$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3e78a80-9c86-3a1a-8ee8-2c60f561d66b.roa File: d3e78a80-9c86-3a1a-8ee8-2c60f561d66b.roa (raw, json) Hash identifier: INn5l6Bpw3NcXfRRC+Oc4QBgMERQJvkRLvygX/ZIR3k= Subject key identifier: 7D:EB:87:27:B6:5F:D7:23:61:4F:55:CD:20:C6:1D:15:A1:D6:27:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117A6F6BBC8BC6AD760900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3e78a80-9c86-3a1a-8ee8-2c60f561d66b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7a:6f:6b:bc:8b:c6:ad:76:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=024fbf66-6261-4681-bdec-4ae5bf9b9bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:a6:39:ab:dc:8d:59:26:66:4f:65:d5:50: 55:4a:7d:24:9e:5d:00:e1:a4:af:47:7f:e0:37:c1: d4:63:c0:4b:7f:66:70:79:48:27:63:bf:cc:93:55: 75:a0:44:be:90:36:54:d6:49:42:2d:7d:b6:34:9f: e3:4f:f9:12:63:61:f0:4c:7f:3f:03:54:fc:37:7d: 34:d7:ca:3f:45:6b:cd:41:54:5f:c2:de:c2:21:6c: 30:4e:39:d4:b8:34:3e:04:16:aa:7d:fd:c6:81:95: ff:e5:04:9a:f6:66:1f:fe:ee:8e:b5:5b:43:73:e6: c9:79:9f:e8:3b:00:4b:64:d5:8f:b8:74:f4:f3:b2: d4:44:c5:53:1b:1b:ae:ec:5d:0e:eb:80:b0:a7:8e: ca:b0:97:7f:c7:f9:81:ad:56:d4:05:6a:bc:a8:0b: 4d:56:89:c2:ae:9c:e5:5d:dd:70:4e:c0:ab:af:77: c2:f2:61:9e:cc:bc:ba:f9:0d:b6:ea:74:9c:36:23: 2b:3b:76:32:e5:36:68:1b:cc:bd:18:73:37:86:67: d9:2d:5a:4b:d2:eb:ad:c6:57:db:e0:40:bd:3a:4c: 09:16:da:fe:18:e5:ca:5e:28:05:55:14:90:f4:f2: 09:26:69:ae:f7:bd:d0:1a:d7:43:73:0a:67:9d:a6: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EB:87:27:B6:5F:D7:23:61:4F:55:CD:20:C6:1D:15:A1:D6:27:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3e78a80-9c86-3a1a-8ee8-2c60f561d66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ce:d9:38:d4:80:c0:b9:8f:e4:4b:b6:08:c0:b8:e3:b2:de: d0:68:7f:6b:35:e8:c7:43:26:e0:c0:5d:2f:c6:84:18:e8:d3: 1d:bb:15:bb:92:8a:65:6f:38:92:4b:d5:7f:be:c7:93:c7:ac: 42:64:25:46:54:4b:6c:da:af:80:b6:d4:c5:82:bb:6a:10:b2: a8:3d:23:bb:75:f2:51:a8:48:80:07:07:81:25:d2:8a:66:97: c8:c9:63:e6:1a:af:c1:67:7f:bf:77:57:2e:0a:01:fe:7a:42: cc:4c:f3:76:91:8f:79:0c:7f:11:90:d6:2b:eb:66:3a:5b:cf: 57:fe:af:ee:3e:df:23:37:27:b1:f7:6b:15:cf:b9:cd:52:7c: 0e:2f:40:0a:98:fc:0a:c2:b5:1b:dc:de:39:31:1e:03:b4:9a: be:8d:97:44:12:64:35:1f:bc:ec:56:d2:60:a7:ca:05:24:b0: 4d:4d:e3:ef:80:a8:5a:96:39:e6:3d:bb:9c:38:b1:09:fb:fa: 7a:e0:37:a1:06:37:80:6e:7b:70:a7:ad:2f:19:92:a4:5c:38: 4a:b1:d9:a2:8f:23:e3:cb:46:b0:80:f6:9b:60:bb:59:b1:1b: d3:17:e1:14:54:29:ee:bb:6e:2a:fd:1f:54:03:ab:9e:27:92: 6d:65:a5:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXpva7yLxq12CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDI0ZmJmNjYtNjI2MS00NjgxLWJkZWMtNGFlNWJmOWI5YmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx82mOavcjVkmZk9l1VBVSn0knl0A4aSvR3/g N8HUY8BLf2ZweUgnY7/Mk1V1oES+kDZU1klCLX22NJ/jT/kSY2HwTH8/A1T8N300 18o/RWvNQVRfwt7CIWwwTjnUuDQ+BBaqff3GgZX/5QSa9mYf/u6OtVtDc+bJeZ/o OwBLZNWPuHT087LURMVTGxuu7F0O64Cwp47KsJd/x/mBrVbUBWq8qAtNVonCrpzl Xd1wTsCrr3fC8mGezLy6+Q226nScNiMrO3Yy5TZoG8y9GHM3hmfZLVpL0uutxlfb 4EC9OkwJFtr+GOXKXigFVRSQ9PIJJmmu973QGtdDcwpnnaaWjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3rhye2X9cjYU9VzSDGHRWh1ifzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDNlNzhhODAtOWM4Ni0z YTFhLThlZTgtMmM2MGY1NjFkNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/O2TjUgMC5j+RLtgjAuOOy3tBof2s16MdDJuDAXS/GhBjo0x27FbuS imVvOJJL1X++x5PHrEJkJUZUS2zar4C21MWCu2oQsqg9I7t18lGoSIAHB4El0opm l8jJY+Yar8Fnf793Vy4KAf56QsxM83aRj3kMfxGQ1ivrZjpbz1f+r+4+3yM3J7H3 axXPuc1SfA4vQAqY/ArCtRvc3jkxHgO0mr6Nl0QSZDUfvOxW0mCnygUksE1N4++A qFqWOeY9u5w4sQn7+nrgN6EGN4Bue3CnrS8ZkqRcOEqx2aKPI+PLRrCA9ptgu1mx G9MX4RRUKe67bir9H1QDq54nkm1lpRo= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:46 2025 by rpki-client