$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa File: 8602a905-b263-30a4-8140-3c7d39eccf04.roa (raw, json) Hash identifier: iPpahHsDnMhYJE0niGRJL2Iq0ofGn2A4rGsDTyGvRc0= Subject key identifier: C2:D9:A5:6B:5A:1A:28:85:63:81:07:54:94:57:B7:93:8E:94:44:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122A114E512DBE1443ED80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 209.85.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2a:11:4e:51:2d:be:14:43:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6acbd810-4a9c-4e3a-9aca-8129504582cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5e:51:9a:63:87:2e:a1:4b:e1:32:26:9f:92: 77:ba:ea:a7:14:23:b8:1f:bf:f2:f1:63:cd:5d:31: c0:e4:42:67:92:2e:ff:e8:cf:ca:43:1d:22:26:a4: 69:cc:d7:28:27:4a:9e:c8:76:f6:e2:0f:6c:7a:de: 01:ed:95:94:c9:04:2b:98:9b:f9:f2:fb:a2:d7:1a: 8b:c1:c1:b5:52:44:ad:fa:d0:ba:44:33:89:59:7b: a0:6a:da:bb:c6:40:30:0e:b3:5b:b9:02:4f:2f:79: 4e:81:f9:06:8f:f0:06:51:c6:38:82:11:54:75:fb: 04:2e:4c:44:5a:f3:da:dc:5f:39:3b:e4:0e:b0:1a: 95:b2:6d:07:78:aa:8f:b6:d6:00:f3:ef:77:ea:b4: fe:f5:8e:cb:f0:f2:39:e8:65:a0:51:8c:cb:9d:ee: 8a:b2:89:f4:b4:3e:6f:e4:45:60:8b:02:2a:73:22: 89:06:8e:16:8d:f7:ab:b4:1c:4e:eb:a3:0a:0d:7c: 93:e1:ae:e6:0d:7a:ec:25:04:c4:70:4a:4c:06:ea: 3c:2a:2c:8e:87:d5:0f:9f:06:a5:3a:05:ee:dc:b7: 38:cc:d9:7d:e0:d5:02:58:b8:54:38:99:d7:98:79: 13:cd:c3:eb:71:81:7d:90:b1:ef:e9:37:59:ea:97: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D9:A5:6B:5A:1A:28:85:63:81:07:54:94:57:B7:93:8E:94:44:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c2:09:4d:2d:c1:0d:22:8d:d4:74:47:03:73:9d:0f:6c:84: 21:1b:5f:f1:c2:b3:d1:87:81:d1:70:e8:cc:68:ed:6c:57:4d: 2c:e2:b5:bf:dd:a1:8a:ec:bd:a4:d7:a9:e5:78:6b:5d:bf:1b: ea:50:c3:36:44:bd:94:83:75:c6:3c:65:13:74:bd:39:5b:f4: 6e:77:09:bb:2c:06:47:07:50:c1:6e:69:83:a4:8e:88:3c:0c: b8:b7:7c:55:17:57:ca:27:bd:79:54:1b:8f:a5:66:5c:9b:bf: 26:33:d0:d4:02:69:82:7f:00:c0:40:84:5c:6c:69:97:74:ce: 99:d9:ae:36:71:76:45:47:84:60:e0:2e:c0:b8:cd:38:ec:5b: 17:d7:71:3d:e1:5e:61:4a:53:15:a0:fc:ad:3f:05:a1:8f:07: b8:b3:66:b1:84:20:5d:9d:0c:6c:95:5a:b8:47:03:2b:b4:4f: ef:d1:d7:60:73:37:84:85:56:3b:07:f1:b1:60:7b:38:d7:7f: 71:ff:ab:2c:b1:05:9c:78:be:da:f7:51:37:db:09:6f:3f:66: b3:2f:06:80:c7:f9:14:81:3b:b4:a5:87:fb:8b:ac:00:9e:3f: 8a:25:cf:52:fe:38:c7:ae:ee:e3:1f:ad:54:cc:50:71:6a:c1: 64:c3:e3:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEioRTlEtvhRD7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmFjYmQ4MTAtNGE5Yy00ZTNhLTlhY2EtODEyOTUwNDU4MmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi15RmmOHLqFL4TImn5J3uuqnFCO4H7/y8WPN XTHA5EJnki7/6M/KQx0iJqRpzNcoJ0qeyHb24g9set4B7ZWUyQQrmJv58vui1xqL wcG1UkSt+tC6RDOJWXugatq7xkAwDrNbuQJPL3lOgfkGj/AGUcY4ghFUdfsELkxE WvPa3F85O+QOsBqVsm0HeKqPttYA8+936rT+9Y7L8PI56GWgUYzLne6Kson0tD5v 5EVgiwIqcyKJBo4WjfertBxO66MKDXyT4a7mDXrsJQTEcEpMBuo8KiyOh9UPnwal OgXu3Lc4zNl94NUCWLhUOJnXmHkTzcPrcYF9kLHv6TdZ6pezYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLZpWtaGiiFY4EHVJRXt5OOlETUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODYwMmE5MDUtYjI2My0z MGE0LTgxNDAtM2M3ZDM5ZWNjZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvCCU0twQ0ijdR0RwNznQ9shCEbX/HCs9GHgdFw6Mxo7WxXTSzitb/d oYrsvaTXqeV4a12/G+pQwzZEvZSDdcY8ZRN0vTlb9G53CbssBkcHUMFuaYOkjog8 DLi3fFUXV8onvXlUG4+lZlybvyYz0NQCaYJ/AMBAhFxsaZd0zpnZrjZxdkVHhGDg LsC4zTjsWxfXcT3hXmFKUxWg/K0/BaGPB7izZrGEIF2dDGyVWrhHAyu0T+/R12Bz N4SFVjsH8bFgezjXf3H/qyyxBZx4vtr3UTfbCW8/ZrMvBoDH+RSBO7Slh/uLrACe P4olz1L+OMeu7uMfrVTMUHFqwWTD4zU= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:10 2025 by rpki-client