$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa File: 6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa (raw, json) Hash identifier: ihZJoITMTU7HPYts8shpv5iYicl6A/3aHsQcS0pI4so= Subject key identifier: C5:B9:5B:FB:72:4A:ED:ED:32:30:1F:79:75:A2:91:48:36:2A:69:FE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122A0817B982B73F5B0900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 11344 IP address blocks: 209.85.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2a:08:17:b9:82:b7:3f:5b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e1b620ca-1a2c-43e4-94ec-fdc015a49505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:f3:59:7a:15:c9:64:f3:9f:d5:3f:a3:e4: 70:22:7e:31:f5:0a:c4:90:fb:f8:c5:17:68:61:57: 8c:72:af:c0:ed:33:90:d1:cf:90:c6:b7:85:21:cc: 9c:66:f0:6d:99:b2:b0:24:47:c8:c2:8d:12:97:02: 9a:c5:0d:cc:49:2b:9d:7a:3e:4a:01:fb:a8:58:8a: 63:79:f0:7d:f0:64:29:79:6d:05:29:1a:2b:ca:78: c8:2e:29:83:d6:45:69:51:36:6b:f0:59:9c:e2:ac: de:e8:65:ad:45:9f:b1:e4:d2:58:1a:a8:58:26:2f: 13:e9:ff:eb:5c:ce:e3:b3:6e:f9:a0:2a:9d:4a:77: 71:76:71:11:5a:b3:2a:26:bd:b4:6e:07:cd:2a:d6: 69:72:00:3d:f0:fa:b8:97:9b:88:f2:b0:04:0e:e5: ce:7e:ee:3c:76:27:53:0e:84:81:87:3f:7b:c8:1f: ef:8f:b8:27:70:82:42:ee:1d:01:6e:68:1e:38:42: 54:8e:33:ff:96:05:e6:64:5c:22:44:e9:df:fc:4f: 4c:26:53:8c:f2:6c:5e:2e:45:9c:e7:a6:b6:ff:ac: 84:1a:06:d9:4b:10:41:6c:f0:65:34:fc:22:51:f4: 07:54:e6:e0:c3:1e:a3:16:3c:e3:e2:65:30:77:f2: d6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B9:5B:FB:72:4A:ED:ED:32:30:1F:79:75:A2:91:48:36:2A:69:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:56:a0:12:f5:21:32:f0:b3:5e:85:92:7c:c2:56:9e:5c:5e: 39:c5:9c:1c:9d:85:c3:0f:92:5a:44:5e:a9:6a:91:b8:0c:78: 63:24:45:81:4e:ad:dd:55:b3:19:55:83:f5:1a:7c:32:22:f6: 12:47:fe:9d:9e:d8:bc:bc:0c:3e:d6:a5:de:b2:19:96:41:3e: 0d:3a:45:51:a8:62:e8:25:ca:04:db:b1:ad:75:1e:24:fa:09: 1e:f7:8a:c6:c0:3b:75:c9:27:67:63:2f:4f:5b:0b:c1:01:3a: e5:e0:d3:f6:8e:42:28:68:5a:da:34:0d:01:de:39:66:a3:92: fe:98:2b:d4:d8:46:6e:d9:03:8e:e1:c4:0c:26:a2:9d:e6:d1: f8:46:f0:bc:ca:29:80:a1:2b:57:97:6a:53:01:fd:7a:99:92: 72:3b:19:ec:65:a1:01:23:38:ab:7f:e2:10:d3:0b:4d:99:e2: 82:a9:04:33:70:f1:86:29:8a:a9:e4:3e:b7:79:11:d4:c7:c3: 07:90:c6:4c:a8:61:9b:86:b3:26:20:87:80:e0:0a:58:43:74: 4a:ce:c8:cc:05:eb:af:23:3d:39:a1:af:5a:9b:0c:0e:d2:0c: c9:7f:92:70:32:6c:ae:6c:9e:d7:58:61:7a:97:f6:42:b0:43: a5:e1:f7:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEioIF7mCtz9bCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTFiNjIwY2EtMWEyYy00M2U0LTk0ZWMtZmRjMDE1YTQ5NTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSzzWXoVyWTzn9U/o+RwIn4x9QrEkPv4xRdo YVeMcq/A7TOQ0c+QxreFIcycZvBtmbKwJEfIwo0SlwKaxQ3MSSudej5KAfuoWIpj efB98GQpeW0FKRorynjILimD1kVpUTZr8Fmc4qze6GWtRZ+x5NJYGqhYJi8T6f/r XM7js275oCqdSndxdnERWrMqJr20bgfNKtZpcgA98Pq4l5uI8rAEDuXOfu48didT DoSBhz97yB/vj7gncIJC7h0BbmgeOEJUjjP/lgXmZFwiROnf/E9MJlOM8mxeLkWc 56a2/6yEGgbZSxBBbPBlNPwiUfQHVObgwx6jFjzj4mUwd/LWCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMW5W/tySu3tMjAfeXWikUg2Kmn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmViMDU4MWQtMTNkYy0z YzlhLTk2OGUtNGU3NWM5MzZiMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBWoBL1ITLws16FknzCVp5cXjnFnBydhcMPklpEXqlqkbgMeGMkRYFO rd1VsxlVg/UafDIi9hJH/p2e2Ly8DD7Wpd6yGZZBPg06RVGoYuglygTbsa11HiT6 CR73isbAO3XJJ2djL09bC8EBOuXg0/aOQihoWto0DQHeOWajkv6YK9TYRm7ZA47h xAwmop3m0fhG8LzKKYChK1eXalMB/XqZknI7GexloQEjOKt/4hDTC02Z4oKpBDNw 8YYpiqnkPrd5EdTHwweQxkyoYZuGsyYgh4DgClhDdErOyMwF668jPTmhr1qbDA7S DMl/knAybK5sntdYYXqX9kKwQ6Xh988= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:07 2025 by rpki-client