$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa File: ef6dc64b-a739-3069-8e89-e656f33c13e6.roa (raw, json) Hash identifier: 3yRSXD2Om7h8k1Iu2rcM+do1NnGGS3oG8OOxT4bGY20= Subject key identifier: DD:B1:5A:15:56:64:77:09:D7:BE:10:4F:34:00:C0:6A:E6:EF:88:ED Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841189A43CDAC87B799BF3C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:89:a4:3c:da:c8:7b:79:9b:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=564c4e91-0e59-4538-b504-4594046a0d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:41:5c:28:7b:42:1b:86:59:2d:21:fb:61:1b: 62:f2:ec:ba:85:d3:c0:23:c7:0a:75:2d:5e:a9:2b: 9e:63:a0:db:cd:c9:6e:e9:02:93:e2:65:cc:65:e0: 0f:e8:af:42:b8:e8:f4:12:e3:89:51:c4:c7:cd:cb: 15:3f:19:14:4e:e5:88:3e:9e:2e:a7:29:1b:a8:bf: 27:af:75:03:c1:c5:aa:8a:c1:5a:3a:4a:43:c5:ad: e8:03:0e:60:f2:f6:a3:97:b2:fb:e5:bb:74:4a:91: ad:a0:6c:cd:24:4f:50:d3:5b:41:0d:5e:05:58:b6: f6:96:94:9b:4a:6b:1e:cc:dd:9a:5f:99:5d:e3:26: 8f:30:9a:89:30:0b:f1:d4:9c:8d:3b:7e:b3:0f:7f: 33:5f:5a:ad:3a:db:9e:d7:7f:c5:11:d0:61:ed:dd: 3c:31:31:b5:50:a1:1d:2b:c1:f0:63:f8:80:41:5c: ce:13:05:59:bf:ef:a9:fd:cb:9f:b4:47:55:66:21: 57:41:0a:06:a8:04:99:d7:6c:6e:59:f0:02:d0:a2: 7e:3d:5d:79:1f:44:e7:83:48:91:bf:e2:e3:e9:03: 08:9b:98:19:a1:25:b2:86:37:45:18:68:73:15:ce: 78:2d:33:8f:4b:d2:74:0f:79:6d:2b:03:c7:a5:87: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B1:5A:15:56:64:77:09:D7:BE:10:4F:34:00:C0:6A:E6:EF:88:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:29:0d:f3:d6:3d:a3:e9:d9:9a:7d:38:3d:e6:f2:69:ae:ef: 4e:2b:f4:13:ed:ef:d9:cf:af:2f:6d:ae:ae:06:36:2b:2b:7a: 28:27:c4:df:7c:d1:55:7f:4b:11:62:fe:ac:67:38:3d:9e:5d: 2a:de:f4:54:f6:60:56:f5:35:2b:a3:45:90:1f:ce:c2:28:9a: 74:83:e3:b6:c5:a3:1c:d2:bb:6f:f4:41:e0:9d:77:2b:71:09: aa:96:07:7a:04:80:08:2f:28:c6:8c:f6:b3:a3:c8:ca:91:22: 50:53:31:eb:58:e8:d9:18:36:6a:07:c7:8b:4f:55:7c:ed:71: 6e:57:54:6f:38:e0:89:f8:9f:45:26:4f:ae:63:df:37:57:3c: f3:02:07:85:4b:85:04:43:53:6b:df:b0:55:30:c9:dd:0e:c5: 9c:c9:af:17:cc:c7:17:06:8c:38:56:5b:84:51:6a:5f:92:4b: 1f:99:73:59:0d:5e:e9:a3:b0:3f:79:55:b1:2d:b7:99:9a:fa: 4b:43:76:26:5e:22:fd:5b:62:2a:5e:ed:af:dd:e4:03:83:65: 6f:b8:d0:3b:78:04:75:ad:6e:a9:11:90:73:21:25:42:8e:22: 77:c4:9d:e3:12:9b:ac:58:64:2e:ba:91:63:3e:d9:43:b2:dc: f2:f3:d4:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYmkPNrIe3mb88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTY0YzRlOTEtMGU1OS00NTM4LWI1MDQtNDU5NDA0NmEwZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEFcKHtCG4ZZLSH7YRti8uy6hdPAI8cKdS1e qSueY6Dbzclu6QKT4mXMZeAP6K9CuOj0EuOJUcTHzcsVPxkUTuWIPp4upykbqL8n r3UDwcWqisFaOkpDxa3oAw5g8vajl7L75bt0SpGtoGzNJE9Q01tBDV4FWLb2lpSb SmsezN2aX5ld4yaPMJqJMAvx1JyNO36zD38zX1qtOtue13/FEdBh7d08MTG1UKEd K8HwY/iAQVzOEwVZv++p/cuftEdVZiFXQQoGqASZ12xuWfAC0KJ+PV15H0Tng0iR v+Lj6QMIm5gZoSWyhjdFGGhzFc54LTOPS9J0D3ltKwPHpYfETQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2xWhVWZHcJ174QTzQAwGrm74jtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWY2ZGM2NGItYTczOS0z MDY5LThlODktZTY1NmYzM2MxM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEpDfPWPaPp2Zp9OD3m8mmu704r9BPt79nPry9trq4GNisreignxN98 0VV/SxFi/qxnOD2eXSre9FT2YFb1NSujRZAfzsIomnSD47bFoxzSu2/0QeCddytx CaqWB3oEgAgvKMaM9rOjyMqRIlBTMetY6NkYNmoHx4tPVXztcW5XVG844In4n0Um T65j3zdXPPMCB4VLhQRDU2vfsFUwyd0OxZzJrxfMxxcGjDhWW4RRal+SSx+Zc1kN XumjsD95VbEtt5ma+ktDdiZeIv1bYipe7a/d5AODZW+40Dt4BHWtbqkRkHMhJUKO InfEneMSm6xYZC66kWM+2UOy3PLz1Bg= -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:15 2025 by rpki-client