$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f8be572-9350-3fee-b62b-33feb50ca1a0.roa File: 6f8be572-9350-3fee-b62b-33feb50ca1a0.roa (raw, json) Hash identifier: l2+dNKtMl4Xb7rsX9/XGKK7oTnoDK8itfJEpPKslopU= Subject key identifier: 67:64:3A:73:7C:2E:31:05:96:11:26:C9:40:C7:CF:A5:37:4C:72:5F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411880245A4EEC669E64C88 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f8be572-9350-3fee-b62b-33feb50ca1a0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 209.85.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:88:02:45:a4:ee:c6:69:e6:4c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=96adeddf-cb5f-4c35-84b9-31840f34a986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2c:61:e6:8d:39:18:87:5c:ba:84:24:fd:87: d7:3e:0d:53:6a:cd:d2:04:6f:19:68:ee:c1:e8:15: ac:43:48:90:ac:71:43:c8:44:68:5b:cb:6c:2e:72: 18:fd:99:b8:7e:bd:c6:c5:4e:44:2c:db:cd:e4:01: b9:e5:88:df:7e:be:60:d6:08:56:3d:9b:62:5d:71: de:3a:84:f1:67:6c:37:ea:44:42:31:f9:bc:c5:d6: 98:48:70:ed:37:4f:41:cf:18:95:3b:8e:fd:50:be: 6f:13:f9:1e:65:aa:5b:71:94:4c:49:d5:82:7a:84: 69:fc:72:6e:54:75:88:84:f0:6b:d5:ef:49:fe:cc: 98:69:61:32:2a:25:79:46:f3:9b:e2:50:f9:a6:7c: 2e:82:bc:2c:2d:5f:66:97:ea:6a:d5:ff:d0:59:6c: db:8e:14:9c:d0:b5:da:9a:30:ec:a1:a6:fc:8d:21: cc:58:88:75:fe:60:24:73:da:b8:fb:65:aa:37:3c: e8:94:90:3a:57:52:9f:39:40:c5:e9:1a:90:8f:1a: 63:48:aa:8f:cf:1a:d4:02:dd:52:6f:f7:47:67:22: 12:82:46:21:29:c0:1c:b2:6a:92:79:5b:b5:7b:9d: c0:15:16:99:ee:2e:e2:1b:7b:3d:38:e8:f2:f4:35: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:64:3A:73:7C:2E:31:05:96:11:26:C9:40:C7:CF:A5:37:4C:72:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f8be572-9350-3fee-b62b-33feb50ca1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:01:d6:7c:86:16:55:b2:f0:82:17:44:6e:8a:13:75:21:55: b6:6c:fc:32:21:58:67:c7:82:a0:f4:58:8b:6d:d6:f6:af:5e: a6:d7:b3:9c:22:d2:5c:5a:29:b7:5f:0f:b1:19:33:95:d8:1a: 71:e8:95:17:c2:37:a9:7f:7b:7b:33:d9:2a:9f:ee:ed:7f:39: 22:4a:c7:91:a0:d2:37:0d:14:3f:d8:9f:86:7e:09:9d:fa:b1: c0:ca:8d:86:7b:c1:24:e7:a1:da:7b:31:05:44:af:ee:a3:a2: 36:a9:51:b3:6b:75:89:c2:e6:c8:fb:04:88:51:61:3a:82:20: 54:a6:47:35:49:18:ab:0e:0b:f0:e1:55:41:ab:75:ae:df:da: 5a:82:ca:39:07:b7:b2:45:d3:9a:ac:e7:39:2e:2f:d0:5d:d4: 66:0e:95:40:a9:25:3b:95:3e:a9:49:07:d1:ff:19:15:fd:9c: 95:ef:6f:2c:26:fe:fe:eb:42:cf:cf:63:12:76:97:64:76:ff: e4:f7:6d:dd:79:ea:2f:a0:f9:7f:49:52:8e:b3:6f:a8:91:71: 0b:63:13:8d:69:10:d5:d7:61:c0:d8:4b:a5:f3:3a:cf:e5:f2: 65:14:b1:80:d2:92:e7:15:ff:b9:d1:c6:32:40:46:94:20:55: 7f:e3:cf:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYgCRaTuxmnmTIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTZhZGVkZGYtY2I1Zi00YzM1LTg0YjktMzE4NDBmMzRhOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSxh5o05GIdcuoQk/YfXPg1Tas3SBG8ZaO7B 6BWsQ0iQrHFDyERoW8tsLnIY/Zm4fr3GxU5ELNvN5AG55Yjffr5g1ghWPZtiXXHe OoTxZ2w36kRCMfm8xdaYSHDtN09BzxiVO479UL5vE/keZapbcZRMSdWCeoRp/HJu VHWIhPBr1e9J/syYaWEyKiV5RvOb4lD5pnwugrwsLV9ml+pq1f/QWWzbjhSc0LXa mjDsoab8jSHMWIh1/mAkc9q4+2WqNzzolJA6V1KfOUDF6RqQjxpjSKqPzxrUAt1S b/dHZyISgkYhKcAcsmqSeVu1e53AFRaZ7i7iG3s9OOjy9DU9CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdkOnN8LjEFlhEmyUDHz6U3THJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmY4YmU1NzItOTM1MC0z ZmVlLWI2MmItMzNmZWI1MGNhMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIB1nyGFlWy8IIXRG6KE3UhVbZs/DIhWGfHgqD0WItt1vavXqbXs5wi 0lxaKbdfD7EZM5XYGnHolRfCN6l/e3sz2Sqf7u1/OSJKx5Gg0jcNFD/Yn4Z+CZ36 scDKjYZ7wSTnodp7MQVEr+6jojapUbNrdYnC5sj7BIhRYTqCIFSmRzVJGKsOC/Dh VUGrda7f2lqCyjkHt7JF05qs5zkuL9Bd1GYOlUCpJTuVPqlJB9H/GRX9nJXvbywm /v7rQs/PYxJ2l2R2/+T3bd156i+g+X9JUo6zb6iRcQtjE41pENXXYcDYS6XzOs/l 8mUUsYDSkucV/7nRxjJARpQgVX/jz5s= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:20 2025 by rpki-client