$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8be47344-a631-3d2c-b2b7-dc3d503b692e.roa File: 8be47344-a631-3d2c-b2b7-dc3d503b692e.roa (raw, json) Hash identifier: 7V5XG+fRKfUBpTrCrJWXQy8dsZ7EOvxnm7jqLh4jX98= Subject key identifier: 2D:9B:AA:63:9F:A7:05:BC:47:DF:85:7D:5F:3F:F5:14:13:A6:F8:26 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8412305195A3665780B42080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8be47344-a631-3d2c-b2b7-dc3d503b692e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:30:51:95:a3:66:57:80:b4:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=7bfbe1cf-924c-4794-800c-ea3864e77e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:05:f7:30:5d:65:4f:46:ea:f3:ab:de:38: fe:47:36:37:6c:a0:b6:a9:2f:f2:cc:33:51:83:f7: 7e:ec:9e:cc:f4:bb:48:ca:3c:b5:6a:0d:f5:0a:6a: c4:b4:7e:ac:5a:98:46:92:7a:49:62:a8:91:9a:6f: 8c:b1:57:98:38:cb:6b:d9:cf:ec:14:9e:65:fe:9a: f3:55:c6:7d:3c:c1:cb:e6:ec:f7:04:80:ed:03:3c: 8c:c7:e0:ff:f7:9f:57:e9:56:6e:5d:5d:c7:d2:4b: 0d:59:3e:dc:3d:c7:de:0f:04:78:0f:16:eb:51:ff: 10:c4:72:40:95:26:92:2b:b7:8f:a4:61:84:ee:6d: 9d:5a:89:20:24:7c:8c:45:95:76:7f:ed:0b:22:4e: 8f:1f:f4:c1:da:7e:74:ef:ee:4e:63:4c:0f:98:78: 7b:dd:c5:85:a2:a3:2a:b8:91:7a:5d:4e:ac:a9:5e: 2d:8b:4a:82:97:ac:08:fd:b5:fa:46:7f:74:94:8d: 32:73:03:9c:c6:4b:7a:98:80:ba:e6:b0:15:7a:24: 9a:b8:d3:f8:5b:de:55:53:42:0f:c2:ec:c4:75:37: b1:d8:24:41:41:43:c2:85:7f:a1:f7:3a:1a:d8:33: b4:51:e5:fb:19:d5:54:c4:a8:8a:b2:0c:80:27:62: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9B:AA:63:9F:A7:05:BC:47:DF:85:7D:5F:3F:F5:14:13:A6:F8:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8be47344-a631-3d2c-b2b7-dc3d503b692e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7e:ef:7f:e9:2f:64:13:0b:92:49:07:d3:bb:d7:8a:5e:0a: 95:f9:05:9a:a1:86:cd:59:20:63:af:04:83:71:bf:b0:0f:6f: 43:45:1b:ed:08:bb:51:6f:94:79:5f:71:2b:e2:f4:b1:dc:c2: 5f:c1:7c:ad:63:17:d8:9c:e4:09:e8:e0:15:1e:6d:6c:8f:f9: 13:2c:69:45:61:0e:7a:50:ba:c6:f5:2d:46:ef:bb:0e:cf:02: 04:1b:a5:94:16:c3:fa:15:1d:db:4b:c7:4b:63:c3:83:8f:48: 59:fc:b0:7d:10:fd:91:cd:72:85:e4:71:1f:66:e0:94:af:6e: af:22:fb:26:68:7a:34:73:5f:05:62:d7:27:ff:ba:5d:33:de: 6c:c7:54:ed:ae:78:ed:c2:68:bf:9b:3c:0b:ee:4a:21:9f:8d: e4:0a:e7:e3:6b:3d:2f:50:fe:0f:97:77:98:17:f4:a9:65:ae: 40:e2:7c:ef:9e:99:16:aa:6e:71:c6:5d:ac:c0:9e:58:e3:45: 3d:06:af:44:3e:f8:7d:8a:d8:22:4a:d6:ab:32:14:25:7d:6f: 73:6e:f5:f2:71:72:e7:94:2d:5d:79:ad:29:e5:31:04:32:c6: e7:96:8a:10:21:bf:14:8f:48:55:cb:25:6a:b0:8c:4c:c5:82: 39:7b:e1:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjBRlaNmV4C0IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk N2JmYmUxY2YtOTI0Yy00Nzk0LTgwMGMtZWEzODY0ZTc3ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcoF9zBdZU9G6vOr3jj+RzY3bKC2qS/yzDNR g/d+7J7M9LtIyjy1ag31CmrEtH6sWphGknpJYqiRmm+MsVeYOMtr2c/sFJ5l/prz VcZ9PMHL5uz3BIDtAzyMx+D/959X6VZuXV3H0ksNWT7cPcfeDwR4DxbrUf8QxHJA lSaSK7ePpGGE7m2dWokgJHyMRZV2f+0LIk6PH/TB2n507+5OY0wPmHh73cWFoqMq uJF6XU6sqV4ti0qCl6wI/bX6Rn90lI0ycwOcxkt6mIC65rAVeiSauNP4W95VU0IP wuzEdTex2CRBQUPChX+h9zoa2DO0UeX7GdVUxKiKsgyAJ2L6qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2bqmOfpwW8R9+FfV8/9RQTpvgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGJlNDczNDQtYTYzMS0z ZDJjLWIyYjctZGMzZDUwM2I2OTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DraMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5+73/pL2QTC5JJB9O714peCpX5BZqhhs1ZIGOvBINxv7APb0NFG+0I u1FvlHlfcSvi9LHcwl/BfK1jF9ic5Ano4BUebWyP+RMsaUVhDnpQusb1LUbvuw7P AgQbpZQWw/oVHdtLx0tjw4OPSFn8sH0Q/ZHNcoXkcR9m4JSvbq8i+yZoejRzXwVi 1yf/ul0z3mzHVO2ueO3CaL+bPAvuSiGfjeQK5+NrPS9Q/g+Xd5gX9KllrkDifO+e mRaqbnHGXazAnljjRT0Gr0Q++H2K2CJK1qsyFCV9b3Nu9fJxcueULV15rSnlMQQy xueWihAhvxSPSFXLJWqwjEzFgjl74T0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:34 2025 by rpki-client