$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa File: 7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa (raw, json) Hash identifier: uANQ4SRRT7/Tq8e0ZjxMgp4GiTX8/lYEDy7huTKk2N4= Subject key identifier: 87:39:45:0D:1F:66:36:D6:0E:B7:DF:01:E2:06:81:DA:78:50:47:18 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411725B567ECB33B113A180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:72:5b:56:7e:cb:33:b1:13:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=40e393ea-c6a2-4fd5-a9fa-68695c943038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:8b:4a:db:dc:97:f7:4b:2c:47:30:43:2b: bf:93:cb:dc:6e:4d:08:7f:3a:fc:7a:38:17:9e:35: 21:89:9b:6b:8e:4b:46:cb:e0:92:5a:dd:ea:35:4c: 5d:02:8e:f3:54:f7:48:99:4d:60:51:ec:40:4f:5b: 48:62:e5:74:01:e7:0a:fe:6e:53:7f:74:5a:67:d5: e4:ed:8d:54:04:33:30:fd:d1:d1:88:c6:aa:9e:ad: 65:be:63:39:09:b6:28:d4:c2:2c:de:a4:23:47:e2: c1:f0:13:ac:92:0b:46:be:de:a6:b4:2d:c0:2f:fa: a3:8c:31:7d:26:ef:2a:8f:89:c2:6f:c0:8f:50:03: 29:fb:6a:5c:8b:b9:d8:98:c6:b8:91:bd:96:77:9a: e3:39:e5:54:db:3e:45:b0:35:f5:4d:3c:db:2d:50: 13:44:32:80:fc:c2:99:90:1a:f0:4f:70:06:69:f5: 49:9e:2c:c3:7f:1e:32:49:a3:27:29:a7:5c:72:17: 26:b9:ce:68:3d:3c:d8:c0:0d:e3:59:f3:01:59:e9: ad:b1:44:9c:7d:47:0d:6c:3d:0d:3c:92:5b:3c:cc: b8:49:d6:93:c5:0d:7b:d9:41:9e:0e:18:fc:51:24: b3:2a:38:ac:48:9b:7d:b3:2b:13:92:19:8e:75:9a: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:39:45:0D:1F:66:36:D6:0E:B7:DF:01:E2:06:81:DA:78:50:47:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6b:d1:5d:e6:f5:6b:13:65:66:46:b4:dd:3a:52:94:ed:72: 4b:52:b1:8a:30:21:f0:b5:dc:42:62:3c:c7:16:68:a0:e7:5e: 6b:28:57:fd:36:1c:fc:54:21:9c:93:e1:84:0d:44:87:7f:ba: ef:ed:5c:a1:ef:53:ee:ff:83:af:88:1d:80:c1:3c:88:21:46: 13:bb:18:ba:2c:6c:95:87:0e:78:df:ab:3f:05:af:a6:54:bc: 6f:24:2a:bc:37:78:76:ed:95:59:2f:28:b4:a1:53:0e:4d:1f: 40:b3:b5:25:b5:c3:ab:3d:a6:07:b0:8c:c9:dd:66:c0:09:55: f9:c8:a1:da:b5:5a:c9:57:9b:16:12:2c:8d:3f:3f:97:95:f4: 45:42:41:2e:fc:a3:c5:c0:64:1a:e6:43:9c:c2:ca:76:b3:d2: 88:4e:45:d4:8e:11:86:4a:f1:a8:9c:55:19:6d:78:7f:10:04: 01:ac:59:27:7b:d1:97:e1:b4:34:a0:46:ca:c7:2e:c9:0d:84: 80:fd:95:7a:94:3e:0b:94:d3:3a:15:9e:51:e1:23:ba:fd:4f: cc:84:cf:45:d0:f1:2f:f1:88:a0:07:88:75:1e:fa:2c:b5:b4: de:d2:40:b2:15:e4:d5:60:1f:42:0a:8c:7a:50:72:90:21:43: c7:37:33:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXJbVn7LM7EToYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDBlMzkzZWEtYzZhMi00ZmQ1LWE5ZmEtNjg2OTVjOTQzMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr06LStvcl/dLLEcwQyu/k8vcbk0Ifzr8ejgX njUhiZtrjktGy+CSWt3qNUxdAo7zVPdImU1gUexAT1tIYuV0AecK/m5Tf3RaZ9Xk 7Y1UBDMw/dHRiMaqnq1lvmM5CbYo1MIs3qQjR+LB8BOskgtGvt6mtC3AL/qjjDF9 Ju8qj4nCb8CPUAMp+2pci7nYmMa4kb2Wd5rjOeVU2z5FsDX1TTzbLVATRDKA/MKZ kBrwT3AGafVJnizDfx4ySaMnKadcchcmuc5oPTzYwA3jWfMBWemtsUScfUcNbD0N PJJbPMy4SdaTxQ172UGeDhj8USSzKjisSJt9sysTkhmOdZpt+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc5RQ0fZjbWDrffAeIGgdp4UEcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2E4Y2U0M2MtYTFlZi0z ZTYyLTk5MzEtYmI5NGEwYmE2M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdr0V3m9WsTZWZGtN06UpTtcktSsYowIfC13EJiPMcWaKDnXmsoV/02 HPxUIZyT4YQNRId/uu/tXKHvU+7/g6+IHYDBPIghRhO7GLosbJWHDnjfqz8Fr6ZU vG8kKrw3eHbtlVkvKLShUw5NH0CztSW1w6s9pgewjMndZsAJVfnIodq1WslXmxYS LI0/P5eV9EVCQS78o8XAZBrmQ5zCynaz0ohORdSOEYZK8aicVRlteH8QBAGsWSd7 0ZfhtDSgRsrHLskNhID9lXqUPguU0zoVnlHhI7r9T8yEz0XQ8S/xiKAHiHUe+iy1 tN7SQLIV5NVgH0IKjHpQcpAhQ8c3M1Q= -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:17 2025 by rpki-client