$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa File: 82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa (raw, json) Hash identifier: qV1zyyBK34Xcfpd5qg2AJtWvtLz5C591Yy9ivmufA+M= Subject key identifier: 8E:33:17:4B:47:17:FA:A8:2C:2D:1E:B6:53:A6:D9:01:DD:89:5C:54 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117FE12BCCC69CE236D400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 209.85.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7f:e1:2b:cc:c6:9c:e2:36:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ad45437a-bb75-4d2a-a86d-72a8c174029b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:b2:95:28:32:b5:3e:5f:f5:79:5a:74:4b: ab:e6:56:12:cb:e2:20:53:f5:b6:c3:4d:6a:66:16: 76:be:61:17:7b:b5:56:c0:a5:d1:2e:2c:22:29:0b: 4f:66:00:e6:38:b4:f4:45:62:45:c0:02:a4:f7:aa: 49:30:6f:40:77:bd:2e:55:1b:7d:a0:3b:ed:57:0c: 10:d1:db:b4:97:7d:b7:c3:01:e0:6a:94:5a:8d:76: 49:56:9d:2b:99:18:d0:ee:9a:ba:35:f3:d2:e7:41: 95:d6:db:cf:1e:15:46:7b:4b:47:02:44:55:4d:00: ad:79:7b:62:5d:2a:bc:8c:1d:fd:6c:d7:f1:c9:13: 84:9f:6b:c1:13:9d:4a:43:ca:58:02:99:2e:ba:6d: 16:ab:8a:91:6c:25:57:c4:1a:e5:0c:2e:53:37:63: bd:b0:fb:d3:0d:1e:d5:27:66:2f:dc:ac:de:18:ab: 7e:31:a8:6c:51:f9:65:4f:04:fa:f5:5e:36:33:84: 11:d4:85:c4:fc:84:5d:c0:2c:b1:c0:c5:e4:e7:da: 55:b2:b7:3d:fa:0d:f3:ad:9b:01:97:c2:bd:a2:9f: b2:14:a4:a2:1f:83:ab:1b:52:96:ff:d2:4f:a4:37: 62:e9:13:36:4b:4e:7f:8d:19:4c:2c:0c:41:12:07: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:33:17:4B:47:17:FA:A8:2C:2D:1E:B6:53:A6:D9:01:DD:89:5C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:af:34:cb:d1:7e:89:9b:c6:88:46:b5:1a:47:01:45:0b:e1: 63:cf:5f:72:0b:05:a4:b4:10:aa:55:f6:f5:a9:86:7b:b0:be: ee:ee:e0:b1:4d:84:49:2c:a3:b7:bf:a6:76:2e:4d:a3:aa:b9: 18:6f:6c:78:1b:38:66:3a:9a:c8:33:fd:17:2e:2b:bc:65:fd: e7:56:b0:d1:6d:08:09:7f:bf:dc:68:23:86:2d:f6:df:3c:ce: f6:3f:5a:23:b8:0f:4c:4e:25:3a:6c:f7:94:2f:fa:da:91:58: 58:9a:9f:b6:97:80:c3:07:f9:41:ce:da:87:01:9b:ca:82:08: 3a:a9:b8:5f:d0:a5:4e:76:ac:2a:1b:53:71:13:16:20:15:c6: 0c:37:94:90:ea:4c:39:5d:b8:f1:97:38:7e:fb:05:38:7d:6c: a1:7b:86:bb:56:21:63:80:50:68:76:e7:e1:00:12:86:1f:40: 44:18:fb:1f:43:19:68:12:22:b0:52:58:aa:a5:f2:e0:37:6b: ed:40:9f:0b:12:93:56:cf:ff:c5:14:fa:8c:94:2e:13:2a:32: 3b:6c:52:5b:f8:68:26:0b:6e:64:0e:26:71:2d:7c:d2:bc:00: 4e:ff:36:90:3c:75:c2:83:2a:d5:bc:b1:18:87:c1:dd:0b:d0: a9:e4:14:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEX/hK8zGnOI21AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWQ0NTQzN2EtYmI3NS00ZDJhLWE4NmQtNzJhOGMxNzQwMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSSylSgytT5f9XladEur5lYSy+IgU/W2w01q ZhZ2vmEXe7VWwKXRLiwiKQtPZgDmOLT0RWJFwAKk96pJMG9Ad70uVRt9oDvtVwwQ 0du0l323wwHgapRajXZJVp0rmRjQ7pq6NfPS50GV1tvPHhVGe0tHAkRVTQCteXti XSq8jB39bNfxyROEn2vBE51KQ8pYApkuum0Wq4qRbCVXxBrlDC5TN2O9sPvTDR7V J2Yv3KzeGKt+MahsUfllTwT69V42M4QR1IXE/IRdwCyxwMXk59pVsrc9+g3zrZsB l8K9op+yFKSiH4OrG1KW/9JPpDdi6RM2S05/jRlMLAxBEgfbWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4zF0tHF/qoLC0etlOm2QHdiVxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODJiYjhlNGItOGU2OC0z MDNkLTlmZjEtOTNmNWY2Njg4ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGvNMvRfombxohGtRpHAUUL4WPPX3ILBaS0EKpV9vWphnuwvu7u4LFN hEkso7e/pnYuTaOquRhvbHgbOGY6msgz/RcuK7xl/edWsNFtCAl/v9xoI4Yt9t88 zvY/WiO4D0xOJTps95Qv+tqRWFian7aXgMMH+UHO2ocBm8qCCDqpuF/QpU52rCob U3ETFiAVxgw3lJDqTDlduPGXOH77BTh9bKF7hrtWIWOAUGh25+EAEoYfQEQY+x9D GWgSIrBSWKql8uA3a+1AnwsSk1bP/8UU+oyULhMqMjtsUlv4aCYLbmQOJnEtfNK8 AE7/NpA8dcKDKtW8sRiHwd0L0KnkFA0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:30 2025 by rpki-client