$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa File: 859f2179-6268-3d00-b2bc-ba3b138d14d0.roa (raw, json) Hash identifier: sA12Lng7ghrqzVO0qoL+jlRte850iSPPI1W8XkpPmp4= Subject key identifier: B2:FE:02:B2:42:70:11:A7:AA:83:19:C6:B3:E5:F9:4B:5C:50:F7:10 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841227649F806708B89F5980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:27:64:9f:80:67:08:b8:9f:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0a7c9f0e-5513-4245-b2ee-d6b2edfea442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:50:e9:20:02:e1:83:fb:83:55:01:91:40: 31:a0:38:6b:dc:cd:1b:9e:43:fd:e7:4a:26:6b:9c: 89:16:0b:db:f9:f4:f3:66:0e:8c:b1:a6:b4:66:12: c4:d4:ca:62:26:23:70:8f:5d:9b:5a:a6:0c:9f:e6: 9e:71:84:b6:1c:3c:27:8c:c3:10:82:c6:ba:5b:ef: 33:33:e8:ff:e7:ce:57:2b:c3:ca:10:f9:2d:72:77: 5f:3f:57:d8:69:d0:ec:15:e9:c5:0d:d8:85:71:d0: 00:30:71:69:4d:a6:f8:be:1e:49:f3:77:e9:e1:be: cb:bb:4a:e2:7d:7d:9a:cf:ab:1b:40:58:66:59:3e: c6:56:61:24:f0:27:1f:9e:f6:88:9d:e4:f6:bf:c8: 27:51:e3:18:f5:37:69:f3:70:6d:13:4f:84:fe:65: bd:c2:da:e6:be:67:b6:5f:b3:28:78:3e:13:9e:4a: f2:d4:bf:03:91:12:be:09:1e:0c:d9:47:e7:bf:83: 99:e7:83:0c:d7:b7:be:2b:fc:ab:be:70:ba:b0:e1: 3d:82:c5:f6:a1:df:80:a5:20:4f:48:dc:a0:39:24: 54:99:30:40:0a:4e:f8:af:1f:93:98:cb:38:3f:e5: d0:b5:1d:99:6e:2e:31:27:86:62:d7:71:95:56:a4: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FE:02:B2:42:70:11:A7:AA:83:19:C6:B3:E5:F9:4B:5C:50:F7:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f7:76:11:36:8d:41:fe:e6:e7:6a:ff:ef:55:36:f9:17:ee: 34:02:40:6e:19:06:a1:45:cb:ea:7a:1b:1a:9a:de:f5:02:3e: 3e:eb:fb:0e:ce:50:cc:a7:c1:fa:01:0c:ed:ad:16:5b:09:d5: 19:c9:71:19:23:21:2d:9d:54:29:cd:9c:32:3a:02:f0:8c:8f: c1:ff:c9:80:09:7f:f3:03:46:17:5a:3e:a1:2b:24:c9:9e:3e: 8e:9b:13:61:03:55:0a:a9:ee:5d:43:ce:52:32:fa:97:8a:88: b7:96:6c:05:18:69:e7:29:ea:26:93:99:57:c4:4f:6a:1a:b9: 91:28:3f:d5:39:32:66:b0:e4:2e:b2:92:91:b8:91:f5:f9:60: b4:12:7c:d3:88:23:d0:e2:83:3e:96:ce:fe:bc:24:d5:21:86: cc:1a:94:15:1c:ce:6f:d0:03:52:3a:68:97:13:3d:5a:c0:67: 96:f6:ab:39:74:24:89:18:0c:50:1b:ed:22:d9:b3:97:17:72: 7a:64:b3:04:61:17:c6:86:ee:b5:ff:75:80:aa:7c:ee:9e:af: 12:a0:30:bf:50:f1:6b:82:1a:64:33:0a:8c:ba:35:ca:dd:c9: 3d:8d:85:72:04:05:93:c5:44:65:ff:5f:6e:97:ec:f9:7f:a0: 82:27:43:13 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqEEidkn4BnCLifWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGE3YzlmMGUtNTUxMy00MjQ1LWIyZWUtZDZiMmVkZmVhNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/9Q6SAC4YP7g1UBkUAxoDhr3M0bnkP950om a5yJFgvb+fTzZg6Msaa0ZhLE1MpiJiNwj12bWqYMn+aecYS2HDwnjMMQgsa6W+8z M+j/585XK8PKEPktcndfP1fYadDsFenFDdiFcdAAMHFpTab4vh5J83fp4b7Lu0ri fX2az6sbQFhmWT7GVmEk8CcfnvaIneT2v8gnUeMY9Tdp83BtE0+E/mW9wtrmvme2 X7MoeD4Tnkry1L8DkRK+CR4M2Ufnv4OZ54MM17e+K/yrvnC6sOE9gsX2od+ApSBP SNygOSRUmTBACk74rx+TmMs4P+XQtR2Zbi4xJ4Zi13GVVqT+iQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLL+ArJCcBGnqoMZxrPl+UtcUPcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODU5ZjIxNzktNjI2OC0z ZDAwLWIyYmMtYmEzYjEzOGQxNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArNkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdvd2ETaNQf7m52r/71U2+RfuNAJAbhkGoUXL6nobGpre9QI+Puv7Ds5Q zKfB+gEM7a0WWwnVGclxGSMhLZ1UKc2cMjoC8IyPwf/JgAl/8wNGF1o+oSskyZ4+ jpsTYQNVCqnuXUPOUjL6l4qIt5ZsBRhp5ynqJpOZV8RPahq5kSg/1TkyZrDkLrKS kbiR9flgtBJ804gj0OKDPpbO/rwk1SGGzBqUFRzOb9ADUjpolxM9WsBnlvarOXQk iRgMUBvtItmzlxdyemSzBGEXxobutf91gKp87p6vEqAwv1Dxa4IaZDMKjLo1yt3J PY2FcgQFk8VEZf9fbpfs+X+ggidDEw== -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:45 2025 by rpki-client