$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa File: 65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa (raw, json) Hash identifier: a0SrGKFRwOvSgwfyEpyaI5Jv/14T6CuHXMwQVEin35A= Subject key identifier: F5:CF:82:41:E4:23:47:55:72:3C:DC:A3:D3:02:59:1B:04:D9:67:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117ADE8DDA7697B21601C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7a:de:8d:da:76:97:b2:16:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=653c10e9-04b8-4593-a3e4-3e18fdcda2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f2:61:68:5b:0d:0b:f7:18:04:e0:1a:64:a1: 10:91:8e:94:27:7c:0e:1d:aa:68:5e:63:51:5d:e8: fe:01:71:2a:05:05:00:a8:b2:a5:e3:ba:e0:8d:d7: b6:ea:52:44:c6:a7:ab:ba:31:89:40:bb:44:72:c3: 76:cc:70:06:b1:fe:e2:4d:fe:8a:0f:ea:07:56:63: 16:33:23:43:a9:69:19:69:a7:a1:65:e3:f4:45:c5: 12:4b:63:88:47:60:a0:31:a7:2b:80:cc:8d:df:a6: 7f:dd:a3:48:61:89:cc:80:8a:3e:a7:46:a6:45:2d: 93:8c:a8:77:fe:0d:e5:9e:37:e0:49:f0:09:d3:7b: 71:4b:c0:d1:fd:50:48:d1:b6:28:44:78:0d:84:cf: 5d:64:4a:5a:d3:8e:d0:8f:81:f9:a7:b1:72:f7:c4: c6:e9:08:af:0f:e1:67:af:c3:31:92:cd:44:9a:77: 6e:c0:43:cf:2e:a8:e7:de:d1:6a:3c:37:03:a9:3e: 07:85:bf:5c:31:86:21:84:00:3d:96:8b:df:51:6b: 76:8a:ff:33:46:59:ec:2b:b6:06:49:d5:a0:1a:55: 32:78:81:00:eb:e7:b5:a1:93:1c:a4:3a:7c:00:c4: 26:e7:a8:75:bc:2e:a8:7b:92:88:28:bf:4d:44:c6: 5a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CF:82:41:E4:23:47:55:72:3C:DC:A3:D3:02:59:1B:04:D9:67:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:60:88:e4:63:a8:a4:e0:e3:ea:35:ff:8f:a3:41:f2:1d:97: ee:bc:f6:8b:8c:65:df:4f:8c:a8:d4:3a:c4:76:f5:99:8f:3f: a5:64:05:bb:be:98:e2:27:e1:b3:a9:cd:03:b0:58:53:62:6d: fc:e2:c8:7b:83:d1:c4:1e:d3:cb:8d:01:2b:c4:be:b9:98:00: e1:26:21:8a:c1:ec:fa:78:5d:8e:71:1f:5f:84:8c:0a:ac:11: 0c:6a:36:36:d2:34:c6:71:ec:98:48:74:ee:70:68:87:77:ae: 0c:b7:f1:6a:72:2d:3c:c5:eb:8c:52:03:17:39:2e:a9:80:5a: 37:90:b7:9c:15:c5:cf:5d:09:6d:23:f5:e0:f1:a1:aa:8e:ef: 9a:f3:e0:4a:18:00:3b:fb:f7:49:7d:47:f3:be:37:9e:c6:c6: 6b:75:c2:bb:86:c3:c2:bd:27:fe:bc:45:ea:b4:54:93:fd:d1: 01:8d:5a:af:81:dc:67:5e:d6:f8:da:95:3b:27:7d:48:41:33: 29:1d:38:5f:85:08:b4:50:79:b2:e2:6c:dd:be:07:87:c1:9a: 8c:8e:62:80:1e:2f:b7:1b:0e:0d:2e:4b:16:ad:51:4e:dd:a7: f6:47:ae:9e:9f:1a:a2:d2:2d:a6:7f:9b:bf:4c:18:40:b8:4e: 6c:d6:90:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXrejdp2l7IWAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjUzYzEwZTktMDRiOC00NTkzLWEzZTQtM2UxOGZkY2RhMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifJhaFsNC/cYBOAaZKEQkY6UJ3wOHapoXmNR Xej+AXEqBQUAqLKl47rgjde26lJExqerujGJQLtEcsN2zHAGsf7iTf6KD+oHVmMW MyNDqWkZaaehZeP0RcUSS2OIR2CgMacrgMyN36Z/3aNIYYnMgIo+p0amRS2TjKh3 /g3lnjfgSfAJ03txS8DR/VBI0bYoRHgNhM9dZEpa047Qj4H5p7Fy98TG6QivD+Fn r8Mxks1EmnduwEPPLqjn3tFqPDcDqT4Hhb9cMYYhhAA9lovfUWt2iv8zRlnsK7YG SdWgGlUyeIEA6+e1oZMcpDp8AMQm56h1vC6oe5KIKL9NRMZaNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXPgkHkI0dVcjzco9MCWRsE2Wc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjVhNmU1YmEtYzA1NC0z YTA0LThjM2YtMmQ0ZGUxMWU5NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxgiORjqKTg4+o1/4+jQfIdl+689ouMZd9PjKjUOsR29ZmPP6VkBbu+ mOIn4bOpzQOwWFNibfziyHuD0cQe08uNASvEvrmYAOEmIYrB7Pp4XY5xH1+EjAqs EQxqNjbSNMZx7JhIdO5waId3rgy38WpyLTzF64xSAxc5LqmAWjeQt5wVxc9dCW0j 9eDxoaqO75rz4EoYADv790l9R/O+N57Gxmt1wruGw8K9J/68Req0VJP90QGNWq+B 3Gde1vjalTsnfUhBMykdOF+FCLRQebLibN2+B4fBmoyOYoAeL7cbDg0uSxatUU7d p/ZHrp6fGqLSLaZ/m79MGEC4TmzWkOY= -----END CERTIFICATE-----Generated at Mon Aug 4 14:08:28 2025 by rpki-client