$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa File: e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa (raw, json) Hash identifier: iNNTh01HQz50e2ACkmM4McQuqpzLn0/V0UHoQ6WbsWQ= Subject key identifier: 5C:D0:88:9D:54:49:9A:AD:C5:5C:80:A5:9F:B9:87:09:7E:50:E8:E1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411886AE600E6F6E1B292C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:88:6a:e6:00:e6:f6:e1:b2:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=71bba641-ce09-4503-bd8b-1589282ef743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:13:e4:ac:8d:8f:a2:89:14:18:ca:14:9c: d0:e7:82:44:91:48:64:47:4b:08:0a:9e:d2:b5:59: c8:c7:12:2a:b9:45:ed:d6:7e:86:a2:ed:7c:40:6b: a3:56:98:6d:02:a0:f6:dd:43:80:c6:b9:65:b0:0f: b5:5d:fa:2a:e8:21:97:ae:1e:09:d3:c9:05:50:c9: 6e:62:6b:34:a5:37:01:e5:2c:38:f8:d6:22:df:ba: e3:47:be:49:b0:ce:8f:b1:e5:cb:80:a8:87:31:e3: ed:a4:46:82:3c:f7:04:26:5b:64:f6:ee:d7:d0:50: 00:62:68:23:71:56:a4:3a:4e:aa:6d:89:29:bf:f7: 87:92:9a:c7:ac:92:45:a7:a0:51:c4:16:a2:5c:c9: 46:13:b3:1e:76:37:21:ab:35:4c:f4:5c:a4:e9:bd: d7:d8:9d:ef:04:0f:f4:10:3a:e1:47:05:40:d9:ef: 49:de:81:89:a6:e5:2b:ca:11:c5:14:e8:a5:f4:0e: 28:7e:03:7e:69:6d:38:b4:aa:3d:18:c3:23:9e:02: dc:85:5d:6b:d6:0e:04:da:5c:bc:34:00:26:c0:dd: 09:ec:da:f3:15:f2:86:00:4e:31:0e:6f:f2:c1:a1: 7e:7f:c7:eb:86:92:2e:a0:6f:00:95:3e:91:25:b5: ab:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D0:88:9D:54:49:9A:AD:C5:5C:80:A5:9F:B9:87:09:7E:50:E8:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:37:94:8a:50:e0:c6:2e:5e:e1:97:28:dc:97:5e:0f:ba:0c: c3:72:73:9e:f7:81:9f:f8:75:3c:20:a3:cc:b9:b5:ae:5c:5c: e5:a6:f7:75:93:c8:95:b4:f0:69:52:43:99:a8:13:f2:bd:b6: c7:ec:12:71:e5:90:0c:a9:54:0b:81:2e:be:aa:dd:20:43:04: f1:b5:e3:51:94:fb:f5:8a:ef:a7:a8:16:98:84:69:de:e6:29: 22:c9:2e:ec:d0:56:b2:cc:58:51:1c:06:61:be:a8:50:52:fa: 64:97:c6:e0:80:36:fe:8b:7d:78:1f:4f:5e:c7:9f:88:d4:c6: 6c:5e:bb:10:6b:02:60:5d:82:e9:96:84:c4:70:97:02:78:58: d9:d4:52:33:22:a0:80:ec:57:c1:36:ca:e3:b7:df:59:27:7b: f5:39:72:35:70:79:d6:2c:2f:a5:76:2d:19:9c:ec:4e:1f:47: 35:4a:85:55:ab:7b:81:ed:d0:58:c9:be:00:21:c2:0a:d9:8b: a5:93:ad:5a:08:d5:5e:12:e3:99:9b:7a:57:bb:02:99:c6:37: 26:c1:13:22:4a:3c:03:ee:8a:9e:4b:61:e4:ba:24:ec:cc:bf: 77:28:79:15:e0:41:54:bb:4d:7b:ab:95:ad:ef:77:bf:82:a5: f0:d9:80:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYhq5gDm9uGyksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzFiYmE2NDEtY2UwOS00NTAzLWJkOGItMTU4OTI4MmVmNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzAT5KyNj6KJFBjKFJzQ54JEkUhkR0sICp7S tVnIxxIquUXt1n6Gou18QGujVphtAqD23UOAxrllsA+1Xfoq6CGXrh4J08kFUMlu Yms0pTcB5Sw4+NYi37rjR75JsM6PseXLgKiHMePtpEaCPPcEJltk9u7X0FAAYmgj cVakOk6qbYkpv/eHkprHrJJFp6BRxBaiXMlGE7MedjchqzVM9Fyk6b3X2J3vBA/0 EDrhRwVA2e9J3oGJpuUryhHFFOil9A4ofgN+aW04tKo9GMMjngLchV1r1g4E2ly8 NAAmwN0J7NrzFfKGAE4xDm/ywaF+f8frhpIuoG8AlT6RJbWrWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzQiJ1USZqtxVyApZ+5hwl+UOjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTRjYWE0OGMtNWIxNi0z N2Q2LTgzNDItYTNiOGEzYjVkNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk3lIpQ4MYuXuGXKNyXXg+6DMNyc573gZ/4dTwgo8y5ta5cXOWm93WT yJW08GlSQ5moE/K9tsfsEnHlkAypVAuBLr6q3SBDBPG141GU+/WK76eoFpiEad7m KSLJLuzQVrLMWFEcBmG+qFBS+mSXxuCANv6LfXgfT17Hn4jUxmxeuxBrAmBdgumW hMRwlwJ4WNnUUjMioIDsV8E2yuO331kne/U5cjVwedYsL6V2LRmc7E4fRzVKhVWr e4Ht0FjJvgAhwgrZi6WTrVoI1V4S45mbele7ApnGNybBEyJKPAPuip5LYeS6JOzM v3coeRXgQVS7TXurla3vd7+CpfDZgMs= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:58 2025 by rpki-client