$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa File: 9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa (raw, json) Hash identifier: jM1jPR36N6nLTuJqFYnDH5SJmX2HClxFkztNluHpigk= Subject key identifier: 0B:2D:E0:00:6B:3D:65:6D:8C:18:82:C6:8F:78:79:42:2A:13:E6:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118C073428B2617CA17000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 209.85.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8c:07:34:28:b2:61:7c:a1:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=55ca9d02-b655-4f34-90b3-34daee6c1e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:84:be:83:60:d9:62:cc:67:ff:df:74:e0:17: a7:62:b1:5c:32:72:71:5d:2b:a4:e8:cd:a7:28:4a: 4a:1d:fa:f1:5a:3a:79:b7:86:bc:06:f8:10:f1:07: be:a2:8b:c4:a0:d8:be:70:25:56:38:a4:be:4e:02: 6e:99:fd:12:fa:e9:e7:62:fb:bf:6c:c0:c3:14:24: d8:24:fd:50:7a:14:74:c6:d2:59:a6:46:97:84:9e: ea:f7:5c:93:ba:ed:93:59:6c:3d:91:d5:22:04:1e: 5a:48:7b:6c:b8:e3:df:82:ba:7c:b2:7e:e6:e9:1c: 24:34:b9:c6:50:d8:a0:ea:82:e3:6b:d3:72:e6:ab: 9a:2b:44:6a:4b:6a:19:31:0b:d0:00:db:c8:db:40: a3:ea:4d:ba:35:e8:c0:c4:1d:e0:40:96:cd:ac:50: 78:b8:6b:fe:4b:4e:31:04:da:b0:8f:e0:d8:00:89: ec:fa:40:6a:d4:7c:52:b3:12:cb:47:a3:ca:4c:89: af:ca:88:5f:39:6a:7d:32:7a:5a:ad:04:31:81:4f: 13:5c:c3:df:50:7c:7a:38:bb:ad:14:d2:a1:a9:37: 93:c0:40:e2:43:7f:cc:72:0d:f9:c9:91:9a:fc:a2: d0:dd:5c:a8:31:89:af:79:2e:88:a7:3a:ac:51:09: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2D:E0:00:6B:3D:65:6D:8C:18:82:C6:8F:78:79:42:2A:13:E6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ab:10:f8:40:d5:f3:74:9f:ef:94:fa:f0:a0:0a:95:cf:13: 09:c3:b4:c5:fa:03:29:07:5c:70:7b:20:8a:22:1d:aa:c3:be: 27:0c:b1:5d:47:d5:ca:d2:73:10:e6:d7:8e:6d:c2:cf:ce:67: 01:45:a0:a1:0e:3d:86:d5:b0:0b:9b:74:2c:bd:5e:67:fd:c9: bd:82:04:3f:ae:9b:66:75:f4:13:52:3e:5a:c8:2e:01:d3:8a: 08:82:67:98:df:b4:63:75:c7:58:c6:8b:8e:29:36:a8:3f:53: ad:7b:e0:8e:84:ee:ef:8d:c8:3c:8c:75:b9:06:aa:8b:85:89: 55:96:33:3c:3e:ac:4e:d1:e5:76:66:15:b6:25:d6:20:4e:90: 7e:95:a3:42:d1:17:84:5e:03:20:83:1d:c0:50:a6:ce:4c:8e: 3e:bb:e9:6c:3b:34:43:f0:b9:6d:7b:4f:a3:a9:86:2c:2b:a5: 72:40:ee:22:94:2c:bc:68:f9:97:60:8d:4a:0e:6a:89:e6:7b: 68:93:2f:ab:5a:59:0f:12:ee:45:91:3a:04:3a:0c:72:f5:f0: 3a:de:1f:9d:51:50:82:4b:44:d6:75:25:43:7c:b1:be:18:73: 18:23:ba:21:cf:2d:26:b1:c6:53:2a:b5:7f:d1:e3:ef:db:05: a4:99:88:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYwHNCiyYXyhcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTVjYTlkMDItYjY1NS00ZjM0LTkwYjMtMzRkYWVlNmMxZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4S+g2DZYsxn/9904BenYrFcMnJxXSuk6M2n KEpKHfrxWjp5t4a8BvgQ8Qe+oovEoNi+cCVWOKS+TgJumf0S+unnYvu/bMDDFCTY JP1QehR0xtJZpkaXhJ7q91yTuu2TWWw9kdUiBB5aSHtsuOPfgrp8sn7m6RwkNLnG UNig6oLja9Ny5quaK0RqS2oZMQvQANvI20Cj6k26NejAxB3gQJbNrFB4uGv+S04x BNqwj+DYAIns+kBq1HxSsxLLR6PKTImvyohfOWp9MnparQQxgU8TXMPfUHx6OLut FNKhqTeTwEDiQ3/Mcg35yZGa/KLQ3VyoMYmveS6IpzqsUQlXTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAst4ABrPWVtjBiCxo94eUIqE+apMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWYyMThiZmUtYWI1MS0z YzY0LWFiNmItYmE2NDNmYmFjMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+rEPhA1fN0n++U+vCgCpXPEwnDtMX6AykHXHB7IIoiHarDvicMsV1H 1crScxDm145tws/OZwFFoKEOPYbVsAubdCy9Xmf9yb2CBD+um2Z19BNSPlrILgHT igiCZ5jftGN1x1jGi44pNqg/U6174I6E7u+NyDyMdbkGqouFiVWWMzw+rE7R5XZm FbYl1iBOkH6Vo0LRF4ReAyCDHcBQps5Mjj676Ww7NEPwuW17T6OphiwrpXJA7iKU LLxo+ZdgjUoOaonme2iTL6taWQ8S7kWROgQ6DHL18DreH51RUIJLRNZ1JUN8sb4Y cxgjuiHPLSaxxlMqtX/R4+/bBaSZiGQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:47 2025 by rpki-client