$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa File: f32520e4-c5ed-3c6e-8a5c-f42032642839.roa (raw, json) Hash identifier: 8Uc6CKfMWMwQuclk0dukdmQjYLs0onKFACZKZerayrY= Subject key identifier: 46:34:1A:F5:6B:2D:22:07:E4:C0:43:BD:B4:74:9A:E4:E9:D3:13:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8412260E097BF81604FEC300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.58.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:26:0e:09:7b:f8:16:04:fe:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2c3b44cb-0130-41bc-ab8a-83128878b9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:c6:57:53:8b:de:5e:dc:0f:0d:22:31:1e: 69:60:ef:04:a6:e7:7a:75:ac:c6:f7:ea:a4:73:3d: b7:e9:24:60:11:61:ae:9d:87:de:5c:93:e2:94:09: 96:73:94:cb:07:68:df:c9:6f:0a:c5:83:ca:2e:eb: 9b:f6:3c:e1:28:45:de:cf:ca:ff:5a:e7:f4:5c:dd: b1:0a:51:b0:2d:2b:8a:27:67:01:af:71:2f:1e:2d: ad:38:55:0b:45:5b:70:9e:e5:b5:e7:3b:36:cd:1f: 84:c5:ba:8d:f1:50:7b:f5:b0:be:77:99:35:07:e9: 6b:5a:35:71:82:11:1f:71:5a:9a:88:02:cf:6a:c4: f6:5e:c6:e1:49:cd:27:50:5b:0d:eb:34:6b:18:fc: 7a:58:5b:a8:9f:92:e4:b1:54:c1:ae:de:68:74:0d: 89:86:15:6e:85:4f:56:44:02:f3:3a:5a:39:28:0f: 8c:e5:c1:81:36:92:a4:5c:b0:08:b9:02:0d:e9:ec: b4:ac:e0:50:99:5a:ed:95:66:14:a7:58:72:36:57: c5:73:b6:27:a9:2d:9c:7f:5c:6d:95:d4:72:a9:fd: db:0b:39:68:c5:ab:4b:6b:e3:18:a3:f2:e4:78:75: b5:e2:53:39:ba:fc:f8:05:b1:46:3e:ca:eb:4f:f4: 87:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:34:1A:F5:6B:2D:22:07:E4:C0:43:BD:B4:74:9A:E4:E9:D3:13:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:42:41:d0:21:37:2b:a5:4e:ec:ec:15:0c:68:a0:e8:ee:76: b4:b7:26:94:5c:6b:2c:a6:9e:30:18:20:ca:0e:3e:92:cb:d9: 37:8f:7b:27:55:03:2d:53:d4:83:c3:fc:8b:9e:aa:e9:be:c7: 97:1f:84:94:39:0d:c1:4d:0f:41:f6:95:2c:f6:ec:f8:52:a7: 05:b2:f7:dd:7e:f0:4b:7c:cf:60:b0:7e:61:24:29:84:41:42: 98:b5:0f:4a:fa:87:a4:b7:af:50:3e:14:5d:31:5e:77:6c:d1: 23:f5:47:24:40:06:6b:7e:a4:64:5c:1a:64:f4:f4:f5:ed:77: 95:fd:f0:7b:0d:89:e2:92:1c:42:83:0c:ce:c3:4b:a9:19:e3: 9d:fe:b6:89:b8:8e:80:0b:26:c7:88:2b:71:64:37:1c:13:8a: d0:5a:07:1a:1d:76:1e:ff:0c:f9:ef:5c:d2:37:98:a9:c1:cf: c1:4e:18:ad:cd:12:05:f8:85:bd:48:74:2a:66:37:e9:9a:08: 86:b5:1a:cd:f1:b8:a7:15:38:e9:bf:4a:c7:42:fd:d8:bc:94: 6c:59:49:0a:ab:fb:85:ea:f9:47:b8:06:cf:7d:4f:87:a6:29: 06:f5:e4:6b:55:b6:eb:ca:00:90:c4:25:af:ea:2c:c7:62:1d: 5e:59:5c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiYOCXv4FgT+wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmMzYjQ0Y2ItMDEzMC00MWJjLWFiOGEtODMxMjg4NzhiOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6vGV1OL3l7cDw0iMR5pYO8Epud6dazG9+qk cz236SRgEWGunYfeXJPilAmWc5TLB2jfyW8KxYPKLuub9jzhKEXez8r/Wuf0XN2x ClGwLSuKJ2cBr3EvHi2tOFULRVtwnuW15zs2zR+ExbqN8VB79bC+d5k1B+lrWjVx ghEfcVqaiALPasT2XsbhSc0nUFsN6zRrGPx6WFuon5LksVTBrt5odA2JhhVuhU9W RALzOlo5KA+M5cGBNpKkXLAIuQIN6ey0rOBQmVrtlWYUp1hyNlfFc7YnqS2cf1xt ldRyqf3bCzloxatLa+MYo/LkeHW14lM5uvz4BbFGPsrrT/SHVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY0GvVrLSIH5MBDvbR0muTp0xMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjMyNTIwZTQtYzVlZC0z YzZlLThhNWMtZjQyMDMyNjQyODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdCQdAhNyulTuzsFQxooOjudrS3JpRcayymnjAYIMoOPpLL2TePeydV Ay1T1IPD/Iuequm+x5cfhJQ5DcFND0H2lSz27PhSpwWy991+8Et8z2CwfmEkKYRB Qpi1D0r6h6S3r1A+FF0xXnds0SP1RyRABmt+pGRcGmT09PXtd5X98HsNieKSHEKD DM7DS6kZ453+tom4joALJseIK3FkNxwTitBaBxoddh7/DPnvXNI3mKnBz8FOGK3N EgX4hb1IdCpmN+maCIa1Gs3xuKcVOOm/SsdC/di8lGxZSQqr+4Xq+Ue4Bs99T4em KQb15GtVtuvKAJDEJa/qLMdiHV5ZXFY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:02 2025 by rpki-client