$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa File: 72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa (raw, json) Hash identifier: fvL/BHha5cnrI874FQR6F8dDOwsu+IxFOlHUD48nJcg= Subject key identifier: 57:A3:65:5B:98:00:70:66:90:B7:06:04:5B:07:C2:D9:90:A1:2E:84 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841223C8DB347C408BF20380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:23:c8:db:34:7c:40:8b:f2:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=744b2498-3c50-4969-85bb-a81f43c682af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6b:ee:d9:37:60:48:f9:69:f1:9c:da:f0:fe: 4a:97:56:4b:bc:e3:60:55:2b:ae:a6:e9:c1:4e:a8: 7f:33:63:bd:5b:60:31:1c:b8:76:9e:2c:c0:3c:9f: 09:37:3a:2b:0b:cb:e9:de:9c:ab:75:78:0e:ac:43: 61:e1:e2:33:d3:75:5e:68:b4:9c:c2:3e:30:aa:e0: 16:72:b7:cf:ba:09:46:9b:8d:57:e0:ef:03:6d:b1: 0e:db:ed:1c:29:60:51:4d:85:f2:6a:d3:8e:be:45: e6:0d:4a:ba:7e:bb:ea:c1:0e:b4:8b:e1:ee:59:f8: 1f:e3:51:69:f4:4b:0a:3d:37:80:ef:e1:07:65:ce: 35:57:3b:a5:4a:dd:88:43:e5:72:67:53:2c:c6:3b: 64:55:1c:83:ec:37:78:f7:38:90:4b:c9:9f:a4:fb: 32:aa:d1:d9:08:3f:29:6b:cf:9f:2a:21:52:9d:54: dd:af:e7:4a:f8:c3:bc:8e:84:c9:d1:12:db:bb:ee: 29:21:4f:cb:44:07:37:6f:24:bb:f2:28:6a:29:ae: 2f:c4:9a:73:fa:52:0c:28:d5:91:da:d4:0f:2e:b3: ae:f0:a4:7b:16:5d:92:7c:c2:3f:d7:2f:e6:e1:2e: 1d:af:45:14:90:dc:4d:33:5c:c8:49:72:54:35:53: b4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A3:65:5B:98:00:70:66:90:B7:06:04:5B:07:C2:D9:90:A1:2E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:92:ea:b3:1d:44:1b:d5:19:94:47:de:8f:43:23:ef:0f:ce: c3:61:46:89:27:7d:3f:05:ef:7d:8c:c7:46:c7:07:53:32:81: 19:50:24:96:15:65:4c:96:49:8d:96:57:5f:ac:d2:29:e6:c7: aa:9b:2a:c7:10:e8:86:1e:d3:d0:f4:6a:04:51:0f:33:6f:99: 2b:b3:82:82:87:90:24:90:04:ce:f7:a9:fd:29:ff:fc:4b:e3: e0:24:a6:82:aa:9e:37:c7:78:f0:91:f9:92:9f:f3:57:e4:fc: 9c:40:a9:b7:ca:0a:eb:58:85:f1:d0:d3:62:d2:a3:9d:63:15: 5c:8c:d8:de:7c:34:8a:84:95:2e:e4:a8:c1:d4:4a:83:9e:62: 66:9e:9d:35:29:c9:95:28:18:85:1a:d1:7c:48:da:b1:c8:cc: 36:3a:d8:03:13:d5:e6:56:c2:c1:25:e2:93:8b:52:c3:83:f5: 5e:8a:9e:17:35:b2:bf:a0:e1:a4:e6:44:82:32:d1:91:02:97: 2a:54:1e:c8:3f:b8:ed:ed:60:af:6a:14:53:dc:74:8a:ac:46: 5f:91:92:92:0b:d1:27:31:2d:d8:cb:34:eb:0f:65:b1:bc:7b: 20:33:36:8a:7d:b1:b3:f5:68:da:c3:8c:3d:18:dd:18:f7:16: 3c:55:23:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiPI2zR8QIvyA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzQ0YjI0OTgtM2M1MC00OTY5LTg1YmItYTgxZjQzYzY4MmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWvu2TdgSPlp8Zza8P5Kl1ZLvONgVSuupunB Tqh/M2O9W2AxHLh2nizAPJ8JNzorC8vp3pyrdXgOrENh4eIz03VeaLScwj4wquAW crfPuglGm41X4O8DbbEO2+0cKWBRTYXyatOOvkXmDUq6frvqwQ60i+HuWfgf41Fp 9EsKPTeA7+EHZc41VzulSt2IQ+VyZ1MsxjtkVRyD7Dd49ziQS8mfpPsyqtHZCD8p a8+fKiFSnVTdr+dK+MO8joTJ0RLbu+4pIU/LRAc3byS78ihqKa4vxJpz+lIMKNWR 2tQPLrOu8KR7Fl2SfMI/1y/m4S4dr0UUkNxNM1zISXJUNVO0twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFejZVuYAHBmkLcGBFsHwtmQoS6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzJjMjQ4N2MtYjhlOS0z ZDhhLTliZjUtOGMwNDhiMjUxMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaS6rMdRBvVGZRH3o9DI+8PzsNhRoknfT8F732Mx0bHB1MygRlQJJYV ZUyWSY2WV1+s0inmx6qbKscQ6IYe09D0agRRDzNvmSuzgoKHkCSQBM73qf0p//xL 4+AkpoKqnjfHePCR+ZKf81fk/JxAqbfKCutYhfHQ02LSo51jFVyM2N58NIqElS7k qMHUSoOeYmaenTUpyZUoGIUa0XxI2rHIzDY62AMT1eZWwsEl4pOLUsOD9V6Knhc1 sr+g4aTmRIIy0ZEClypUHsg/uO3tYK9qFFPcdIqsRl+RkpIL0ScxLdjLNOsPZbG8 eyAzNop9sbP1aNrDjD0Y3Rj3FjxVI74= -----END CERTIFICATE-----Generated at Mon Aug 4 14:16:32 2025 by rpki-client