$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa File: a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa (raw, json) Hash identifier: wcOCjzGk/6FqBrQ3Z+iN2faISUYVw7LpE51SscaWSH4= Subject key identifier: 91:A8:5F:89:02:60:D5:58:7B:16:79:BE:D2:EE:09:63:34:3C:B0:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122BF70590CBD58F086780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.239.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2b:f7:05:90:cb:d5:8f:08:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=393d829d-5f05-4959-8942-d4b26b78b323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:4c:02:1d:a7:e4:ab:2e:24:af:af:18:b6: 63:8d:68:1b:e8:20:8e:69:3b:7a:b3:18:a0:11:fb: 98:ba:69:5f:fa:bc:22:84:aa:62:97:88:5f:17:d2: 6d:77:71:ce:1f:e9:3c:fb:b5:ec:69:7f:c8:cc:15: 30:ee:63:08:06:48:b6:d8:e6:35:f6:bd:73:34:0e: 6a:17:50:4b:51:81:da:f9:b9:4b:72:3b:44:f2:ee: 29:33:96:a6:41:c8:75:1d:fe:7d:7b:00:74:85:aa: 25:3f:b2:3b:33:7a:c7:ed:81:04:9e:68:b1:09:2a: 99:43:3a:ad:5d:25:6d:42:1b:f4:ec:62:f2:c8:30: 35:cf:90:79:ac:6f:54:c1:d5:e9:ec:d4:37:2b:31: d3:c6:82:b9:86:ed:2d:b7:d3:bf:65:ce:d3:c9:7f: a1:ab:a8:dc:bf:9f:e0:64:f7:6c:d8:91:fc:1a:24: 60:46:98:28:6b:34:c2:1c:0c:b0:91:1e:3f:b9:6d: 58:49:0c:6a:d2:21:a3:a4:86:4c:8c:3e:06:c1:60: 35:26:fb:2d:e2:25:4d:d2:01:5b:e4:f6:f8:84:d6: f4:53:0d:9e:85:90:01:a2:33:aa:28:d8:ec:54:fd: e1:a7:20:8f:e2:9d:5f:d5:2b:be:ed:36:21:94:52: 92:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A8:5F:89:02:60:D5:58:7B:16:79:BE:D2:EE:09:63:34:3C:B0:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e5:17:a7:5d:dc:b8:d8:2d:33:ed:05:fb:99:25:31:3c:8e: 6c:3d:82:b4:4d:81:41:02:57:4d:41:f6:46:bb:3f:a3:94:f9: 7e:54:73:d2:2e:49:28:b2:60:26:e0:c1:58:64:98:5d:d1:39: 15:60:2a:78:75:5b:5c:92:35:4f:40:b7:9d:7d:e1:53:06:ec: ac:a3:3f:c1:bd:04:d8:3e:34:76:cb:79:34:22:ef:08:71:f3: d0:5f:d9:c3:fa:9b:b7:73:df:53:9a:72:c5:78:d5:12:c3:17: 57:48:2b:ce:00:bc:25:97:1f:93:1c:b9:0f:cc:97:b5:15:1b: d1:c0:0a:65:13:17:8d:8c:0a:57:95:53:da:c6:bf:76:65:ca: 3a:a4:84:af:3e:18:4b:a4:c0:dc:dc:8b:39:ed:88:40:af:79: 08:35:a4:9c:c9:bc:9c:e3:c9:33:aa:e7:f3:78:21:9b:5f:b1: bc:cd:4c:3d:6b:11:2d:57:79:78:21:82:31:75:74:b2:74:4e: f0:0f:9c:d4:b1:4e:0b:d0:45:77:c9:af:b5:9e:c9:7c:9c:c4: d1:59:b4:37:4a:77:bf:cd:9b:eb:1a:6c:4b:29:7c:c3:9e:ed: ec:9c:89:1d:7c:a5:29:fb:69:bc:c4:67:1f:86:a5:4e:41:cf: ac:67:5a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiv3BZDL1Y8IZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzkzZDgyOWQtNWYwNS00OTU5LTg5NDItZDRiMjZiNzhiMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosxMAh2n5KsuJK+vGLZjjWgb6CCOaTt6sxig EfuYumlf+rwihKpil4hfF9Jtd3HOH+k8+7XsaX/IzBUw7mMIBki22OY19r1zNA5q F1BLUYHa+blLcjtE8u4pM5amQch1Hf59ewB0haolP7I7M3rH7YEEnmixCSqZQzqt XSVtQhv07GLyyDA1z5B5rG9UwdXp7NQ3KzHTxoK5hu0tt9O/Zc7TyX+hq6jcv5/g ZPds2JH8GiRgRpgoazTCHAywkR4/uW1YSQxq0iGjpIZMjD4GwWA1Jvst4iVN0gFb 5Pb4hNb0Uw2ehZABojOqKNjsVP3hpyCP4p1f1Su+7TYhlFKSowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGoX4kCYNVYexZ5vtLuCWM0PLB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTVhMjhmZTgtMjMwYi0z ZmRkLTliZmMtNWZiYjY2MTQ4NDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvlF6dd3LjYLTPtBfuZJTE8jmw9grRNgUECV01B9ka7P6OU+X5Uc9Iu SSiyYCbgwVhkmF3RORVgKnh1W1ySNU9At5194VMG7KyjP8G9BNg+NHbLeTQi7whx 89Bf2cP6m7dz31OacsV41RLDF1dIK84AvCWXH5McuQ/Ml7UVG9HACmUTF42MCleV U9rGv3ZlyjqkhK8+GEukwNzcizntiECveQg1pJzJvJzjyTOq5/N4IZtfsbzNTD1r ES1XeXghgjF1dLJ0TvAPnNSxTgvQRXfJr7WeyXycxNFZtDdKd7/Nm+sabEspfMOe 7eyciR18pSn7abzEZx+GpU5Bz6xnWlk= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:46 2025 by rpki-client