$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa File: b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa (raw, json) Hash identifier: c+SNFp/9VfH3bu5oPerTTceb+MbBTfgjeuSZe4MR0kw= Subject key identifier: 3B:8D:AC:47:DF:3E:8F:D4:5D:52:3F:E6:5B:C1:6C:86:99:52:F7:75 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F8B1E8748E2508319E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.217.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f8:b1:e8:74:8e:25:08:31:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=697cb4bc-781d-416c-b072-1d4ed6dbb610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:c9:61:26:43:1c:ee:37:19:a6:6b:df:c9: 54:8a:1d:49:7c:a0:18:1b:7f:09:c1:bc:f4:7d:ad: e5:65:c0:8e:36:83:0a:e7:94:52:8d:6f:3d:eb:f3: ba:3d:c2:fd:5c:96:0c:c9:be:22:68:d5:cb:65:f7: 95:f6:a3:69:dc:25:d3:dd:08:eb:f8:e3:3a:fc:46: 69:36:ff:01:d5:df:49:67:07:b8:5d:b7:e3:0e:13: e0:e6:72:d7:10:aa:b2:9a:7b:7a:a1:ff:94:e5:05: 80:dc:1c:ac:70:b6:80:8e:9d:6c:76:0d:7c:1c:74: 3b:1c:30:35:72:30:09:90:4c:42:e7:12:e5:ab:b5: 79:54:28:df:e2:43:f2:5f:a3:b3:85:65:0e:cb:19: 43:84:6c:0f:2f:87:dc:f0:8c:82:4f:26:45:4f:0d: ac:fc:a7:ea:b2:71:88:9f:90:d1:aa:e3:4c:b0:5a: a8:66:44:cd:a5:c1:74:6b:d8:e7:f5:94:3a:98:fd: fa:11:ab:ca:d9:60:46:04:9b:1e:a4:76:d2:8e:c2: 95:cb:b6:5c:6f:e2:a6:aa:b3:cc:f1:80:e8:db:e5: db:5b:b3:ee:01:cd:8d:19:4e:e7:bc:cb:d3:7f:32: c8:ea:b7:f7:a9:2f:3c:c7:f5:8c:ca:07:23:51:92: 4e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8D:AC:47:DF:3E:8F:D4:5D:52:3F:E6:5B:C1:6C:86:99:52:F7:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:67:89:68:18:bb:bf:9c:f4:1d:31:d8:00:ea:d6:ce:84:b1: 74:6d:5e:6a:e8:e9:86:f0:65:d9:a1:b1:92:68:1f:34:74:96: 7e:87:09:be:0c:7d:ee:cd:40:e0:76:8e:4e:40:a3:92:24:3d: 63:b2:7a:f8:4f:35:9f:aa:83:74:f4:f2:00:1e:04:19:2e:c6: 9a:36:f0:36:a7:85:18:4b:18:72:1f:ad:2b:db:e2:50:77:e7: 68:18:bc:de:99:ad:57:64:0c:df:d7:1d:9e:00:b6:d8:6b:b0: 30:b6:13:94:00:94:94:da:81:83:1d:c6:80:2c:69:16:db:60: d6:16:89:5d:9d:3e:0d:c8:37:e3:b1:a1:c5:26:a3:24:af:5b: be:07:f2:a8:53:d0:4b:5e:1d:c6:a3:8b:de:1c:99:76:f5:1a: cb:6e:8c:00:49:6d:d3:fb:41:e3:26:fe:32:ee:f5:82:b1:ac: 5f:d0:5c:b8:c4:50:18:aa:49:cb:73:da:30:db:46:c4:b1:6e: 56:2b:af:5e:09:4a:11:dc:9c:64:0f:4d:28:f6:01:af:95:b7: ab:39:68:ac:7e:34:b0:dc:87:e7:d8:43:ab:7d:af:41:79:e2: c8:1d:9e:cf:87:d8:c5:9a:56:fc:87:25:dc:0c:7c:33:3b:f0: 7a:d3:c0:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPix6HSOJQgxngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk Njk3Y2I0YmMtNzgxZC00MTZjLWIwNzItMWQ0ZWQ2ZGJiNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkvJYSZDHO43GaZr38lUih1JfKAYG38Jwbz0 fa3lZcCONoMK55RSjW896/O6PcL9XJYMyb4iaNXLZfeV9qNp3CXT3Qjr+OM6/EZp Nv8B1d9JZwe4XbfjDhPg5nLXEKqymnt6of+U5QWA3ByscLaAjp1sdg18HHQ7HDA1 cjAJkExC5xLlq7V5VCjf4kPyX6OzhWUOyxlDhGwPL4fc8IyCTyZFTw2s/KfqsnGI n5DRquNMsFqoZkTNpcF0a9jn9ZQ6mP36EavK2WBGBJsepHbSjsKVy7Zcb+KmqrPM 8YDo2+XbW7PuAc2NGU7nvMvTfzLI6rf3qS88x/WMygcjUZJO8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuNrEffPo/UXVI/5lvBbIaZUvd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJhNmNlMzItMGRlNy0z YjUyLWI2YmItMjE2YTNkM2RiMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxniWgYu7+c9B0x2ADq1s6EsXRtXmro6YbwZdmhsZJoHzR0ln6HCb4M fe7NQOB2jk5Ao5IkPWOyevhPNZ+qg3T08gAeBBkuxpo28DanhRhLGHIfrSvb4lB3 52gYvN6ZrVdkDN/XHZ4AtthrsDC2E5QAlJTagYMdxoAsaRbbYNYWiV2dPg3IN+Ox ocUmoySvW74H8qhT0EteHcaji94cmXb1GstujABJbdP7QeMm/jLu9YKxrF/QXLjE UBiqSctz2jDbRsSxblYrr14JShHcnGQPTSj2Aa+Vt6s5aKx+NLDch+fYQ6t9r0F5 4sgdns+H2MWaVvyHJdwMfDM78HrTwIk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:51:40 2025 by rpki-client