$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4abdf97-b905-38cc-bd94-ccd8af38634a.roa File: b4abdf97-b905-38cc-bd94-ccd8af38634a.roa (raw, json) Hash identifier: VH2d767SQnqdEkpumXR0ModjstlF52yFhN4OKFo4K7g= Subject key identifier: B1:38:AF:05:90:41:CF:9F:18:29:20:F8:82:26:BE:50:A8:2A:CC:DA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841189B1D2B2AFD6B62EE680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4abdf97-b905-38cc-bd94-ccd8af38634a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:89:b1:d2:b2:af:d6:b6:2e:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a0df5b94-7621-475d-b022-bb465ccd59f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:93:4c:06:21:ea:d8:d2:8a:87:13:0e:c8:2a: 09:6e:aa:c6:08:ee:c5:0c:8a:fe:9d:38:3c:a2:54: 87:0e:b2:eb:e2:08:af:8e:9a:a9:44:b3:d0:f0:eb: db:7d:82:b7:cc:ef:99:d1:05:ce:87:1a:33:81:76: 3a:f9:f8:35:23:ed:e5:6c:06:fc:9f:38:4e:8c:a7: a0:9e:5b:6a:e1:1d:4a:3f:c8:2a:e7:e4:0e:8d:34: b2:58:f3:66:c4:13:66:91:2a:ec:61:c9:7c:f7:42: 92:94:1a:76:7e:83:4a:d1:f2:20:25:18:e3:f4:92: ce:4a:86:61:e9:eb:d5:44:64:ef:9d:e5:bd:92:aa: 80:f7:bd:39:0e:15:14:f4:6c:4c:93:99:1c:e3:54: ab:a0:7b:85:d1:35:4f:ed:43:ec:b9:15:04:9d:03: 22:11:41:83:8d:c8:59:07:e8:5f:f2:ea:44:36:26: 2b:9e:3e:db:d1:c2:7d:a9:bc:4b:10:03:2f:79:dd: 60:f8:e8:34:3b:5e:ab:61:71:6e:1d:af:90:a7:98: 8e:02:9f:14:d0:fc:86:40:b4:fa:f8:b2:a6:ea:f7: 58:74:32:69:14:dc:fe:24:e5:fb:6b:a6:18:f4:19: b1:89:a5:b6:48:3e:03:33:67:e1:57:47:d1:55:bf: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:38:AF:05:90:41:CF:9F:18:29:20:F8:82:26:BE:50:A8:2A:CC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4abdf97-b905-38cc-bd94-ccd8af38634a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b2:7c:07:ec:4b:9c:28:36:55:5b:a7:83:16:16:01:ac:69: 49:fb:95:3b:9f:32:94:39:35:cd:8b:6a:02:58:ed:cd:b1:f8: a7:d4:c4:ae:be:a2:16:0f:17:c7:6a:d8:4b:4f:a0:a3:33:22: e4:96:1b:49:b5:8a:61:70:14:43:87:88:af:c9:89:3d:41:c1: 5d:fa:b8:65:3c:2d:bb:f9:d4:a6:0a:da:50:54:0e:cb:a6:8f: 1b:8a:f9:07:7e:af:5e:a5:88:f6:b9:2e:5e:f0:1f:7f:b3:1c: bc:90:d4:ae:6a:2e:f5:61:d3:b0:37:06:a7:40:87:2b:84:32: 0a:8d:c2:ec:af:63:55:d4:ba:5b:cb:0b:d9:f5:d3:6a:d9:fa: 0b:be:03:fc:8f:b0:7d:19:c9:53:d5:c4:8f:bd:84:04:78:c9: 2b:90:a7:dd:1c:a0:18:42:92:b6:6b:12:22:de:11:33:d8:3d: 5f:e4:79:a4:0a:67:be:05:5b:df:41:11:2b:41:d4:aa:70:29: ed:81:91:a3:fe:12:2a:e4:dc:52:da:f5:c3:8e:4d:2d:20:ab: 40:54:0f:41:9e:ec:63:e4:a2:e4:2f:8a:9d:3b:c9:c0:72:f3: 74:0f:2f:9a:14:1b:1f:84:b6:92:24:ca:96:88:86:7c:cc:88: cc:66:c7:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYmx0rKv1rYu5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTBkZjViOTQtNzYyMS00NzVkLWIwMjItYmI0NjVjY2Q1OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJNMBiHq2NKKhxMOyCoJbqrGCO7FDIr+nTg8 olSHDrLr4givjpqpRLPQ8OvbfYK3zO+Z0QXOhxozgXY6+fg1I+3lbAb8nzhOjKeg nltq4R1KP8gq5+QOjTSyWPNmxBNmkSrsYcl890KSlBp2foNK0fIgJRjj9JLOSoZh 6evVRGTvneW9kqqA9705DhUU9GxMk5kc41SroHuF0TVP7UPsuRUEnQMiEUGDjchZ B+hf8upENiYrnj7b0cJ9qbxLEAMved1g+Og0O16rYXFuHa+Qp5iOAp8U0PyGQLT6 +LKm6vdYdDJpFNz+JOX7a6YY9BmxiaW2SD4DM2fhV0fRVb9gzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE4rwWQQc+fGCkg+IImvlCoKszaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjRhYmRmOTctYjkwNS0z OGNjLWJkOTQtY2NkOGFmMzg2MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeyfAfsS5woNlVbp4MWFgGsaUn7lTufMpQ5Nc2LagJY7c2x+KfUxK6+ ohYPF8dq2EtPoKMzIuSWG0m1imFwFEOHiK/JiT1BwV36uGU8Lbv51KYK2lBUDsum jxuK+Qd+r16liPa5Ll7wH3+zHLyQ1K5qLvVh07A3BqdAhyuEMgqNwuyvY1XUulvL C9n102rZ+gu+A/yPsH0ZyVPVxI+9hAR4ySuQp90coBhCkrZrEiLeETPYPV/keaQK Z74FW99BEStB1KpwKe2BkaP+Eirk3FLa9cOOTS0gq0BUD0Ge7GPkouQvip07ycBy 83QPL5oUGx+EtpIkypaIhnzMiMxmx8I= -----END CERTIFICATE-----Generated at Wed Aug 6 16:06:28 2025 by rpki-client