$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa File: e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa (raw, json) Hash identifier: UjULKEBt9nZiiGNa0vvAuYKos8Fu53t1kyGeW+eddnk= Subject key identifier: 89:5B:F9:AA:F7:B9:7A:CE:E0:09:8B:FD:88:97:25:4A:C2:C7:5E:5D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F2B7861A70A248A45F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.217.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f2:b7:86:1a:70:a2:48:a4:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=d1963f84-6153-4441-ba7e-4c0e57907c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:fa:e2:1f:91:4e:8f:e2:a0:56:5e:fe:8d: 1a:b0:3b:69:03:16:32:f9:dc:a2:85:88:19:a2:9c: 4a:4b:80:46:03:d5:01:e2:20:d2:c7:3f:fe:96:e0: a4:f2:16:ec:77:89:5e:d5:9b:f4:64:f3:92:88:91: ff:4a:16:28:3d:82:13:9a:48:05:c6:9b:bd:7c:3b: a9:39:e6:f8:8a:f3:89:ed:21:75:0f:41:9e:85:27: 0a:db:e2:69:2c:52:1d:04:66:00:58:76:cf:6e:8e: 9d:7a:1d:a4:cf:d5:b5:a2:17:e3:6d:9d:3a:57:26: 6b:f2:a0:eb:84:66:56:9a:76:b3:a4:74:d3:6d:11: 89:82:a5:6c:3e:31:10:e5:24:d6:3c:e6:2c:52:d1: df:1b:88:8c:c1:14:0e:49:dd:e9:bc:5f:58:a2:e7: df:05:ee:c0:9c:1f:25:d6:3f:c8:fa:db:4a:b1:98: 74:ad:f9:1a:ae:18:5c:42:17:60:5a:88:d2:50:18: 90:31:3e:a4:77:35:6a:bb:f7:f5:cc:f9:63:f0:3b: ad:53:ff:38:80:94:3f:53:b5:86:a8:c3:24:8e:41: e4:61:b2:93:30:af:bc:b5:9f:0b:30:29:c7:81:a6: 2d:e2:c3:a2:ff:6d:46:4d:76:b8:3a:4b:ad:09:6f: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5B:F9:AA:F7:B9:7A:CE:E0:09:8B:FD:88:97:25:4A:C2:C7:5E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:bd:0f:99:df:96:4b:bc:e3:fe:34:3b:24:ff:bd:c3:c5:45: 14:ae:cb:47:ab:99:87:95:70:69:7d:35:f0:7d:38:12:f0:c2: 42:29:e3:90:c0:e9:7a:2c:0d:56:4a:ff:1c:d3:c9:8b:f8:3d: 54:03:73:21:5f:fa:73:31:42:2c:0f:94:a6:34:f0:40:95:e2: 53:32:48:0a:08:2f:31:c9:62:0f:a2:42:fe:52:75:4e:d1:09: f2:a3:dd:0a:61:99:51:ad:17:6b:34:6e:da:1a:a2:90:80:10: 11:08:9d:f0:3e:13:99:5d:a7:8c:63:76:83:fa:66:36:77:9e: fe:35:6b:06:a3:d2:2a:d7:9e:36:c6:82:25:df:5a:f5:dc:b1: 45:5a:49:04:dc:c5:1c:4c:31:5b:9f:b8:32:20:61:e5:7a:77: 56:3c:57:fa:fd:ff:11:04:25:e0:e6:7a:7c:7a:31:0a:dc:21: e5:42:74:e4:b9:29:79:61:ca:df:b4:0b:bc:3b:c0:c9:0a:48: 95:73:eb:5b:e3:c5:f5:93:af:c4:f2:62:43:1d:02:1c:bd:54: 52:6e:f6:5a:7a:a9:90:bf:f2:11:ee:87:a3:ee:e6:03:2f:40: 1f:55:62:c5:59:43:08:1d:51:c5:07:40:87:93:55:77:55:d9: 64:d1:46:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPK3hhpwokikX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZDE5NjNmODQtNjE1My00NDQxLWJhN2UtNGMwZTU3OTA3Yzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hf64h+RTo/ioFZe/o0asDtpAxYy+dyihYgZ opxKS4BGA9UB4iDSxz/+luCk8hbsd4le1Zv0ZPOSiJH/ShYoPYITmkgFxpu9fDup Oeb4ivOJ7SF1D0GehScK2+JpLFIdBGYAWHbPbo6deh2kz9W1ohfjbZ06VyZr8qDr hGZWmnazpHTTbRGJgqVsPjEQ5STWPOYsUtHfG4iMwRQOSd3pvF9YouffBe7AnB8l 1j/I+ttKsZh0rfkarhhcQhdgWojSUBiQMT6kdzVqu/f1zPlj8DutU/84gJQ/U7WG qMMkjkHkYbKTMK+8tZ8LMCnHgaYt4sOi/21GTXa4OkutCW/ynwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlb+ar3uXrO4AmL/YiXJUrCx15dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTUzYzNmNzItMGE3Mi0z NmQ2LWJmNzgtYzY3ZTk0YjgxZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJy9D5nflku84/40OyT/vcPFRRSuy0ermYeVcGl9NfB9OBLwwkIp45DA 6XosDVZK/xzTyYv4PVQDcyFf+nMxQiwPlKY08ECV4lMySAoILzHJYg+iQv5SdU7R CfKj3QphmVGtF2s0btoaopCAEBEInfA+E5ldp4xjdoP6ZjZ3nv41awaj0irXnjbG giXfWvXcsUVaSQTcxRxMMVufuDIgYeV6d1Y8V/r9/xEEJeDmenx6MQrcIeVCdOS5 KXlhyt+0C7w7wMkKSJVz61vjxfWTr8TyYkMdAhy9VFJu9lp6qZC/8hHuh6Pu5gMv QB9VYsVZQwgdUcUHQIeTVXdV2WTRRjM= -----END CERTIFICATE-----Generated at Mon Aug 4 14:05:51 2025 by rpki-client