$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa File: 8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa (raw, json) Hash identifier: 8t92UuFds8Wcyf//fCSRZ5XeqnMnP0oZR/9qILiyDTk= Subject key identifier: 0E:23:3E:49:D5:87:81:89:70:DA:0D:9A:49:B1:01:93:63:58:5C:F4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841230E84721949499ED0C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:30:e8:47:21:94:94:99:ed:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c74dfae5-e5b5-42bd-b86b-b9ccc73a87d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:53:5a:c1:97:e3:d0:8f:cd:47:a7:94:86: e0:ea:a1:90:17:19:bf:f1:bf:08:b1:fd:88:42:c2: 57:be:36:af:f2:59:74:cd:80:94:f2:98:1c:99:26: 1b:60:43:24:e7:55:f7:24:1f:45:4b:c3:62:96:fd: 2e:4f:a9:51:b3:7b:99:ae:f7:35:13:6c:25:96:78: 8a:4f:1a:fc:24:d3:8e:ea:91:eb:bc:c8:4d:b6:18: 7f:45:03:3e:84:a4:96:1a:0b:23:e0:66:c9:72:58: 79:7a:43:2d:a9:57:a9:b6:f5:61:35:be:a6:99:e0: cc:1e:e2:df:e9:02:17:42:06:d6:90:46:7e:53:e6: 95:ed:a1:5e:f6:a6:83:74:b5:03:ed:52:77:d3:b2: 25:a6:a2:d8:64:76:f0:77:30:09:69:83:f6:44:74: ae:25:a8:f9:35:e5:15:ae:99:15:68:f8:a5:ec:dc: 34:f7:39:53:4b:f6:01:25:68:75:06:68:af:e6:58: 82:0b:08:ae:88:eb:38:3e:ff:7f:74:74:6c:62:c8: 36:4b:c4:d3:ff:56:47:be:61:48:48:73:29:8b:49: 09:10:83:39:8f:c9:c7:c6:e8:af:03:92:9e:fa:5d: ff:81:65:e8:72:c8:d8:07:ad:0a:7b:17:8e:68:5e: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:23:3E:49:D5:87:81:89:70:DA:0D:9A:49:B1:01:93:63:58:5C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:64:72:41:60:95:63:8a:67:33:74:80:c4:cf:7c:e4:7a:a6: 23:2d:17:a4:57:5c:20:b3:b1:00:e7:bb:dd:6f:31:78:a1:94: 02:c7:86:1b:fc:d0:30:fb:6d:61:1e:d4:f1:b0:3c:2e:c7:8f: ec:23:6a:9b:53:aa:87:e1:3b:e1:1b:f8:84:3b:54:54:31:ec: 4d:7e:7b:cd:ff:6f:61:73:d9:de:3a:5b:cc:53:7f:b2:b6:62: 4b:0c:7f:c9:2a:d1:a5:b1:fd:2b:2d:e1:b2:ec:c1:92:ca:5e: 36:8b:42:6b:df:fe:bf:0e:91:49:d9:f3:7b:f2:89:ea:57:52: f5:34:17:f7:fb:42:86:b1:30:19:07:4b:46:c1:e0:16:df:11: c5:0d:e1:b1:70:2b:a4:6e:67:0c:ed:3a:4d:13:e1:bf:8b:87: 61:5c:95:e9:7b:b5:d9:60:cd:a5:65:4d:46:88:2f:df:a6:83: 1f:8c:c5:6b:53:e8:08:98:25:87:9d:c6:d3:bf:0a:8f:03:c2: ca:4f:e6:42:b3:f9:ba:1a:e7:25:90:86:47:a8:a0:a7:31:b6: 56:b1:ee:52:ad:66:52:f0:c5:38:1a:a1:f9:b7:bd:13:68:4d: 8e:79:9b:ae:0b:a2:0c:21:c6:af:84:f3:fb:ca:cc:63:67:39: bc:b1:ef:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjDoRyGUlJntDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Yzc0ZGZhZTUtZTViNS00MmJkLWI4NmItYjljY2M3M2E4N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKZTWsGX49CPzUenlIbg6qGQFxm/8b8Isf2I QsJXvjav8ll0zYCU8pgcmSYbYEMk51X3JB9FS8Nilv0uT6lRs3uZrvc1E2wllniK Txr8JNOO6pHrvMhNthh/RQM+hKSWGgsj4GbJclh5ekMtqVeptvVhNb6mmeDMHuLf 6QIXQgbWkEZ+U+aV7aFe9qaDdLUD7VJ307IlpqLYZHbwdzAJaYP2RHSuJaj5NeUV rpkVaPil7Nw09zlTS/YBJWh1Bmiv5liCCwiuiOs4Pv9/dHRsYsg2S8TT/1ZHvmFI SHMpi0kJEIM5j8nHxuivA5Ke+l3/gWXocsjYB60KexeOaF5rVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4jPknVh4GJcNoNmkmxAZNjWFz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGNmZTZhMjgtNGFjZS0z NjNhLThmNzctZmJmZDlmMzNkZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtkckFglWOKZzN0gMTPfOR6piMtF6RXXCCzsQDnu91vMXihlALHhhv8 0DD7bWEe1PGwPC7Hj+wjaptTqofhO+Eb+IQ7VFQx7E1+e83/b2Fz2d46W8xTf7K2 YksMf8kq0aWx/Sst4bLswZLKXjaLQmvf/r8OkUnZ83vyiepXUvU0F/f7QoaxMBkH S0bB4BbfEcUN4bFwK6RuZwztOk0T4b+Lh2Fclel7tdlgzaVlTUaIL9+mgx+MxWtT 6AiYJYedxtO/Co8DwspP5kKz+boa5yWQhkeooKcxtlax7lKtZlLwxTgaofm3vRNo TY55m64Logwhxq+E8/vKzGNnObyx7+w= -----END CERTIFICATE-----Generated at Mon Aug 4 19:05:45 2025 by rpki-client