$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa File: ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa (raw, json) Hash identifier: m7hfvjWwjTxRGm/dw21SZBun71A5U473J9elYnVGaAs= Subject key identifier: 39:32:26:8E:1D:DC:AD:7A:0B:05:06:9F:A0:A6:A9:61:A0:11:69:DB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841227D7888598AF6A135B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:27:d7:88:85:98:af:6a:13:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fd86d869-7e38-432f-98fa-18e9ac1da3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:dd:7e:b0:77:ef:eb:bd:3c:87:f7:8a:33:6e: d6:6d:a0:16:93:22:80:1c:35:a6:35:31:ee:c5:84: ec:9f:4c:c4:fa:bc:2a:c0:8e:8d:21:24:a2:a2:d3: 82:c2:3c:16:5d:6d:00:48:85:71:d0:b7:91:dd:7e: 62:e3:b6:e0:52:17:8f:82:9d:d8:38:1c:99:89:23: 6d:57:79:50:06:5f:81:49:7c:b0:97:ca:92:85:9b: f1:b8:aa:c7:d0:98:77:e4:14:51:b1:b8:ef:54:ed: 2e:10:0f:ae:23:1e:ad:f4:98:7b:4c:b1:7c:24:cf: 22:e2:bc:12:b6:6c:ae:60:a7:34:99:b8:d9:ff:fe: 92:3e:de:c9:67:d5:e1:77:2c:b0:54:10:04:f3:51: df:60:98:6e:2c:aa:02:48:3e:f6:51:8b:86:24:cc: e9:13:06:85:42:f1:65:e7:26:41:0f:7e:97:df:7e: 6c:4c:50:32:28:a3:28:6b:ba:08:84:ad:80:4d:c9: fe:d0:10:0d:a8:24:49:bd:2c:62:93:9b:5f:22:6f: 43:7e:6d:eb:31:c8:0b:25:33:04:ee:84:21:14:3e: 05:1e:cc:bd:6f:54:98:7a:84:55:63:fb:ee:e0:e3: 8b:cd:88:ee:69:d5:ea:1b:5b:cf:a4:ba:78:5c:e9: d8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:32:26:8E:1D:DC:AD:7A:0B:05:06:9F:A0:A6:A9:61:A0:11:69:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:33:71:82:ff:09:d6:85:db:2b:36:63:b7:e5:62:d3:09:b9: c9:7b:4b:3d:76:fe:a6:42:0c:71:06:c5:70:6b:d4:bf:66:a9: 30:e5:b0:89:3a:a7:17:48:8c:3d:21:1b:cf:68:06:17:27:63: 98:78:c4:67:93:21:4a:8c:d8:2c:90:cf:6c:7f:1b:e1:32:46: f1:1e:2a:0f:50:9f:13:88:17:86:6b:10:8a:15:1b:3a:65:7d: 0b:72:3e:a1:8f:9e:61:42:a8:3a:88:64:d8:cb:b6:6e:86:c2: b9:78:44:1e:cf:4f:6c:b1:3f:47:55:27:3e:74:95:66:af:eb: ba:33:ec:4a:24:f5:2e:6b:1d:4d:25:ae:a9:ad:2e:9c:d2:49: 68:9e:be:4f:3b:68:83:66:34:9c:07:5b:1d:d9:d1:d8:24:13: 59:e6:8e:af:41:a8:ea:f2:95:ae:9a:22:b3:95:d2:99:8c:bf: 90:40:37:29:da:1d:b5:79:ff:8a:a4:39:4f:cd:28:68:a2:5c: ed:34:7d:c6:cb:f9:20:6f:d8:2f:d3:a2:8e:e2:de:c2:39:e4: 0e:93:6b:17:fb:d8:c0:e3:cf:d8:a4:36:25:8a:ac:bb:c8:b4: 55:cd:78:c5:2e:76:13:5b:b2:b1:04:20:55:14:06:56:ba:b4: ee:50:48:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEifXiIWYr2oTW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmQ4NmQ4NjktN2UzOC00MzJmLTk4ZmEtMThlOWFjMWRhM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA691+sHfv6708h/eKM27WbaAWkyKAHDWmNTHu xYTsn0zE+rwqwI6NISSiotOCwjwWXW0ASIVx0LeR3X5i47bgUhePgp3YOByZiSNt V3lQBl+BSXywl8qShZvxuKrH0Jh35BRRsbjvVO0uEA+uIx6t9Jh7TLF8JM8i4rwS tmyuYKc0mbjZ//6SPt7JZ9XhdyywVBAE81HfYJhuLKoCSD72UYuGJMzpEwaFQvFl 5yZBD36X335sTFAyKKMoa7oIhK2ATcn+0BANqCRJvSxik5tfIm9Dfm3rMcgLJTME 7oQhFD4FHsy9b1SYeoRVY/vu4OOLzYjuadXqG1vPpLp4XOnYiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkyJo4d3K16CwUGn6CmqWGgEWnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2UyYzViOTItYTA5Ni0z Yzg0LTg0YjItOWE2MzM5Y2QzMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIszcYL/CdaF2ys2Y7flYtMJucl7Sz12/qZCDHEGxXBr1L9mqTDlsIk6 pxdIjD0hG89oBhcnY5h4xGeTIUqM2CyQz2x/G+EyRvEeKg9QnxOIF4ZrEIoVGzpl fQtyPqGPnmFCqDqIZNjLtm6Gwrl4RB7PT2yxP0dVJz50lWav67oz7Eok9S5rHU0l rqmtLpzSSWievk87aINmNJwHWx3Z0dgkE1nmjq9BqOryla6aIrOV0pmMv5BANyna HbV5/4qkOU/NKGiiXO00fcbL+SBv2C/Too7i3sI55A6Taxf72MDjz9ikNiWKrLvI tFXNeMUudhNbsrEEIFUUBla6tO5QSIE= -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:46 2025 by rpki-client