$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa File: 661fdda3-d9b9-336b-868c-5694c1d1cfea.roa (raw, json) Hash identifier: oKNAc8G3eh7EYHYXnOEkOJ1omAzza7YS0v/kdIgWals= Subject key identifier: 52:6D:F2:BE:88:C9:58:35:B0:D0:0E:B4:AA:47:2F:BD:CC:D9:BD:6C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118E1D30ED8E1A78A5B900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8e:1d:30:ed:8e:1a:78:a5:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e89bae8c-5ed7-46f6-b98d-f83b84956607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:d9:9e:96:e3:5b:db:48:a9:bc:56:f2:e9: 3e:5b:20:77:f8:b2:10:fa:c0:b1:aa:72:a7:d3:db: 6f:da:86:87:2f:de:0b:84:9c:95:76:35:c7:32:1b: ba:06:62:cf:83:fd:52:ed:cb:8f:a6:17:12:77:d7: 46:6b:6f:89:4a:9a:79:bb:94:d9:92:52:73:cf:ed: 3a:91:a8:c9:61:f3:21:fe:f0:2b:a4:df:82:f6:d8: 7e:76:e1:87:25:8e:fe:aa:a7:d7:37:30:fe:de:24: 97:e5:d9:d2:b6:7c:b4:d6:97:39:db:24:60:71:bb: f1:a8:7a:1e:11:7b:b2:cb:60:66:4d:35:dc:d3:87: 79:32:ca:f7:b6:e5:cc:1d:2b:c7:de:e6:9b:c6:32: 84:1c:fb:7c:2d:6b:08:04:28:f1:cc:a6:40:2b:89: b7:82:57:82:3a:d0:82:dc:4e:ae:11:1a:b9:8c:63: 14:db:3a:42:96:0c:d8:c7:8e:a9:99:74:3e:5b:a6: 93:09:cd:da:16:a3:c4:f4:5d:65:50:1a:ab:10:9c: eb:a5:cb:ea:f9:89:57:98:a2:3d:40:2b:7c:9b:10: ea:23:f6:04:86:b1:e3:a1:ad:b0:18:f6:35:37:95: 04:86:13:5d:a8:8f:d9:97:f2:73:e9:5a:81:2b:a0: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6D:F2:BE:88:C9:58:35:B0:D0:0E:B4:AA:47:2F:BD:CC:D9:BD:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:45:70:67:c4:fc:d1:fe:a7:09:1a:94:b6:9b:f2:a2:92:80: fa:11:65:98:8a:d3:bf:37:fb:b2:c0:57:87:a3:8b:5c:e1:9b: 54:15:de:d8:e7:3c:eb:ec:84:ed:d1:58:84:43:9a:c6:54:00: 81:d9:d4:5f:e3:5e:ae:e0:38:e9:32:6e:a3:37:a2:00:86:39: a4:94:12:fd:db:19:5a:f6:a9:7a:a6:74:b4:b4:82:31:40:3e: 78:ba:2a:f3:5c:b9:ff:15:65:e2:d1:12:02:13:97:2d:b2:3a: 2c:3e:ca:6e:9a:df:89:33:ae:53:ac:d5:f5:a0:52:5e:9f:ba: 1a:8d:f7:92:10:24:7c:36:4b:39:30:1a:66:e4:d9:54:24:85: 81:c7:6c:cd:24:c9:22:e6:10:0f:e3:6b:61:c7:b2:7a:cb:7c: 38:83:a2:7e:53:5f:0a:30:b5:d3:fa:26:df:aa:58:33:27:68: 94:d6:a6:a0:15:24:8b:c1:c0:fa:96:e0:22:05:e2:67:97:c7: 23:a4:29:eb:32:96:39:8f:4b:a3:6b:36:49:94:34:62:02:16: ea:d6:6a:a3:d7:3d:e5:1b:e3:07:ae:9a:ec:57:90:58:dd:09: 85:dc:61:32:50:1a:66:74:44:2f:84:84:60:8c:58:a9:bd:0f: 7e:f9:eb:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEY4dMO2OGniluQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTg5YmFlOGMtNWVkNy00NmY2LWI5OGQtZjgzYjg0OTU2NjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmHZnpbjW9tIqbxW8uk+WyB3+LIQ+sCxqnKn 09tv2oaHL94LhJyVdjXHMhu6BmLPg/1S7cuPphcSd9dGa2+JSpp5u5TZklJzz+06 kajJYfMh/vArpN+C9th+duGHJY7+qqfXNzD+3iSX5dnStny01pc52yRgcbvxqHoe EXuyy2BmTTXc04d5Msr3tuXMHSvH3uabxjKEHPt8LWsIBCjxzKZAK4m3gleCOtCC 3E6uERq5jGMU2zpClgzYx46pmXQ+W6aTCc3aFqPE9F1lUBqrEJzrpcvq+YlXmKI9 QCt8mxDqI/YEhrHjoa2wGPY1N5UEhhNdqI/Zl/Jz6VqBK6BkqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJt8r6IyVg1sNAOtKpHL73M2b1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjYxZmRkYTMtZDliOS0z MzZiLTg2OGMtNTY5NGMxZDFjZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJFcGfE/NH+pwkalLab8qKSgPoRZZiK0783+7LAV4eji1zhm1QV3tjn POvshO3RWIRDmsZUAIHZ1F/jXq7gOOkybqM3ogCGOaSUEv3bGVr2qXqmdLS0gjFA Pni6KvNcuf8VZeLREgITly2yOiw+ym6a34kzrlOs1fWgUl6fuhqN95IQJHw2Szkw Gmbk2VQkhYHHbM0kySLmEA/ja2HHsnrLfDiDon5TXwowtdP6Jt+qWDMnaJTWpqAV JIvBwPqW4CIF4meXxyOkKesyljmPS6NrNkmUNGICFurWaqPXPeUb4weumuxXkFjd CYXcYTJQGmZ0RC+EhGCMWKm9D3756xg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:17 2025 by rpki-client