a:3a:84:1d:dc:6c:1e:14:3c:c3:70:81:d4:8b: 2c:0f:40:e5:aa:bc:16:c3:b7:97:b0:25:ef:b5:8c: f0:58:12:95:61:a6:35:4f:85:d4:c3:27:ad:e1:62: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:61:0D:B2:1A:B5:58:F2:0E:A2:EE:1E:11:85:E1:75:7B:CE:0E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:0b:ce:22:87:7a:e2:2d:5c:7e:f6:a0:aa:94:44:04:8f:8e: 36:17:aa:eb:e9:b0:b9:11:dd:74:20:ec:29:19:62:05:11:92: d8:5f:0a:27:63:3f:e8:02:77:33:34:a4:eb:4b:65:7b:1a:53: a6:ed:58:2f:cf:7d:5e:47:0f:2e:9b:79:be:a0:6d:8a:82:69: 51:c6:34:c2:c0:0d:e5:d1:d1:28:b5:cc:05:6a:17:a1:98:c0: 83:80:03:c4:f2:80:f1:7f:19:a9:9c:2b:8d:01:30:52:ea:74: e5:c6:10:6f:bd:04:c5:7e:ff:05:29:79:ec:72:52:50:7e:39: bf:01:c6:d1:c4:d8:da:e5:0b:4f:2e:f7:c4:81:e8:f4:d3:17: 10:60:74:4d:60:41:fb:da:a6:9c:c3:6a:52:e4:66:44:c6:6f: 11:2d:f2:37:3b:4d:1e:74:30:4b:c5:3d:f1:a0:a3:a9:49:c2: fb:bd:be:95:70:5f:be:50:20:15:4a:fb:c7:96:6e:e1:14:f0: 73:3e:a1:b4:d2:4c:29:52:30:c4:6f:2a:6f:78:fd:56:7d:71: 71:65:27:c5:ef:d7:42:71:75:49:90:41:c5:a4:a3:dc:61:b6: 06:50:63:a9:bb:cd:a2:c2:89:44:c5:64:fc:4f:09:bb:99:fa: 7a:db:90:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiTVMxtvBzZJnWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmE3ZWI4MjgtOTkzNi00OGNjLTkzMWYtYTI5MzJlOTc0YzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOAnklA4w5tjlLr8Qevm9zxstJ3omfrAkK6O acrAFtsAn29vOVnhWY9kwsFtxMMgw5XTqLI5SEc4YBalmCyBI1TJkx8zdvIFumPu Xt/hU3ID0x7uKxYZEKbz8yciIzy4AZ196fiNPxF9jr//3Xhe/qVPfq+0OshH7xex SX6cZDYz3cELMAmkhI5OlWL+O/0xINec6Pq3/n9V/IHakKTCP3GkDnUa0Xj94vpc IdqSWT7o20TUI4FZZGTDAagGXX8eJYR0GqRTBy9YzKvDwgvu7OOKijqEHdxsHhQ8 w3CB1IssD0DlqrwWw7eXsCXvtYzwWBKVYaY1T4XUwyet4WIy5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5hDbIatVjyDqLuHhGF4XV7zg6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjNlNWM1YzktOTNmZS0z NzY1LTlhY2QtOGZlMGI3NjdiNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALILziKHeuItXH72oKqURASPjjYXquvpsLkR3XQg7CkZYgURkthfCidj P+gCdzM0pOtLZXsaU6btWC/PfV5HDy6beb6gbYqCaVHGNMLADeXR0Si1zAVqF6GY wIOAA8TygPF/GamcK40BMFLqdOXGEG+9BMV+/wUpeexyUlB+Ob8BxtHE2NrlC08u 98SB6PTTFxBgdE1gQfvappzDalLkZkTGbxEt8jc7TR50MEvFPfGgo6lJwvu9vpVw X75QIBVK+8eWbuEU8HM+obTSTClSMMRvKm94/VZ9cXFlJ8Xv10JxdUmQQcWko9xh tgZQY6m7zaLCiUTFZPxPCbuZ+nrbkEk= -----END CERTIFICATE-----Generated at Wed Aug 6 04:13:13 2025 by rpki-client