$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa File: 8684240a-b3e2-3586-b1f0-1953cb883e6c.roa (raw, json) Hash identifier: C6Xp0SD0Gb6NamxEXbeZqrSTeWn61rnNuz8r29IQhIA= Subject key identifier: 10:7C:35:34:6E:0D:48:25:67:29:64:1F:48:33:31:01:5F:C4:93:9E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841229364F5D9012A618BC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:29:36:4f:5d:90:12:a6:18:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=95a3e775-7144-497c-8641-609470f9c46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:01:8f:49:62:4a:c3:07:59:15:1a:fd:db: d5:fb:bb:8d:6e:d9:8f:aa:89:07:04:dd:fb:61:12: cf:f9:10:e0:eb:c6:06:c8:b1:6c:7c:8b:71:6e:29: ac:61:ef:2e:3b:d4:e0:3e:97:8d:d3:e8:bb:3a:5c: 54:9e:ce:6a:c0:94:d0:9c:a0:2b:c1:b8:cb:bb:0a: 3c:cd:67:70:21:aa:1c:60:d7:d8:bb:69:bb:b1:bf: d1:8d:26:17:8b:54:07:e7:ac:ab:cd:90:3f:0e:9a: b7:36:88:d0:69:51:cf:c4:1e:ae:39:ec:13:b3:10: bc:fd:22:44:2e:0d:7b:05:fe:ac:52:08:d0:9d:02: 48:68:33:d5:ef:e8:4a:95:b4:4a:79:e9:2a:40:1c: c4:5c:5b:c4:3e:ef:96:c6:c4:5e:81:c4:67:e6:12: 72:6f:a0:49:c5:4d:ed:69:5f:47:07:c0:f5:d2:ff: fe:e5:36:d8:4e:64:b0:80:cd:e4:3e:a0:85:d2:27: c4:33:8f:2d:d2:cd:27:7a:20:7b:6e:1f:fa:99:da: d7:a5:ef:72:ba:ca:ce:19:83:a6:84:64:e8:ee:7e: aa:7d:e0:1e:c0:fd:2e:76:58:ac:be:da:36:e1:5a: f5:7d:f4:72:fa:35:7c:aa:23:87:e4:63:96:38:a2: 13:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7C:35:34:6E:0D:48:25:67:29:64:1F:48:33:31:01:5F:C4:93:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:da:ad:13:af:b5:5c:24:d8:16:9b:19:a5:8a:d1:fa:fb:06: 87:a4:aa:6d:e7:4e:f3:cb:09:1a:c6:71:e3:65:45:41:8c:86: 1f:d8:82:03:a8:15:17:47:fa:5b:5a:8f:d8:4a:95:02:3f:bb: 06:6d:2f:9e:ce:72:f6:ff:c1:54:6b:6e:fe:1a:78:d9:cc:5f: 42:06:9e:f3:72:3e:2f:1e:8b:ee:1d:2e:ee:c8:bb:0e:a9:43: 64:b3:a7:17:97:6e:ac:a7:aa:c2:48:2e:e0:c4:6f:26:22:8f: fc:80:ae:88:2e:cb:5b:73:28:50:29:f9:a7:f7:db:ab:02:db: 0c:4b:c7:e5:22:91:b4:0a:1b:52:d5:e4:7e:e0:76:b5:ac:0d: 83:6e:0e:82:4b:84:e6:85:43:89:63:18:ca:64:a0:17:b9:e7: 48:00:9e:29:27:29:0f:2c:0e:80:1e:52:e3:be:5f:8c:9e:45: 1b:c9:1d:93:a4:37:61:93:6e:25:bc:83:da:32:87:a2:5c:1a: 94:0f:3a:dd:ab:e7:e0:35:80:2a:c0:3d:8e:da:6e:62:fc:f6: 9b:7c:f9:7f:6a:1c:fd:4e:a4:94:49:1f:c1:ac:20:7c:99:c3: fb:21:cb:df:39:f4:fc:01:50:c1:36:81:e8:f7:d0:77:29:ba: c4:5e:3f:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEik2T12QEqYYvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTVhM2U3NzUtNzE0NC00OTdjLTg2NDEtNjA5NDcwZjljNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN4Bj0liSsMHWRUa/dvV+7uNbtmPqokHBN37 YRLP+RDg68YGyLFsfItxbimsYe8uO9TgPpeN0+i7OlxUns5qwJTQnKArwbjLuwo8 zWdwIaocYNfYu2m7sb/RjSYXi1QH56yrzZA/Dpq3NojQaVHPxB6uOewTsxC8/SJE Lg17Bf6sUgjQnQJIaDPV7+hKlbRKeekqQBzEXFvEPu+WxsRegcRn5hJyb6BJxU3t aV9HB8D10v/+5TbYTmSwgM3kPqCF0ifEM48t0s0neiB7bh/6mdrXpe9yusrOGYOm hGTo7n6qfeAewP0udlisvto24Vr1ffRy+jV8qiOH5GOWOKITBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBB8NTRuDUglZylkH0gzMQFfxJOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY4NDI0MGEtYjNlMi0z NTg2LWIxZjAtMTk1M2NiODgzZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHarROvtVwk2BabGaWK0fr7Boekqm3nTvPLCRrGceNlRUGMhh/YggOo FRdH+ltaj9hKlQI/uwZtL57Ocvb/wVRrbv4aeNnMX0IGnvNyPi8ei+4dLu7Iuw6p Q2SzpxeXbqynqsJILuDEbyYij/yAroguy1tzKFAp+af326sC2wxLx+UikbQKG1LV 5H7gdrWsDYNuDoJLhOaFQ4ljGMpkoBe550gAniknKQ8sDoAeUuO+X4yeRRvJHZOk N2GTbiW8g9oyh6JcGpQPOt2r5+A1gCrAPY7abmL89pt8+X9qHP1OpJRJH8GsIHyZ w/shy9859PwBUME2gej30HcpusReP3o= -----END CERTIFICATE-----Generated at Wed Aug 6 13:12:28 2025 by rpki-client