$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa File: 79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa (raw, json) Hash identifier: 7Y9/hJdvbBP5L7+4kxe8XvfQmnENKVdTtZYt9yED/F0= Subject key identifier: F6:A4:D4:99:58:15:12:30:11:C2:3D:F3:B3:17:93:C2:0C:0A:CB:0E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411868F828CEF594E9E6D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:86:8f:82:8c:ef:59:4e:9e:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c722cd4a-28df-4e46-9170-167dee554298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:4b:12:f2:4c:7b:2c:58:b8:87:98:4e:e2: 7d:8d:39:2b:68:c3:ab:62:f9:d2:ed:2b:4a:a7:d4: 02:3f:cd:3f:6e:eb:7b:6a:74:85:9d:4b:8b:b5:5e: 28:0d:b3:6c:bf:f6:7c:88:70:42:c5:88:98:0c:4a: 15:cf:b6:72:96:e7:bf:ab:50:87:b4:81:9d:56:a8: 6f:71:ad:00:1c:08:7c:48:03:dc:93:98:50:e9:6c: 22:4a:21:5b:b8:6a:60:2a:35:9d:94:a7:a6:dc:cf: 88:0c:07:9e:44:67:ff:f3:ad:3a:5d:de:f9:22:1a: 8c:ae:03:e8:a6:25:b1:8a:61:a3:43:ff:86:5e:bf: 74:02:55:de:90:1c:71:04:56:f0:8f:85:31:f9:de: 22:90:12:f6:ee:8b:95:42:35:29:fa:4b:d2:96:68: 6b:42:2d:ff:5f:84:05:95:47:ce:b6:92:0e:7b:b9: fd:f4:77:c6:a2:65:c3:3b:97:3a:71:ca:a4:1d:2c: 3d:bb:23:ef:4e:94:10:46:80:29:52:c6:b3:54:0d: 74:2b:15:ea:52:0e:d7:0f:5c:a3:cf:98:61:94:7a: 60:dd:e3:37:fb:b2:d2:76:33:82:7b:01:ba:b3:53: 2b:9f:52:1d:3d:e9:2d:ff:5e:67:ef:3d:60:7a:6a: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A4:D4:99:58:15:12:30:11:C2:3D:F3:B3:17:93:C2:0C:0A:CB:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:3b:50:45:2f:2a:4f:d7:e9:c1:42:0f:2b:2d:aa:c1:de:dc: f5:49:b7:e0:dc:25:d9:2c:68:86:64:02:8a:27:9d:11:ad:6f: 7c:b2:22:d7:6c:29:ed:70:c3:1c:22:a5:36:75:23:e5:e6:4e: e1:49:12:57:29:56:1a:49:59:f0:bc:42:c1:48:14:e6:89:9e: 08:b3:d9:b6:04:ea:05:c6:0f:4b:b1:fb:5a:05:6f:32:c6:82: 09:1a:47:c9:0f:a4:61:7f:97:4e:1f:97:df:d1:0a:a5:2f:21: d7:63:5d:14:66:8c:2f:23:e1:a8:cf:7a:89:96:4a:fc:62:f0: ac:c3:df:d8:31:3c:3c:50:d2:09:54:39:5c:4f:6d:c6:16:7f: b4:41:49:63:28:06:0e:4c:88:0e:fe:64:30:7f:d8:34:af:17: 8f:ca:b2:d0:95:97:ae:2c:31:22:a6:0a:3a:6a:00:d7:05:0b: af:71:d3:cc:7c:e3:bd:84:7e:3d:c8:db:be:81:72:cf:9f:2d: 7c:fb:f0:a3:93:46:d2:8e:32:1b:2b:de:15:d1:38:91:68:df: 1d:ee:97:47:cd:d9:aa:2d:7c:d0:b1:cc:aa:63:bb:94:ac:ac: 5f:21:ed:37:80:89:02:9a:5b:15:ed:ec:ab:ec:9e:ea:de:fd: be:b8:be:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYaPgozvWU6ebQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzcyMmNkNGEtMjhkZi00ZTQ2LTkxNzAtMTY3ZGVlNTU0Mjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA149LEvJMeyxYuIeYTuJ9jTkraMOrYvnS7StK p9QCP80/but7anSFnUuLtV4oDbNsv/Z8iHBCxYiYDEoVz7Zylue/q1CHtIGdVqhv ca0AHAh8SAPck5hQ6WwiSiFbuGpgKjWdlKem3M+IDAeeRGf/8606Xd75IhqMrgPo piWximGjQ/+GXr90AlXekBxxBFbwj4Ux+d4ikBL27ouVQjUp+kvSlmhrQi3/X4QF lUfOtpIOe7n99HfGomXDO5c6ccqkHSw9uyPvTpQQRoApUsazVA10KxXqUg7XD1yj z5hhlHpg3eM3+7LSdjOCewG6s1Mrn1IdPekt/15n7z1gemqOgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPak1JlYFRIwEcI987MXk8IMCssOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzliMGMyZTYtMGRkMi0z ZTE3LTg3NDYtNDdhNDFiNWIxMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk7UEUvKk/X6cFCDystqsHe3PVJt+DcJdksaIZkAoonnRGtb3yyItds Ke1wwxwipTZ1I+XmTuFJElcpVhpJWfC8QsFIFOaJngiz2bYE6gXGD0ux+1oFbzLG ggkaR8kPpGF/l04fl9/RCqUvIddjXRRmjC8j4ajPeomWSvxi8KzD39gxPDxQ0glU OVxPbcYWf7RBSWMoBg5MiA7+ZDB/2DSvF4/KstCVl64sMSKmCjpqANcFC69x08x8 472Efj3I276Bcs+fLXz78KOTRtKOMhsr3hXROJFo3x3ul0fN2aotfNCxzKpju5Ss rF8h7TeAiQKaWxXt7Kvsnure/b64vng= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:28 2025 by rpki-client