$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa File: eccc049d-f39e-3a01-8af3-e167539adf3d.roa (raw, json) Hash identifier: OXWrmgaEaRT1v4XHr2XVUQAIkdYij8CX5rlnUQWwk3A= Subject key identifier: 7C:39:38:44:BE:0F:66:2F:30:13:E2:D2:92:41:CB:AE:D3:17:EE:D1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F00B5FC1A324B4EADF9E Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 172.217.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f0:0b:5f:c1:a3:24:b4:ea:df:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=6390b279-c986-4d3f-9b1f-7d2ff1b0fc7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:52:f0:30:af:73:57:3e:21:33:0b:1c:6b: 79:01:9a:ed:90:12:52:f7:ca:b6:cc:36:9b:89:3f: 15:53:05:96:62:d8:84:1a:f6:61:88:fa:4b:2d:21: d3:4e:14:5f:e1:e0:fe:7a:a5:73:0f:4c:c0:bc:62: 98:47:0f:7a:ff:8f:85:12:d9:ac:9e:a0:f4:b7:08: 1f:fa:ac:c2:ac:8a:9c:e8:2a:de:20:1c:79:30:c6: 5d:43:34:ce:1c:7e:66:97:df:03:c8:9b:ce:13:5a: 08:cc:ff:6a:03:18:3d:b7:f8:04:1d:92:c7:cf:61: 18:c2:58:df:a5:e1:db:f8:b8:ee:7e:fb:d6:a0:7a: 5f:c8:56:51:e2:17:50:8c:ec:df:00:f1:fe:f0:9d: d3:b3:03:35:da:f3:40:52:80:b8:54:c3:49:4e:2c: 97:ef:75:79:ec:4d:b2:a7:ed:b1:75:d4:88:a0:69: 50:85:d5:80:cc:ec:1e:44:ea:8d:2c:2e:d4:52:44: e0:5d:17:bc:3b:c7:b0:bc:19:54:35:ca:1d:b8:b4: c5:4c:6a:c1:f2:e7:ca:e7:b5:13:36:52:31:74:4c: 73:11:c3:a2:8e:2d:d5:ca:17:5e:1f:a2:18:12:fa: 16:0f:be:3a:58:c7:8c:e0:2c:ee:e7:72:89:a5:ea: fd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:39:38:44:BE:0F:66:2F:30:13:E2:D2:92:41:CB:AE:D3:17:EE:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:92:5f:89:f9:09:d6:54:68:35:10:ee:a2:5d:99:c4:1e:94: 00:b2:55:2e:16:66:63:1c:88:e5:1c:f3:22:3c:9b:c3:cc:85: 56:0d:39:9b:7e:3b:43:1a:2f:94:62:f1:57:6a:b0:01:9d:f1: ab:cd:7b:a3:c1:1e:b4:34:8d:4b:8a:13:dc:af:2e:f9:cc:00: cb:1c:2d:1d:04:eb:be:33:8a:3e:4c:23:55:12:96:ff:c1:3a: ed:59:4e:ee:e8:7b:64:08:39:e5:bd:55:c9:b5:7e:aa:bd:e9: d3:d5:ed:9d:06:ed:bc:6a:0c:b7:33:fc:b8:06:30:be:6d:76: 82:32:bd:58:22:6c:11:34:5b:11:32:a0:f4:41:11:99:ea:bc: e5:2d:51:ff:95:6d:67:37:88:a4:c2:6a:63:bb:3b:b8:12:7f: 05:f1:b9:bd:01:ea:d0:56:7c:1c:95:91:ec:96:81:9f:89:16: b1:76:76:32:a8:dc:63:2c:c9:2e:cc:73:01:cd:27:b3:cc:72: 26:d9:43:87:56:01:30:e5:81:69:eb:1f:f1:d0:b2:fb:6a:66: 65:4c:9a:ef:94:08:d3:38:d0:1a:a1:49:64:c9:1d:a1:61:8c: 6f:55:41:cf:30:17:c4:c5:54:1d:36:54:0d:df:e8:e5:52:01: b5:b2:12:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPALX8GjJLTq354wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NjM5MGIyNzktYzk4Ni00ZDNmLTliMWYtN2QyZmYxYjBmYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCFS8DCvc1c+ITMLHGt5AZrtkBJS98q2zDab iT8VUwWWYtiEGvZhiPpLLSHTThRf4eD+eqVzD0zAvGKYRw96/4+FEtmsnqD0twgf +qzCrIqc6CreIBx5MMZdQzTOHH5ml98DyJvOE1oIzP9qAxg9t/gEHZLHz2EYwljf peHb+LjufvvWoHpfyFZR4hdQjOzfAPH+8J3TswM12vNAUoC4VMNJTiyX73V57E2y p+2xddSIoGlQhdWAzOweROqNLC7UUkTgXRe8O8ewvBlUNcoduLTFTGrB8ufK57UT NlIxdExzEcOiji3VyhdeH6IYEvoWD746WMeM4Czu53KJper9UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHw5OES+D2YvMBPi0pJBy67TF+7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWNjYzA0OWQtZjM5ZS0z YTAxLThhZjMtZTE2NzUzOWFkZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOSX4n5CdZUaDUQ7qJdmcQelACyVS4WZmMciOUc8yI8m8PMhVYNOZt+ O0MaL5Ri8VdqsAGd8avNe6PBHrQ0jUuKE9yvLvnMAMscLR0E674zij5MI1USlv/B Ou1ZTu7oe2QIOeW9Vcm1fqq96dPV7Z0G7bxqDLcz/LgGML5tdoIyvVgibBE0WxEy oPRBEZnqvOUtUf+VbWc3iKTCamO7O7gSfwXxub0B6tBWfByVkeyWgZ+JFrF2djKo 3GMsyS7McwHNJ7PMcibZQ4dWATDlgWnrH/HQsvtqZmVMmu+UCNM40BqhSWTJHaFh jG9VQc8wF8TFVB02VA3f6OVSAbWyErA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:34 2025 by rpki-client