$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b88a46-9849-3f2e-a300-a5026564c30f.roa File: c9b88a46-9849-3f2e-a300-a5026564c30f.roa (raw, json) Hash identifier: /i9Lhi3/fWp05wGNyF3rdtR4goMRUjxsoq4kPiV5tUk= Subject key identifier: 52:D4:64:45:41:EE:33:EF:7F:87:D1:15:2C:E6:D2:70:9D:BE:C1:83 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841233676770EEBF6BBEFDA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b88a46-9849-3f2e-a300-a5026564c30f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.239.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:33:67:67:70:ee:bf:6b:be:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5fafa50f-06f8-4acf-9434-4a5750a6c989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:3b:20:78:1b:b9:af:e3:11:37:19:4e:27: 4c:84:db:58:f6:9c:db:2d:0e:3e:9f:b7:4d:bd:f9: 1b:07:46:ac:e5:61:84:1b:4c:7f:f6:35:40:0e:fe: 6f:0c:6e:28:f3:04:44:1f:31:47:5e:5c:c4:d4:f7: cb:9c:31:8d:fd:56:25:49:f7:39:7f:b1:33:20:04: 24:b5:54:ef:a1:69:00:6b:63:08:9a:a6:91:e0:fb: f8:38:95:56:79:a8:dc:04:1c:01:7a:44:2c:55:92: 76:10:06:2e:11:e3:d0:c4:38:95:c3:44:7f:c4:dd: 2e:84:81:15:e6:69:96:75:fd:3d:26:2e:af:79:2b: 55:29:ac:1d:07:98:06:53:51:3c:dc:54:b6:17:d7: 47:fa:89:c9:3f:18:2a:0b:5b:f6:02:31:62:81:99: 50:ee:52:0a:10:9a:81:1b:87:88:1b:52:7d:04:de: 6d:6f:f2:15:c8:f0:09:d3:ea:e8:bd:6a:63:f0:7e: 93:76:6e:d1:17:b1:a1:23:58:04:44:6b:7e:3d:f3: 80:b8:a0:75:7d:c0:18:cc:db:f4:d9:b0:bf:26:a9: da:a5:41:85:93:ec:3f:f1:4a:b6:c3:a3:87:ac:0e: bb:68:79:71:a5:7a:7d:99:2f:b4:42:7f:7c:8c:19: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D4:64:45:41:EE:33:EF:7F:87:D1:15:2C:E6:D2:70:9D:BE:C1:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b88a46-9849-3f2e-a300-a5026564c30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:3a:d5:64:6c:bd:c7:bf:6b:ee:6e:6f:22:bc:b2:d3:2e:3d: 8a:e4:45:40:90:ea:5f:4f:b8:ec:bf:d3:34:b4:da:31:23:4c: 11:d7:25:58:45:e3:79:a0:8a:f1:fc:b1:22:9c:55:71:bc:95: 00:1e:8a:5c:ba:0e:b6:3f:0f:1d:2e:6c:dc:00:22:ab:cc:05: 0c:e0:85:91:10:d5:13:71:07:b8:f5:2f:b6:d3:7d:f6:11:8e: ef:9f:c3:b4:a3:f8:10:0e:54:72:b1:73:4d:60:bb:3e:ae:98: af:67:a6:41:16:1b:7b:cc:40:e6:f6:68:d4:14:1b:c0:13:9e: ce:d2:ec:1b:e0:19:34:36:6c:2b:a4:9f:26:38:5b:d1:e4:27: 18:aa:46:28:8e:81:1f:fa:4a:42:5d:61:e7:09:ae:05:84:e6: 84:59:31:3f:6e:9b:76:66:ef:63:a5:03:73:eb:68:e3:ae:1d: 85:06:23:fd:26:db:11:dd:b9:b1:34:90:85:ad:b4:c2:90:c6: 52:40:8a:b8:27:2d:18:18:e7:50:e6:57:d9:07:10:80:dd:b4: 1b:d9:68:7b:b4:5f:a8:f6:ab:7e:e7:5d:b0:51:9e:8c:4d:2b: 7b:c7:5d:92:01:78:93:cf:d2:00:bc:ec:03:c0:45:23:02:05: f8:70:e7:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjNnZ3Duv2u+/aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NWZhZmE1MGYtMDZmOC00YWNmLTk0MzQtNGE1NzUwYTZjOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCk7IHgbua/jETcZTidMhNtY9pzbLQ4+n7dN vfkbB0as5WGEG0x/9jVADv5vDG4o8wREHzFHXlzE1PfLnDGN/VYlSfc5f7EzIAQk tVTvoWkAa2MImqaR4Pv4OJVWeajcBBwBekQsVZJ2EAYuEePQxDiVw0R/xN0uhIEV 5mmWdf09Ji6veStVKawdB5gGU1E83FS2F9dH+onJPxgqC1v2AjFigZlQ7lIKEJqB G4eIG1J9BN5tb/IVyPAJ0+rovWpj8H6Tdm7RF7GhI1gERGt+PfOAuKB1fcAYzNv0 2bC/JqnapUGFk+w/8Uq2w6OHrA67aHlxpXp9mS+0Qn98jBkUSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLUZEVB7jPvf4fRFSzm0nCdvsGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzliODhhNDYtOTg0OS0z ZjJlLWEzMDAtYTUwMjY1NjRjMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACE61WRsvce/a+5ubyK8stMuPYrkRUCQ6l9PuOy/0zS02jEjTBHXJVhF 43mgivH8sSKcVXG8lQAeily6DrY/Dx0ubNwAIqvMBQzghZEQ1RNxB7j1L7bTffYR ju+fw7Sj+BAOVHKxc01guz6umK9npkEWG3vMQOb2aNQUG8ATns7S7BvgGTQ2bCuk nyY4W9HkJxiqRiiOgR/6SkJdYecJrgWE5oRZMT9um3Zm72OlA3PraOOuHYUGI/0m 2xHdubE0kIWttMKQxlJAirgnLRgY51DmV9kHEIDdtBvZaHu0X6j2q37nXbBRnoxN K3vHXZIBeJPP0gC87APARSMCBfhw58s= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:17 2025 by rpki-client