$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa File: c77f172a-1df8-31ea-92f6-569d849ec8b9.roa (raw, json) Hash identifier: dHkZcDz3G7Alks/AWN/AveqsPpGlUfqGdPJ40AYyczE= Subject key identifier: BD:22:77:17:10:FC:CA:CE:16:9A:A2:C8:EF:BF:3D:36:59:8C:B5:60 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118E97B3351F2D65B7C780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 209.85.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8e:97:b3:35:1f:2d:65:b7:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=706288d6-c4be-4104-b13e-93a87e623b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f7:cd:68:eb:26:18:ae:ba:eb:a1:25:19:e5: 94:45:81:10:a1:b0:7d:2e:22:9a:1e:46:61:fe:ba: 43:49:2c:25:23:53:a2:d8:98:1b:b9:a8:08:81:36: b9:b8:cb:d7:b9:ff:0a:25:34:62:e2:6a:8f:53:05: ab:48:9e:99:99:a4:a8:a1:12:bb:43:2f:26:df:38: 6d:55:a7:ee:24:34:f4:09:82:4b:45:ab:36:0d:fc: fa:07:13:e2:37:db:90:82:2b:67:5c:9d:a1:8a:c8: 91:d2:9f:c7:af:19:52:7b:59:8d:52:27:cc:44:e3: c6:76:ef:bd:db:ff:d3:e8:a8:ea:68:9e:32:4c:d9: 8b:7b:8a:af:ab:c2:f5:69:7b:92:88:75:24:94:a2: 63:5c:8f:65:ef:a7:5c:39:6b:40:ca:44:f5:19:d6: d3:70:cc:6a:ce:7e:da:81:9f:65:4f:ac:ed:72:bf: 25:2c:18:4b:ac:79:29:9c:1e:44:a0:7c:b7:a7:67: 50:61:1b:89:1f:4f:53:d0:51:52:43:c0:7b:f2:c8: b2:a2:3a:b5:67:21:d3:cb:b9:42:e0:72:42:4f:c9: d8:78:4c:c3:88:c1:7a:1e:21:ef:9f:9d:1a:7d:dc: 19:fe:8f:68:df:49:e6:86:3a:5c:e7:1f:5a:ca:91: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:77:17:10:FC:CA:CE:16:9A:A2:C8:EF:BF:3D:36:59:8C:B5:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:94:ef:f9:36:af:03:93:ca:bc:fa:e4:81:63:e9:48:ce:53: bf:4b:be:21:e4:ae:70:ab:19:e5:a6:35:bd:ad:55:71:60:2b: 86:bd:24:c1:bd:e4:87:8a:2c:0e:13:fa:1c:8e:9d:db:e7:48: ac:1a:ff:1c:56:b0:9d:17:35:62:62:7e:ca:37:3a:51:05:91: de:6b:3e:ce:ad:93:f7:6c:dd:f8:7b:ed:58:57:26:87:7e:5f: ee:d8:b7:c9:ca:8b:3f:18:5f:c4:aa:de:ab:e2:32:40:24:cc: ee:fd:25:30:4c:4d:81:a3:35:fa:b4:09:8b:bd:19:f7:b8:01: 23:99:eb:43:56:97:b5:85:cb:dc:c4:85:7f:5c:31:a0:12:ab: 8e:ec:87:72:40:9d:ed:bb:29:b0:f5:44:d8:a8:9a:83:0e:af: 03:b0:40:78:cf:4c:d9:0b:3b:ba:1f:a0:68:2b:e7:70:d8:d7: ec:a5:7a:73:6e:f4:55:85:14:02:92:d5:10:30:fa:b1:14:da: 56:56:1f:2e:b0:f6:a7:40:8e:a5:8f:09:1c:fa:c9:0d:92:61: f5:ca:b6:32:0f:3e:5b:9f:a3:80:69:67:ba:bc:e4:24:87:bd: 72:f1:28:d8:ac:1c:cf:8c:1f:58:a8:66:36:43:95:d1:0d:37: d6:1e:66:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEY6XszUfLWW3x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzA2Mjg4ZDYtYzRiZS00MTA0LWIxM2UtOTNhODdlNjIzYjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPfNaOsmGK6666ElGeWURYEQobB9LiKaHkZh /rpDSSwlI1Oi2JgbuagIgTa5uMvXuf8KJTRi4mqPUwWrSJ6ZmaSooRK7Qy8m3zht VafuJDT0CYJLRas2Dfz6BxPiN9uQgitnXJ2hisiR0p/HrxlSe1mNUifMROPGdu+9 2//T6KjqaJ4yTNmLe4qvq8L1aXuSiHUklKJjXI9l76dcOWtAykT1GdbTcMxqzn7a gZ9lT6ztcr8lLBhLrHkpnB5EoHy3p2dQYRuJH09T0FFSQ8B78siyojq1ZyHTy7lC 4HJCT8nYeEzDiMF6HiHvn50afdwZ/o9o30nmhjpc5x9aypE9JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0idxcQ/MrOFpqiyO+/PTZZjLVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzc3ZjE3MmEtMWRmOC0z MWVhLTkyZjYtNTY5ZDg0OWVjOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKU7/k2rwOTyrz65IFj6UjOU79LviHkrnCrGeWmNb2tVXFgK4a9JMG9 5IeKLA4T+hyOndvnSKwa/xxWsJ0XNWJifso3OlEFkd5rPs6tk/ds3fh77VhXJod+ X+7Yt8nKiz8YX8Sq3qviMkAkzO79JTBMTYGjNfq0CYu9Gfe4ASOZ60NWl7WFy9zE hX9cMaASq47sh3JAne27KbD1RNiomoMOrwOwQHjPTNkLO7ofoGgr53DY1+ylenNu 9FWFFAKS1RAw+rEU2lZWHy6w9qdAjqWPCRz6yQ2SYfXKtjIPPlufo4BpZ7q85CSH vXLxKNisHM+MH1ioZjZDldENN9YeZrY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:34:29 2025 by rpki-client