$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa File: b803768f-6f65-3934-87a6-cba4dc1d2977.roa (raw, json) Hash identifier: ZL4RLmkaTEWx5ro/8xXeVPPlsfxXZpdfHnINm9hpCWc= Subject key identifier: 4C:45:12:40:D4:5B:C7:6F:74:48:C8:A6:8C:D8:15:B2:C1:D5:D6:94 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411898D7DC33F0D8D24D6C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:89:8d:7d:c3:3f:0d:8d:24:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=231fc16d-13d5-41e9-828d-9337597f05f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d8:4b:0f:3a:f6:10:46:c9:15:22:9e:8f:7d: d7:2f:b4:18:5a:a9:96:3b:a6:ee:ad:03:76:26:9b: 6c:19:29:f6:39:2f:85:0f:55:48:41:2f:ce:00:72: 72:da:35:07:4e:f6:59:16:02:00:6f:f8:e5:09:a0: 64:98:87:4c:f8:2d:cd:84:af:8b:76:5e:7f:d8:d6: d6:02:d7:98:16:3a:9e:b4:86:74:67:62:35:11:df: 8f:e2:7c:98:f6:b1:91:1b:7c:ab:34:f1:57:f4:a3: e6:d2:bc:e3:03:59:1d:bb:e5:50:e5:ba:b2:e9:af: d7:e0:1e:99:e4:33:49:a3:cf:88:f8:27:25:27:a3: 12:8a:51:7b:ab:1d:d6:c6:d3:58:69:67:34:bc:89: 1c:08:98:d8:a7:86:bf:59:45:3f:6b:4b:4f:e9:27: 4c:08:a6:ff:f2:40:e8:55:ab:30:bc:af:8b:84:e0: 78:02:4d:94:8f:5e:bf:3e:85:92:1f:b5:10:f6:ee: b1:2a:73:15:b0:c5:25:17:06:68:94:4e:f2:62:fb: 57:1e:2e:63:5f:93:10:31:52:ed:dc:5e:a0:a7:82: 84:f1:d5:6f:d6:42:66:34:13:f7:6a:7a:e8:92:58: 87:ed:3a:3e:b4:1c:7a:fa:20:9e:e7:33:9a:dc:86: 5e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:45:12:40:D4:5B:C7:6F:74:48:C8:A6:8C:D8:15:B2:C1:D5:D6:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:9c:00:7d:0e:08:e2:e0:61:4f:3c:76:a6:04:c0:b3:30:ef: 73:e1:92:fc:05:56:0d:a7:59:15:12:ad:ed:67:94:18:f7:d7: 2b:a7:ad:38:ae:f0:c9:15:99:64:ab:16:6e:a9:8b:49:df:0f: 94:9d:b4:79:96:9b:d9:16:2b:67:32:f4:07:30:36:1d:a4:1b: aa:d7:75:a2:ab:aa:1d:c6:40:95:32:92:d0:0b:ca:8c:fe:78: c8:90:1e:a5:2b:63:01:0b:16:b3:6a:4b:d0:d6:21:d2:a9:ac: b0:0c:f6:95:a6:25:12:4d:84:f3:bc:c0:57:71:13:2e:42:df: c8:84:70:6b:08:73:63:7d:01:f1:83:e1:ba:ac:85:4f:39:2a: c5:56:c4:a3:e5:bd:57:15:3c:8e:94:44:e5:ee:ec:bb:01:65: 54:c7:b0:89:ad:a1:cf:38:bf:d8:e9:4b:1a:d5:cc:f6:7b:f9: 22:e7:30:1a:aa:7a:d1:96:eb:5a:05:85:e3:11:71:4f:2d:58: 0c:2c:98:04:17:e0:fc:45:ab:e1:c3:d8:09:f5:6e:94:05:14: c6:82:4f:86:06:12:ac:55:c1:e0:4e:f1:a5:58:98:43:8e:ee: 43:d4:55:bf:26:c3:78:ed:84:ba:fd:d5:57:59:97:66:fa:2a: e1:16:27:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYmNfcM/DY0k1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjMxZmMxNmQtMTNkNS00MWU5LTgyOGQtOTMzNzU5N2YwNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dhLDzr2EEbJFSKej33XL7QYWqmWO6burQN2 JptsGSn2OS+FD1VIQS/OAHJy2jUHTvZZFgIAb/jlCaBkmIdM+C3NhK+Ldl5/2NbW AteYFjqetIZ0Z2I1Ed+P4nyY9rGRG3yrNPFX9KPm0rzjA1kdu+VQ5bqy6a/X4B6Z 5DNJo8+I+CclJ6MSilF7qx3WxtNYaWc0vIkcCJjYp4a/WUU/a0tP6SdMCKb/8kDo VaswvK+LhOB4Ak2Uj16/PoWSH7UQ9u6xKnMVsMUlFwZolE7yYvtXHi5jX5MQMVLt 3F6gp4KE8dVv1kJmNBP3anrokliH7To+tBx6+iCe5zOa3IZeTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExFEkDUW8dvdEjIpozYFbLB1daUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjgwMzc2OGYtNmY2NS0z OTM0LTg3YTYtY2JhNGRjMWQyOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJacAH0OCOLgYU88dqYEwLMw73PhkvwFVg2nWRUSre1nlBj31yunrTiu 8MkVmWSrFm6pi0nfD5SdtHmWm9kWK2cy9AcwNh2kG6rXdaKrqh3GQJUyktALyoz+ eMiQHqUrYwELFrNqS9DWIdKprLAM9pWmJRJNhPO8wFdxEy5C38iEcGsIc2N9AfGD 4bqshU85KsVWxKPlvVcVPI6UROXu7LsBZVTHsImtoc84v9jpSxrVzPZ7+SLnMBqq etGW61oFheMRcU8tWAwsmAQX4PxFq+HD2An1bpQFFMaCT4YGEqxVweBO8aVYmEOO 7kPUVb8mw3jthLr91VdZl2b6KuEWJ4A= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:42 2025 by rpki-client