$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa File: 739bd5a1-d6b5-3e48-8130-252f11afed97.roa (raw, json) Hash identifier: eDOHe1NLO/TUiZQlRXJnz4dPSkOP+dvfpDqIRy0sLt0= Subject key identifier: 38:A6:C7:A3:77:F9:74:F9:25:97:1A:22:E2:6D:5C:AD:04:59:6D:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118142142F60DC6ACA0F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:81:42:14:2f:60:dc:6a:ca:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ffbae81e-f7f9-4108-80cc-ebcf2f8f5e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:08:92:ca:26:ae:b7:36:2b:8f:78:7b:7d:33: f6:f2:79:b0:85:7a:3b:c4:41:b6:40:ab:7a:66:53: ee:9d:b1:18:c2:98:be:49:14:90:e7:99:9c:40:dd: ee:ee:ad:c2:ae:82:35:81:9a:9a:96:1a:7a:b5:61: 1e:a0:83:31:73:11:3d:5a:2b:07:e0:75:1d:97:ee: 44:94:c9:27:c6:d0:b2:12:a0:05:0d:94:f2:10:54: 42:dd:09:f2:88:28:64:dd:63:7e:d8:22:84:f2:0c: 38:65:bb:4b:2f:85:09:6e:2b:a8:0b:c2:b0:97:6c: b6:d1:d4:6b:2e:06:ff:b2:f0:c4:82:7e:1b:11:33: 7c:d8:72:7f:40:8d:27:cc:c0:84:a3:78:c8:4c:0c: 58:dd:3f:d0:d6:66:dc:43:1e:f8:49:6b:d7:ee:a3: 49:ef:90:51:4d:0c:34:be:dc:71:6f:e2:af:63:17: a4:5e:b4:72:3e:4e:96:c8:96:9f:e9:67:e8:c3:1d: b3:ef:f3:78:fd:d4:b5:37:43:28:0f:8c:8a:16:59: 54:fe:cb:c5:63:ee:2f:4c:e2:63:29:fb:2f:de:0a: ef:2c:3d:2b:98:17:78:12:13:1a:9b:e5:83:8b:ae: 83:12:df:fe:23:8d:00:e9:5d:16:d1:68:49:2f:f6: c1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A6:C7:A3:77:F9:74:F9:25:97:1A:22:E2:6D:5C:AD:04:59:6D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:61:70:8a:b2:7c:dc:d5:25:ca:ee:69:9f:9f:7e:eb:b5:8b: df:92:5d:96:3c:26:f5:1e:6d:ce:b7:a7:d5:4a:be:03:a1:bf: 7b:ba:87:91:42:f8:f0:5f:d0:61:a1:62:78:2f:ee:9c:5f:57: fb:7c:d7:3d:48:c8:1f:f2:d8:be:b8:4f:3a:3f:66:3c:ae:73: df:4c:38:95:b0:10:d9:6c:fd:12:6f:bf:4c:0f:0e:a1:6b:64: 91:51:e8:a1:7e:43:98:28:2f:06:ad:5d:fd:ff:7e:fc:c5:d7: 62:a7:b3:51:ff:5e:75:b1:ad:8c:0f:a3:09:dc:6b:1d:6b:b6: 22:fd:f8:82:6e:1f:67:6e:fd:d5:f3:63:9b:f2:56:87:f7:53: 0a:af:98:37:b2:9e:f7:ab:26:20:9c:68:1c:3f:b6:ac:79:d6: 42:d9:b0:c6:bd:fe:9d:e7:4a:e5:47:14:8b:dd:e2:8d:ba:e8: 5f:17:ea:89:1b:61:84:bd:c0:04:fb:e7:d6:2a:8e:c6:b2:33: 77:c5:7c:bc:09:0d:6c:8a:97:6d:00:aa:34:60:93:d5:09:ce: 56:62:c9:6a:87:4c:7b:09:6b:0b:11:14:5f:10:a2:12:03:f1: 63:1f:0c:ec:d0:1f:7b:0f:6c:e4:66:5b:ff:6a:51:a3:b0:74: d1:9d:71:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYFCFC9g3GrKDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmZiYWU4MWUtZjdmOS00MTA4LTgwY2MtZWJjZjJmOGY1ZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAiSyiautzYrj3h7fTP28nmwhXo7xEG2QKt6 ZlPunbEYwpi+SRSQ55mcQN3u7q3CroI1gZqalhp6tWEeoIMxcxE9WisH4HUdl+5E lMknxtCyEqAFDZTyEFRC3QnyiChk3WN+2CKE8gw4ZbtLL4UJbiuoC8Kwl2y20dRr Lgb/svDEgn4bETN82HJ/QI0nzMCEo3jITAxY3T/Q1mbcQx74SWvX7qNJ75BRTQw0 vtxxb+KvYxekXrRyPk6WyJaf6Wfowx2z7/N4/dS1N0MoD4yKFllU/svFY+4vTOJj Kfsv3grvLD0rmBd4EhMam+WDi66DEt/+I40A6V0W0WhJL/bBXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDimx6N3+XT5JZcaIuJtXK0EWW0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzM5YmQ1YTEtZDZiNS0z ZTQ4LTgxMzAtMjUyZjExYWZlZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9hcIqyfNzVJcruaZ+ffuu1i9+SXZY8JvUebc63p9VKvgOhv3u6h5FC +PBf0GGhYngv7pxfV/t81z1IyB/y2L64Tzo/Zjyuc99MOJWwENls/RJvv0wPDqFr ZJFR6KF+Q5goLwatXf3/fvzF12Kns1H/XnWxrYwPowncax1rtiL9+IJuH2du/dXz Y5vyVof3UwqvmDeynverJiCcaBw/tqx51kLZsMa9/p3nSuVHFIvd4o266F8X6okb YYS9wAT759YqjsayM3fFfLwJDWyKl20AqjRgk9UJzlZiyWqHTHsJawsRFF8QohID 8WMfDOzQH3sPbORmW/9qUaOwdNGdcY0= -----END CERTIFICATE-----Generated at Mon Aug 4 19:09:11 2025 by rpki-client