$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa File: b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa (raw, json) Hash identifier: zLCLyhNqHOqXY2blyH1H6uNKTBYuvl0zf5nwrXXebEE= Subject key identifier: 01:47:74:14:1F:4F:4B:29:19:C9:F1:44:69:A8:A5:F7:6A:24:6C:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411769B4B9F2C75F0E04880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:76:9b:4b:9f:2c:75:f0:e0:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3d378367-63f8-429a-b808-cdeb960c9eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b1:1a:c4:bc:fa:28:b6:a6:44:32:6f:b5:0c: dd:a2:59:c1:7d:26:4e:b4:d6:a1:cc:f0:a1:7d:39: 4c:d2:35:31:4d:68:90:0e:57:1c:9f:07:8f:c0:80: 1e:cf:26:c4:12:61:69:58:17:0c:75:f5:39:0a:93: 15:f8:9a:1c:a2:59:46:1e:98:ec:5d:db:94:aa:37: df:bd:f3:42:bd:f2:42:1f:f0:19:98:bd:09:13:94: bc:5a:8f:2c:ae:bc:be:e0:31:93:05:2e:79:79:cb: eb:d4:8b:6a:9b:df:6b:c4:ea:ce:f3:11:d2:8f:7f: a8:14:14:3f:c7:2c:d9:5b:82:eb:67:1a:16:eb:fb: 9e:f8:9a:f8:f5:79:9c:3a:ed:04:16:5c:11:42:a4: d4:61:7f:f8:53:ac:ee:f3:f7:78:33:49:de:49:36: e6:e5:3a:e3:c9:f4:55:fa:ca:ca:a6:a0:70:ce:33: 62:3c:34:6a:ee:ef:7a:63:86:3f:51:b0:02:01:ed: fa:d6:d7:2d:30:39:4a:59:1d:fe:0d:00:e5:56:b4: f5:30:70:68:ba:73:7e:06:a8:47:b4:4e:f2:0a:0c: a2:27:04:d8:a0:4a:a9:7f:71:3d:20:37:5e:12:f0: f4:ee:91:b2:8c:a8:cd:3b:f7:57:3f:f2:6f:99:95: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:47:74:14:1F:4F:4B:29:19:C9:F1:44:69:A8:A5:F7:6A:24:6C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e0:5e:01:35:63:5e:29:f5:75:d3:bd:78:10:53:f6:2d:a9: f6:ab:27:67:1f:7c:13:7c:b4:d2:0e:94:49:05:9f:4a:a1:76: f5:10:40:3b:7a:bf:8c:ce:ac:6b:68:d0:cf:3a:54:d9:db:87: 8d:04:60:35:a1:5e:ba:c2:0f:ad:88:83:42:b6:80:a5:ee:75: f6:57:81:b5:c5:63:04:44:36:92:1d:6f:c4:69:21:29:20:8f: 3a:8a:15:e5:5a:7c:6c:33:be:7d:c4:cf:82:39:c6:96:d1:27: 69:dd:31:db:5f:b7:d6:fb:ed:76:4c:97:2c:87:a8:38:24:36: ae:9d:03:f6:96:35:cf:dd:5b:4f:f0:90:80:8f:60:8a:94:00: cb:50:5b:b1:c3:02:50:53:af:81:e7:f3:da:ac:bc:ca:a4:25: 2a:de:70:78:e8:8f:46:9e:57:4a:d4:c7:43:05:08:81:64:38: 44:73:8f:35:fa:c5:44:b7:d8:43:e7:25:cc:5c:89:fd:c7:ef: 8d:d9:9c:fb:2e:0c:7b:a1:45:00:ba:7c:50:7f:f8:e2:21:f3: b9:b2:99:a5:c1:1e:ce:0d:ae:5d:f2:0c:c2:89:79:a8:1d:41: c3:a8:65:10:8e:c5:cb:f9:2f:c6:fc:1e:3b:4b:31:cf:72:0a: 06:af:0f:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXabS58sdfDgSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2QzNzgzNjctNjNmOC00MjlhLWI4MDgtY2RlYjk2MGM5ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbEaxLz6KLamRDJvtQzdolnBfSZOtNahzPCh fTlM0jUxTWiQDlccnwePwIAezybEEmFpWBcMdfU5CpMV+JocollGHpjsXduUqjff vfNCvfJCH/AZmL0JE5S8Wo8srry+4DGTBS55ecvr1Itqm99rxOrO8xHSj3+oFBQ/ xyzZW4LrZxoW6/ue+Jr49XmcOu0EFlwRQqTUYX/4U6zu8/d4M0neSTbm5TrjyfRV +srKpqBwzjNiPDRq7u96Y4Y/UbACAe361tctMDlKWR3+DQDlVrT1MHBounN+BqhH tE7yCgyiJwTYoEqpf3E9IDdeEvD07pGyjKjNO/dXP/JvmZUAwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFHdBQfT0spGcnxRGmopfdqJGx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjFmZDE1ZTctZWE5MC0z NmY2LWFjNDEtNjg3Y2NiMTg3ZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/gXgE1Y14p9XXTvXgQU/YtqfarJ2cffBN8tNIOlEkFn0qhdvUQQDt6 v4zOrGto0M86VNnbh40EYDWhXrrCD62Ig0K2gKXudfZXgbXFYwRENpIdb8RpISkg jzqKFeVafGwzvn3Ez4I5xpbRJ2ndMdtft9b77XZMlyyHqDgkNq6dA/aWNc/dW0/w kICPYIqUAMtQW7HDAlBTr4Hn89qsvMqkJSrecHjoj0aeV0rUx0MFCIFkOERzjzX6 xUS32EPnJcxcif3H743ZnPsuDHuhRQC6fFB/+OIh87mymaXBHs4Nrl3yDMKJeagd QcOoZRCOxcv5L8b8HjtLMc9yCgavD54= -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:21 2025 by rpki-client