$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa File: bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa (raw, json) Hash identifier: gj/Q04pNXq4ADFg3Ld1i8E5Kby12Og+sA2ZM0NzZXiQ= Subject key identifier: EE:73:7C:27:08:5D:A7:66:40:E2:37:78:B8:39:AA:3F:50:7F:3B:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411712E6C9AF18597903830 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:71:2e:6c:9a:f1:85:97:90:38:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3f373245-e251-4776-b1bc-28c810d1555e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e0:7c:60:16:09:c8:ab:ca:d7:c1:73:ae:b7: fd:16:2e:c8:22:1e:36:02:23:b3:18:0f:37:7a:92: bf:ae:b2:24:e4:82:03:ec:39:05:e6:c5:6d:58:6b: 1b:4f:4b:b3:b1:bf:ca:c5:7e:2e:cb:00:22:2a:f3: 05:25:b1:0b:7c:ec:66:72:80:c8:ca:7f:38:d0:99: 2b:a6:0e:63:98:17:e9:1e:e5:27:0f:bf:41:11:96: 96:5b:8b:d4:6c:43:24:1c:cc:0f:ea:19:19:6f:6f: 13:ae:79:26:20:05:79:a9:71:9d:6b:ef:2b:ca:47: 47:13:00:d3:f2:d4:e8:d9:32:e5:2d:36:85:2b:05: 8d:c9:56:d4:53:53:00:54:47:2c:23:42:16:ce:0e: 47:71:29:d9:99:5d:6e:89:8f:d2:f0:14:31:b1:d7: f4:19:b9:2c:db:31:92:b2:f8:87:a5:10:cf:e5:c2: a3:aa:3c:2b:ed:bc:ab:54:73:d1:47:66:5e:e4:e7: 7c:56:83:11:0f:9f:f1:46:f6:36:b6:81:ba:31:b9: 9d:c4:19:90:72:30:b3:71:c7:29:f9:a8:16:de:35: b7:61:7a:c9:a6:ac:8e:45:9f:9d:66:6f:27:5f:b6: c4:e6:34:9e:0d:d5:96:fa:08:74:eb:e5:14:91:c6: ac:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:73:7C:27:08:5D:A7:66:40:E2:37:78:B8:39:AA:3F:50:7F:3B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:97:6b:d1:80:55:fa:31:63:c5:f9:06:a2:33:8d:a1:87:71: e8:e5:c6:71:69:eb:7c:70:38:08:fd:20:1a:3e:09:f9:9d:f1: 1b:45:48:d3:08:57:bc:f9:15:76:37:a6:95:e0:71:ab:bc:5e: 5a:59:85:21:9f:73:75:8d:ac:90:77:8d:c5:44:89:0a:bc:cc: 05:ff:7c:be:b9:3b:84:e2:5e:b3:d3:91:3f:a4:dd:3b:82:64: d9:4f:88:1f:d2:ac:ad:5f:fb:c0:df:07:e6:0a:62:ad:2a:19: 3d:ed:cc:08:42:a9:0b:56:0d:8a:80:13:a9:e6:00:98:a9:4d: a6:b0:38:c6:da:61:4d:26:ce:c2:a1:40:c7:2a:0d:ef:72:05: e2:e9:1d:54:30:c8:ef:60:b6:3b:47:23:3b:5e:70:ce:fe:84: 7e:7b:43:b6:32:e7:bc:80:8d:5e:6c:23:28:f1:5b:e8:70:b0: bc:1c:c5:5d:93:38:1e:09:dc:c0:19:f7:69:aa:9e:01:dd:ad: f5:89:31:40:4a:83:c3:34:fa:ea:e0:c0:55:53:d5:03:98:77: a4:19:14:77:06:34:00:7d:10:41:2c:1d:c0:c0:57:5b:43:53: 2e:ee:24:d5:ff:0e:87:22:63:5e:70:96:2b:0a:18:35:ff:3c: 06:71:1f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXEubJrxhZeQODAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2YzNzMyNDUtZTI1MS00Nzc2LWIxYmMtMjhjODEwZDE1NTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOB8YBYJyKvK18Fzrrf9Fi7IIh42AiOzGA83 epK/rrIk5IID7DkF5sVtWGsbT0uzsb/KxX4uywAiKvMFJbELfOxmcoDIyn840Jkr pg5jmBfpHuUnD79BEZaWW4vUbEMkHMwP6hkZb28TrnkmIAV5qXGda+8rykdHEwDT 8tTo2TLlLTaFKwWNyVbUU1MAVEcsI0IWzg5HcSnZmV1uiY/S8BQxsdf0Gbks2zGS sviHpRDP5cKjqjwr7byrVHPRR2Ze5Od8VoMRD5/xRvY2toG6MbmdxBmQcjCzcccp +agW3jW3YXrJpqyORZ+dZm8nX7bE5jSeDdWW+gh06+UUkcasqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5zfCcIXadmQOI3eLg5qj9QfzsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmI3ZTdlY2EtMGUzOC0z YjE3LWI3Y2MtNjZmOTdhNzQ2NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiXa9GAVfoxY8X5BqIzjaGHcejlxnFp63xwOAj9IBo+Cfmd8RtFSNMI V7z5FXY3ppXgcau8XlpZhSGfc3WNrJB3jcVEiQq8zAX/fL65O4TiXrPTkT+k3TuC ZNlPiB/SrK1f+8DfB+YKYq0qGT3tzAhCqQtWDYqAE6nmAJipTaawOMbaYU0mzsKh QMcqDe9yBeLpHVQwyO9gtjtHIztecM7+hH57Q7Yy57yAjV5sIyjxW+hwsLwcxV2T OB4J3MAZ92mqngHdrfWJMUBKg8M0+urgwFVT1QOYd6QZFHcGNAB9EEEsHcDAV1tD Uy7uJNX/DociY15wlisKGDX/PAZxH78= -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:46 2025 by rpki-client