$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa File: 87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa (raw, json) Hash identifier: +KV7qj7uIwXHqAo1dRYXcpkmuKCnEWDUYwwhfeiYPjE= Subject key identifier: 6B:06:12:FC:62:EF:C6:82:90:38:EB:5E:62:4B:0C:31:60:77:B6:44 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841238CDC477F3FEC2CAD1C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:38:cd:c4:77:f3:fe:c2:ca:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a59161ec-d860-4d0d-b813-420ad8c99a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:02:81:2b:e9:33:ec:64:df:a7:d3:69:32:3a: 07:28:4b:26:81:ab:cc:e9:92:1c:f6:b9:50:95:88: 23:9b:9c:92:5d:c0:28:69:fd:ad:e2:9e:c7:e5:57: 50:a3:c6:a9:d5:60:1e:e5:69:eb:ba:cf:7c:10:80: 90:a8:f0:04:af:05:51:ca:70:91:e2:49:15:3e:49: 8f:3c:4c:25:c7:d2:6e:7c:c2:15:1b:b4:6e:ac:9c: 91:29:90:6c:46:6f:a2:dc:c0:25:56:53:26:a1:a4: 54:9f:83:af:98:fd:4d:78:95:c3:8b:1c:f7:db:06: 8b:0f:f5:bb:2d:72:21:89:1c:ae:a5:99:0f:20:d8: 82:6c:6b:75:29:45:8e:d5:d9:49:0a:56:59:f5:f6: 1d:7d:b6:ed:36:dc:4f:b3:74:71:06:a0:79:5b:ae: 7f:94:13:92:d2:50:a7:7f:ad:45:f9:fb:e3:04:25: c7:c9:18:88:cd:ca:8f:b0:03:12:5d:a5:de:6b:94: 60:84:4f:7b:d5:bb:ac:39:3b:4b:39:39:c2:b9:38: 05:64:19:54:7e:6d:ab:f1:d1:70:ff:f0:33:64:97: c0:16:aa:4b:2e:3b:7e:2d:b4:58:0a:81:6e:68:1e: 24:fb:ab:c0:a5:1a:fd:8b:ec:3e:e1:98:01:04:80: 39:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:06:12:FC:62:EF:C6:82:90:38:EB:5E:62:4B:0C:31:60:77:B6:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:fa:82:3f:5f:a6:e1:9a:d9:fa:24:00:c6:95:cc:7e:b2:09: 71:da:c4:17:c2:3c:94:ea:bb:e2:65:de:0c:3e:d5:80:3d:40: fa:6a:7b:c2:b3:96:16:ac:02:73:49:47:de:7b:dc:dd:f8:18: b9:1f:64:72:8c:47:e3:d4:25:11:f2:00:de:f1:16:73:2d:7b: 94:fe:b9:e8:fa:a0:c4:be:32:fa:7e:e2:f7:80:ec:dd:7d:c3: 91:f3:e9:4d:6f:a2:31:59:09:3b:35:ec:54:9b:83:eb:b7:0e: 20:05:7d:7b:5c:77:6c:9a:75:b8:01:b0:10:a0:d9:de:6c:ff: 62:53:c0:d0:cb:e9:df:80:a4:35:89:42:a5:1a:f2:5f:d9:d9: b4:ed:cf:da:25:93:a2:1e:8c:7e:2d:9a:5e:5a:b8:f5:3f:a7: d5:be:59:20:e2:51:02:35:14:07:b6:c9:7f:30:4d:63:8a:15: c7:2f:d3:a5:b0:80:b2:88:6d:a2:24:7a:25:7a:62:ab:46:00: 6d:e7:fa:e1:dd:e2:11:72:79:98:96:a9:b8:fe:f8:74:dd:d1: 27:31:4c:08:44:5c:f5:4d:8d:64:44:29:b1:85:18:e3:8f:22: 1c:95:36:40:e3:77:93:2f:4a:99:4a:78:4f:76:16:4f:88:6b: 43:7c:0c:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjjNxHfz/sLK0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTU5MTYxZWMtZDg2MC00ZDBkLWI4MTMtNDIwYWQ4Yzk5YTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwKBK+kz7GTfp9NpMjoHKEsmgavM6ZIc9rlQ lYgjm5ySXcAoaf2t4p7H5VdQo8ap1WAe5Wnrus98EICQqPAErwVRynCR4kkVPkmP PEwlx9JufMIVG7RurJyRKZBsRm+i3MAlVlMmoaRUn4OvmP1NeJXDixz32waLD/W7 LXIhiRyupZkPINiCbGt1KUWO1dlJClZZ9fYdfbbtNtxPs3RxBqB5W65/lBOS0lCn f61F+fvjBCXHyRiIzcqPsAMSXaXea5RghE971busOTtLOTnCuTgFZBlUfm2r8dFw //AzZJfAFqpLLjt+LbRYCoFuaB4k+6vApRr9i+w+4ZgBBIA5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsGEvxi78aCkDjrXmJLDDFgd7ZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODdmNGRjMmMtMzFiYy0z M2VjLThlN2QtZDFiZDY1YmE2YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKD6gj9fpuGa2fokAMaVzH6yCXHaxBfCPJTqu+Jl3gw+1YA9QPpqe8Kz lhasAnNJR9573N34GLkfZHKMR+PUJRHyAN7xFnMte5T+uej6oMS+Mvp+4veA7N19 w5Hz6U1vojFZCTs17FSbg+u3DiAFfXtcd2yadbgBsBCg2d5s/2JTwNDL6d+ApDWJ QqUa8l/Z2bTtz9olk6IejH4tml5auPU/p9W+WSDiUQI1FAe2yX8wTWOKFccv06Ww gLKIbaIkeiV6YqtGAG3n+uHd4hFyeZiWqbj++HTd0ScxTAhEXPVNjWREKbGFGOOP IhyVNkDjd5MvSplKeE92Fk+Ia0N8DNw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:15 2025 by rpki-client