$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa File: a061a393-c24b-3e7d-890c-891cf39b13c9.roa (raw, json) Hash identifier: kzBGDo7Pc2JG1vKS95RsxC97c2QZMeulIc+SZ2GQviw= Subject key identifier: B9:3E:75:D3:74:47:36:F4:F5:7F:44:19:7F:89:18:F7:D5:F2:E3:42 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F9CD674DB1ED9C3B7E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.217.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f9:cd:67:4d:b1:ed:9c:3b:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=ccd6a834-d0de-4814-9722-59fa1f483301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:89:c7:93:5a:38:0f:e6:57:3d:af:24:16: c5:1e:77:0d:53:9d:96:b0:c7:02:b3:fb:13:36:2e: 7d:6b:d9:01:e2:88:85:e2:57:a2:8e:5f:db:d6:64: 9b:fe:ee:25:cf:c0:67:1f:cd:8d:5c:a4:bf:5d:58: c7:a4:6f:fb:4b:68:4f:63:f8:54:11:78:af:10:88: 76:9b:39:99:66:3b:83:cd:e0:5f:2d:08:40:79:90: af:34:e7:8b:64:1c:05:da:fc:ca:ea:77:6f:fd:a5: c5:86:5d:8a:54:42:f4:bd:b1:35:f4:49:c8:3c:3a: 0f:6a:33:f6:44:ba:b6:e2:cb:1d:0b:c6:c7:a0:18: dd:6b:ca:a8:22:5d:bc:2e:44:30:a8:6e:d6:d0:f5: da:57:9a:41:d8:5a:7f:b8:87:b1:2b:87:96:ad:15: a3:a4:5c:bc:be:83:58:3a:d8:d9:ca:74:60:07:21: 20:39:c2:fd:94:1e:32:88:15:ba:6c:4c:59:4a:53: 73:7d:cd:6f:c6:63:94:5c:9a:30:45:e3:88:23:4f: 8c:5a:d2:32:55:0f:ec:b8:83:23:c1:5d:e3:fd:a1: 62:ae:cb:65:74:8d:bd:d5:ce:86:b8:d6:a5:ec:5a: 0e:55:3d:2a:d1:80:d8:3f:c6:d6:21:fe:1e:17:05: 9a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3E:75:D3:74:47:36:F4:F5:7F:44:19:7F:89:18:F7:D5:F2:E3:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:6e:2d:3c:fa:db:cf:2f:38:dc:06:7e:2b:72:b0:63:f5:a2: 57:84:d3:c9:93:52:9b:b1:4c:70:9f:30:63:89:95:e2:58:41: c2:e4:fd:46:e5:48:d9:2f:10:df:fd:99:b3:82:cf:b2:09:3a: 83:e8:b9:28:ca:83:be:d1:39:d2:37:a4:d8:6b:dd:7f:2f:cf: 5c:a8:ff:a8:23:34:85:ab:92:4f:d9:81:97:1c:e8:81:ca:d3: 81:5a:ec:de:6b:63:33:13:23:1c:55:da:ab:47:f2:60:c4:0a: ff:3a:aa:df:0b:ab:b4:cc:45:44:a1:f5:0f:96:d4:6b:2b:0b: f8:8b:51:df:4d:20:a3:1f:50:4a:8b:e7:c0:39:29:06:b1:6e: 8d:4f:72:a8:57:1d:26:2b:15:5e:ec:d7:7f:81:61:b4:77:d0: 70:b1:2c:97:03:23:d7:b3:34:b4:a3:b5:6f:06:92:32:3e:9d: a0:08:9d:93:9f:98:b0:f0:25:0e:b0:bb:e3:53:c7:49:98:30: db:c4:39:16:7c:5a:92:01:55:0d:d7:53:e3:4c:da:e0:84:b2: 3a:70:7f:b5:0f:06:a6:1c:fb:51:06:39:ab:17:f5:9f:5b:a6: 2d:f9:54:be:61:cf:d4:d3:ff:18:4b:83:db:b0:38:72:e5:f9: a8:b2:c0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPnNZ02x7Zw7fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk Y2NkNmE4MzQtZDBkZS00ODE0LTk3MjItNTlmYTFmNDgzMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQGJx5NaOA/mVz2vJBbFHncNU52WsMcCs/sT Ni59a9kB4oiF4leijl/b1mSb/u4lz8BnH82NXKS/XVjHpG/7S2hPY/hUEXivEIh2 mzmZZjuDzeBfLQhAeZCvNOeLZBwF2vzK6ndv/aXFhl2KVEL0vbE19EnIPDoPajP2 RLq24ssdC8bHoBjda8qoIl28LkQwqG7W0PXaV5pB2Fp/uIexK4eWrRWjpFy8voNY OtjZynRgByEgOcL9lB4yiBW6bExZSlNzfc1vxmOUXJowReOII0+MWtIyVQ/suIMj wV3j/aFirstldI291c6GuNal7FoOVT0q0YDYP8bWIf4eFwWakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk+ddN0Rzb09X9EGX+JGPfV8uNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA2MWEzOTMtYzI0Yi0z ZTdkLTg5MGMtODkxY2YzOWIxM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZuLTz6288vONwGfitysGP1oleE08mTUpuxTHCfMGOJleJYQcLk/Ubl SNkvEN/9mbOCz7IJOoPouSjKg77ROdI3pNhr3X8vz1yo/6gjNIWrkk/ZgZcc6IHK 04Fa7N5rYzMTIxxV2qtH8mDECv86qt8Lq7TMRUSh9Q+W1GsrC/iLUd9NIKMfUEqL 58A5KQaxbo1PcqhXHSYrFV7s13+BYbR30HCxLJcDI9ezNLSjtW8GkjI+naAInZOf mLDwJQ6wu+NTx0mYMNvEORZ8WpIBVQ3XU+NM2uCEsjpwf7UPBqYc+1EGOasX9Z9b pi35VL5hz9TT/xhLg9uwOHLl+aiywDI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:11:54 2025 by rpki-client