$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4013574-3584-3d13-8561-b1935a5229a8.roa File: e4013574-3584-3d13-8561-b1935a5229a8.roa (raw, json) Hash identifier: usA2LJux9/rtqbZAlYFwPgA7GKcL7dWo4OfhQSWpEPA= Subject key identifier: E2:7F:23:53:BA:CF:F2:87:8A:57:DB:98:D2:16:FE:21:DC:85:E5:19 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30EE9D7F07799B5B603000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4013574-3584-3d13-8561-b1935a5229a8.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.217.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:ee:9d:7f:07:79:9b:5b:60:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=6caf222a-d0af-402b-855b-7d288cea68ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ac:28:8b:e9:e9:ca:87:70:c0:37:12:b6:65: b3:ef:d8:83:e3:05:b6:65:2c:95:0d:8e:db:eb:2a: 90:9b:91:ef:22:90:4a:0a:1e:f5:96:04:8a:c9:6a: 20:b9:c8:fc:86:80:4f:40:5e:84:9d:2e:08:66:ac: 0c:ab:91:7c:8a:08:b7:d7:ad:1f:2e:9b:69:11:f1: b1:3d:66:5d:65:90:e4:60:3b:47:86:a1:cb:4c:11: 09:e1:11:eb:ec:a1:97:75:87:fd:7a:5e:fc:72:df: 7b:6a:82:91:e7:df:38:4d:e0:ac:7a:0a:52:3f:2e: ab:42:bd:16:f0:19:7c:84:19:57:28:26:93:84:74: 7c:7b:c2:51:f5:c5:a4:fd:07:cf:45:5b:88:64:19: bd:2a:9b:68:ef:ba:6c:51:ea:a9:4b:fe:ba:e2:00: 72:f5:c3:24:14:83:61:ab:13:11:b1:d9:49:d4:30: e9:b9:a7:3a:c3:c3:34:e8:10:a9:fc:13:80:f1:c2: 5c:51:bc:66:c7:7f:78:7e:cb:91:04:31:67:ba:44: 24:1d:af:65:53:bd:5e:47:dc:a7:2e:3b:f2:4e:07: d9:f3:c3:02:93:70:e1:8d:16:7d:29:d1:7d:92:5b: 5f:13:15:ff:bf:af:2e:38:59:e3:b9:e3:5b:0c:1f: d0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7F:23:53:BA:CF:F2:87:8A:57:DB:98:D2:16:FE:21:DC:85:E5:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4013574-3584-3d13-8561-b1935a5229a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:74:07:d6:5b:86:8b:fd:cc:3d:4a:69:10:fc:48:61:d5:65: 79:a2:f3:06:bc:b4:43:9a:c3:34:92:2f:ba:e7:2c:af:dd:ba: 4a:2e:d6:af:d4:ed:9a:44:80:a4:58:63:13:1c:3c:42:d6:20: ba:75:59:06:6b:a3:a6:5d:85:36:53:4c:ae:de:05:89:af:1b: b5:67:2e:11:e1:89:92:f1:3c:f5:01:19:cb:6e:ae:a2:f2:43: 67:65:fe:e7:f3:20:7f:98:3f:20:99:8e:39:eb:aa:2f:bd:a1: ad:da:48:bf:b5:69:77:01:a0:e3:e9:a5:4c:df:1e:d9:a4:c7: ef:f2:93:50:65:95:fd:f9:3d:de:dd:1e:36:03:87:ab:f4:2e: 5e:a9:b8:e7:a0:44:9a:52:06:a6:12:17:54:e8:3e:f6:2c:1b: e0:2c:d8:1e:c5:ce:6e:85:7b:e9:26:1a:c7:15:55:51:70:04: ec:11:4c:0b:fe:d3:3a:60:2b:fd:7d:13:44:11:a4:9a:c2:74: c5:47:60:78:4e:2a:0a:8c:d0:25:6c:4e:eb:69:15:d7:7a:ce: 59:02:1d:05:f7:3c:8a:09:dc:d2:5c:c7:cc:ff:61:10:19:35: 39:70:ba:b5:ee:40:e0:bb:9e:8b:48:3c:47:55:b3:5f:e3:42: c7:d0:aa:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMO6dfwd5m1tgMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NmNhZjIyMmEtZDBhZi00MDJiLTg1NWItN2QyODhjZWE2OGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6woi+npyodwwDcStmWz79iD4wW2ZSyVDY7b 6yqQm5HvIpBKCh71lgSKyWogucj8hoBPQF6EnS4IZqwMq5F8igi3160fLptpEfGx PWZdZZDkYDtHhqHLTBEJ4RHr7KGXdYf9el78ct97aoKR5984TeCsegpSPy6rQr0W 8Bl8hBlXKCaThHR8e8JR9cWk/QfPRVuIZBm9Kpto77psUeqpS/664gBy9cMkFINh qxMRsdlJ1DDpuac6w8M06BCp/BOA8cJcUbxmx394fsuRBDFnukQkHa9lU71eR9yn LjvyTgfZ88MCk3DhjRZ9KdF9kltfExX/v68uOFnjueNbDB/QBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ/I1O6z/KHilfbmNIW/iHcheUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTQwMTM1NzQtMzU4NC0z ZDEzLTg1NjEtYjE5MzVhNTIyOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId0B9Zbhov9zD1KaRD8SGHVZXmi8wa8tEOawzSSL7rnLK/dukou1q/U 7ZpEgKRYYxMcPELWILp1WQZro6ZdhTZTTK7eBYmvG7VnLhHhiZLxPPUBGcturqLy Q2dl/ufzIH+YPyCZjjnrqi+9oa3aSL+1aXcBoOPppUzfHtmkx+/yk1Bllf35Pd7d HjYDh6v0Ll6puOegRJpSBqYSF1ToPvYsG+As2B7Fzm6Fe+kmGscVVVFwBOwRTAv+ 0zpgK/19E0QRpJrCdMVHYHhOKgqM0CVsTutpFdd6zlkCHQX3PIoJ3NJcx8z/YRAZ NTlwurXuQOC7notIPEdVs1/jQsfQqmI= -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:17 2025 by rpki-client