$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa File: dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa (raw, json) Hash identifier: LKln8CIiT1jktfzuYjOUi3d1L44SZXJxrSlX1dzTFAQ= Subject key identifier: 22:C6:2A:46:79:DA:10:FC:16:34:2D:00:10:F5:B7:22:EE:06:2A:39 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122183BC8062AF490795C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:21:83:bc:80:62:af:49:07:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=91241153-72d7-4049-96a4-8b61e7c232db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:da:e1:ca:cf:2e:72:fe:08:2a:0e:4f:a3:c8: e1:96:83:ee:c1:9d:8c:8c:4c:fb:82:f8:22:b4:a5: 50:8d:80:4b:39:7d:09:3d:e9:1a:f9:f2:09:fd:a9: 24:fc:2c:15:8e:16:37:d6:70:74:f2:d5:68:0f:e8: 55:79:d4:49:c0:9f:b5:0b:c2:f1:59:f5:de:6c:d6: 55:cd:ed:94:85:dd:66:81:e7:d3:96:8b:00:83:2b: 87:b5:11:2b:aa:9a:89:e6:6b:4a:82:62:75:6b:e4: d8:80:18:3a:c7:03:30:2f:09:e3:3b:9b:9c:e2:63: 1d:c2:69:89:3c:66:5a:b7:0e:a6:56:ac:0f:64:f2: 4b:e1:05:e3:09:9d:7b:e8:84:86:93:4c:1c:42:36: a9:0e:4f:ee:0b:91:fe:1a:d7:a8:bc:54:fc:17:7c: 62:1e:93:d8:1a:69:13:31:18:38:06:f0:ba:6d:f0: 95:e5:f0:69:72:b6:b4:33:fc:b1:cb:e2:e7:5e:c4: 70:0a:d6:62:a2:cc:4c:0e:d1:20:23:bd:89:69:1f: bd:15:c5:82:4f:af:44:79:1b:fd:6c:26:78:6e:6b: ae:35:9e:08:3a:7d:24:b8:21:fe:3e:71:65:c8:fe: f5:8e:4f:ff:b7:8f:d0:53:62:61:67:94:90:87:c0: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C6:2A:46:79:DA:10:FC:16:34:2D:00:10:F5:B7:22:EE:06:2A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:17:7a:70:d4:1d:a7:60:d5:80:79:a5:86:96:b3:59:ff:8d: 60:4d:d9:50:b4:ac:ad:2c:ea:f9:fb:b2:dd:b1:a9:3c:4b:ef: 2b:39:7c:e0:7d:48:f4:1a:cb:50:ba:ac:61:cd:0b:40:1d:fb: 33:a9:c5:21:78:7c:00:a6:11:97:c3:8e:fe:9f:9d:ca:2e:d0: 21:59:17:a1:42:eb:2d:80:73:55:d9:7e:5d:40:a1:4d:08:f4: bd:16:e3:67:ca:9d:f6:12:ae:ba:0f:63:38:23:90:77:02:21: 59:07:b4:fc:48:58:1e:2b:93:72:78:a7:03:07:46:c9:2d:67: 20:b9:06:6d:20:6f:89:19:4b:4d:a7:9c:ab:8c:5a:2a:9b:4f: 96:c9:32:4d:d6:9c:4c:21:f9:35:a9:ab:a2:67:0c:1d:bb:7b: c1:70:06:44:f8:c0:33:21:23:56:c6:8a:d9:87:5e:aa:82:c6: 37:da:e8:7e:51:4f:19:ec:5e:0d:a2:5d:07:e1:fc:17:5b:e3: 48:27:f2:a9:20:57:85:b5:f6:44:22:91:3e:d1:8f:0f:dc:48: ee:f2:b8:28:e0:f7:79:ad:69:bc:c4:78:78:d4:0c:e2:fd:26: 80:b9:49:18:85:7b:c5:02:15:56:27:4e:f3:df:9f:e2:95:b5: 72:32:ef:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiGDvIBir0kHlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTEyNDExNTMtNzJkNy00MDQ5LTk2YTQtOGI2MWU3YzIzMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntrhys8ucv4IKg5Po8jhloPuwZ2MjEz7gvgi tKVQjYBLOX0JPeka+fIJ/akk/CwVjhY31nB08tVoD+hVedRJwJ+1C8LxWfXebNZV ze2Uhd1mgefTlosAgyuHtRErqpqJ5mtKgmJ1a+TYgBg6xwMwLwnjO5uc4mMdwmmJ PGZatw6mVqwPZPJL4QXjCZ176ISGk0wcQjapDk/uC5H+GteovFT8F3xiHpPYGmkT MRg4BvC6bfCV5fBpcra0M/yxy+LnXsRwCtZiosxMDtEgI72JaR+9FcWCT69EeRv9 bCZ4bmuuNZ4IOn0kuCH+PnFlyP71jk//t4/QU2JhZ5SQh8DRVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLGKkZ52hD8FjQtABD1tyLuBio5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZmMGZjZjYtM2U5NC0z ZGVmLTllNzctMjdlMDBlZmQ2YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwXenDUHadg1YB5pYaWs1n/jWBN2VC0rK0s6vn7st2xqTxL7ys5fOB9 SPQay1C6rGHNC0Ad+zOpxSF4fACmEZfDjv6fncou0CFZF6FC6y2Ac1XZfl1AoU0I 9L0W42fKnfYSrroPYzgjkHcCIVkHtPxIWB4rk3J4pwMHRsktZyC5Bm0gb4kZS02n nKuMWiqbT5bJMk3WnEwh+TWpq6JnDB27e8FwBkT4wDMhI1bGitmHXqqCxjfa6H5R TxnsXg2iXQfh/Bdb40gn8qkgV4W19kQikT7Rjw/cSO7yuCjg93mtabzEeHjUDOL9 JoC5SRiFe8UCFVYnTvPfn+KVtXIy77o= -----END CERTIFICATE-----Generated at Mon Aug 4 14:16:53 2025 by rpki-client