$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/be61c337-9d0c-30eb-a6c4-ea795f31caaa.roa File: be61c337-9d0c-30eb-a6c4-ea795f31caaa.roa (raw, json) Hash identifier: QsXos9a3W1Mbol4gx9+vYUl3oAGFdHpSTG7Bkj6fX7Y= Subject key identifier: DF:65:7A:45:DE:88:7B:61:E7:A7:96:2A:EB:64:14:69:3F:42:78:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122AC6E20994E126E5F660 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/be61c337-9d0c-30eb-a6c4-ea795f31caaa.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2a:c6:e2:09:94:e1:26:e5:f6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fe7d289c-f873-475f-a8ae-0a3de7586f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:40:47:88:22:c1:41:7c:17:21:c2:71:12: 96:42:f5:b1:eb:b7:44:23:a3:95:8c:56:b5:ff:7e: f0:15:9e:e9:cf:b0:83:f0:5b:ee:21:90:45:0c:e6: 75:4a:55:90:9c:23:36:f5:9a:b2:13:35:f1:b8:e4: b0:fa:9b:0b:34:b1:b6:e8:1c:37:5b:39:fc:35:1b: 9e:35:e5:04:e1:11:3e:68:40:7b:bf:ff:a4:19:fe: 6c:fa:74:7f:66:b8:ef:ff:40:50:c9:e9:96:08:11: 6c:4d:74:0f:3e:52:9c:67:09:81:2f:51:23:b4:ab: 03:cc:09:95:5c:33:3d:63:a8:5d:ca:5f:5c:48:3d: 04:3e:66:3b:6c:b6:ef:d7:02:dc:02:2f:16:95:c4: 01:12:c8:91:16:c7:09:0d:aa:04:2b:44:71:c5:9f: 0b:34:36:8f:61:ef:83:f5:fe:d6:bc:3c:f3:30:c9: ae:f3:2b:d8:27:01:96:26:9a:24:eb:a7:3a:b9:d6: 16:b5:cd:ac:8e:5f:d5:2f:98:80:e2:d4:5f:74:bc: b3:88:aa:83:de:3c:c9:ee:fe:60:9b:85:76:86:f5: 02:35:d9:93:fd:f7:42:61:6a:94:94:a3:6e:10:c8: a4:39:91:7d:02:8c:f1:e7:46:0e:9d:09:ca:c0:fe: 16:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:65:7A:45:DE:88:7B:61:E7:A7:96:2A:EB:64:14:69:3F:42:78:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/be61c337-9d0c-30eb-a6c4-ea795f31caaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f0:09:f4:c6:73:c1:b6:ed:43:1c:c3:52:ca:92:56:79:30: 23:4a:25:3e:3c:ac:a9:2e:17:3b:f8:08:e1:be:7b:1e:09:aa: 8d:f2:84:7e:a5:d8:e3:25:55:44:38:5a:f0:71:29:0e:b1:35: e2:f4:90:65:c9:f9:9d:39:34:8a:75:45:e6:e8:85:30:9b:54: 76:c2:5a:bc:60:db:b1:88:79:e7:c2:24:63:6a:a0:25:fe:1e: 8f:4d:4e:fd:12:a1:83:2e:c0:b5:05:87:0c:98:72:0d:ee:74: bc:53:73:f8:df:ba:be:85:84:bd:3e:4f:1a:54:18:83:57:e2: 64:10:e7:8f:9a:6f:18:33:b7:ca:bf:45:ac:0f:26:fd:dd:75: 56:d1:ab:de:e5:30:92:26:e5:86:fe:bf:8d:29:ba:c9:cc:f3: eb:25:8f:c8:56:8b:db:86:77:a4:1a:ab:dc:26:02:9c:51:0f: 6b:34:94:b2:92:68:da:da:aa:8d:0d:cd:3d:20:da:b5:b6:76: fe:6f:34:f3:9e:9f:ec:33:b8:5f:bc:ac:79:ae:34:41:3d:6f: 13:eb:51:ee:ca:34:c9:1e:e9:00:f0:83:44:c9:2b:5d:21:d7: 8c:e6:9d:63:dc:f6:52:30:90:42:1b:2c:ca:ce:a0:60:cd:21: 8c:bf:56:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEirG4gmU4Sbl9mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmU3ZDI4OWMtZjg3My00NzVmLWE4YWUtMGEzZGU3NTg2ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppFAR4giwUF8FyHCcRKWQvWx67dEI6OVjFa1 /37wFZ7pz7CD8FvuIZBFDOZ1SlWQnCM29ZqyEzXxuOSw+psLNLG26Bw3Wzn8NRue NeUE4RE+aEB7v/+kGf5s+nR/Zrjv/0BQyemWCBFsTXQPPlKcZwmBL1EjtKsDzAmV XDM9Y6hdyl9cSD0EPmY7bLbv1wLcAi8WlcQBEsiRFscJDaoEK0RxxZ8LNDaPYe+D 9f7WvDzzMMmu8yvYJwGWJpok66c6udYWtc2sjl/VL5iA4tRfdLyziKqD3jzJ7v5g m4V2hvUCNdmT/fdCYWqUlKNuEMikOZF9Aozx50YOnQnKwP4WuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9lekXeiHth56eWKutkFGk/Qng/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmU2MWMzMzctOWQwYy0z MGViLWE2YzQtZWE3OTVmMzFjYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXwCfTGc8G27UMcw1LKklZ5MCNKJT48rKkuFzv4COG+ex4Jqo3yhH6l 2OMlVUQ4WvBxKQ6xNeL0kGXJ+Z05NIp1RebohTCbVHbCWrxg27GIeefCJGNqoCX+ Ho9NTv0SoYMuwLUFhwyYcg3udLxTc/jfur6FhL0+TxpUGINX4mQQ54+abxgzt8q/ RawPJv3ddVbRq97lMJIm5Yb+v40pusnM8+slj8hWi9uGd6Qaq9wmApxRD2s0lLKS aNraqo0NzT0g2rW2dv5vNPOen+wzuF+8rHmuNEE9bxPrUe7KNMke6QDwg0TJK10h 14zmnWPc9lIwkEIbLMrOoGDNIYy/VqU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:09 2025 by rpki-client