$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2e6255a8-38f5-302d-9082-237e58ecb46c.roa File: 2e6255a8-38f5-302d-9082-237e58ecb46c.roa (raw, json) Hash identifier: +aU9OklWr2qHVzDX2B9jnLdhhQEBkh2fRT36dQVZiPo= Subject key identifier: 27:A1:3C:7F:72:30:B7:9D:B4:7E:67:E3:56:46:5D:DB:9F:BC:37:79 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A5CFC93C7043F37FAB93C2DA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2e6255a8-38f5-302d-9082-237e58ecb46c.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 15169 IP address blocks: 172.217.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:93:c7:04:3f:37:fa:b9:3c:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=3803d0cc-d955-4234-93a1-1a040238d2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:87:d9:a7:32:d2:0f:9b:91:40:99:d1:cf:d4: 62:68:ca:6a:a0:c8:9f:65:26:fb:f3:d2:3b:d0:b5: 30:af:65:83:d8:85:51:a7:b0:4f:c8:b8:ac:43:26: dc:36:12:8d:b4:44:b6:96:82:b1:25:25:17:7f:2e: 8b:4e:d2:b3:25:ba:24:ce:db:f7:c1:5c:13:4c:35: a1:f2:36:dc:ca:c2:58:77:43:76:58:14:88:a8:fd: 88:04:95:6a:79:ca:36:e6:43:a7:bd:20:59:a9:98: b3:ee:a5:b1:8c:40:d7:d0:98:97:1a:0c:af:cb:84: 48:d8:96:83:0a:38:59:ef:df:59:9c:c1:93:57:69: b9:3f:32:3f:e0:00:2b:fc:a4:55:4d:8f:9c:c4:e7: b4:82:3a:77:f7:81:e5:1d:ea:5c:96:d5:bd:39:3d: 9a:4d:c4:80:b9:b1:fc:8d:4f:8f:17:a6:59:81:02: 63:5d:d3:1f:79:39:96:8b:19:19:0c:cc:d6:ef:30: 28:3f:23:9d:3a:54:ea:9a:43:ea:fa:e4:48:9c:a8: 3d:54:6a:b1:47:e7:62:94:c5:78:31:ff:aa:06:a9: 55:eb:08:4c:6c:73:08:cc:24:f3:e0:5a:d6:73:5e: ad:68:ff:de:5e:17:18:e3:c4:4c:20:09:46:da:22: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A1:3C:7F:72:30:B7:9D:B4:7E:67:E3:56:46:5D:DB:9F:BC:37:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2e6255a8-38f5-302d-9082-237e58ecb46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9f:74:56:3d:b9:ea:2a:8e:16:5c:2e:70:80:80:94:e9:d2: 6f:5a:70:97:f5:da:61:00:f4:a1:dc:e5:7d:4b:3f:b4:ca:93: db:22:5f:1d:f2:e9:c8:c7:e8:cf:f0:92:ca:75:03:2d:70:38: 21:99:62:88:cc:69:7b:2b:61:62:f7:86:f1:08:97:f1:c5:51: bf:d2:0d:dd:8c:5a:92:81:c5:9b:0a:7d:79:50:37:cf:cf:d5: c7:93:ef:d2:c4:4e:0d:f9:0e:3b:cd:27:82:26:4b:1c:69:14: 14:1b:54:10:36:31:fa:ac:84:77:3e:c5:82:15:98:93:f9:25: 80:1c:c0:fe:94:19:cb:92:95:3c:dd:a8:ae:9b:9f:4c:12:d1: 10:d9:d0:75:c5:eb:54:ce:99:0a:45:59:0a:27:b2:f7:db:07: 8c:1f:4a:eb:0d:1e:d0:97:72:ae:17:e6:d7:74:ac:c1:22:55: d9:1e:44:3a:f2:0f:e2:47:1c:8f:12:3d:b9:0a:2e:c5:ef:b9: 2c:97:40:59:e5:24:c5:d9:78:6a:d5:c1:54:ab:cb:7d:64:2b: 60:24:c5:45:85:7f:be:f4:ba:65:b4:c5:68:16:7e:09:68:0b: de:5c:86:3d:a3:2b:ae:c3:f9:f3:4f:7d:62:49:39:24:22:59: b2:19:9d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/JPHBD83+rk8LaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MzgwM2QwY2MtZDk1NS00MjM0LTkzYTEtMWEwNDAyMzhkMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ofZpzLSD5uRQJnRz9RiaMpqoMifZSb789I7 0LUwr2WD2IVRp7BPyLisQybcNhKNtES2loKxJSUXfy6LTtKzJbokztv3wVwTTDWh 8jbcysJYd0N2WBSIqP2IBJVqeco25kOnvSBZqZiz7qWxjEDX0JiXGgyvy4RI2JaD CjhZ799ZnMGTV2m5PzI/4AAr/KRVTY+cxOe0gjp394HlHepcltW9OT2aTcSAubH8 jU+PF6ZZgQJjXdMfeTmWixkZDMzW7zAoPyOdOlTqmkPq+uRInKg9VGqxR+dilMV4 Mf+qBqlV6whMbHMIzCTz4FrWc16taP/eXhcY48RMIAlG2iIkawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCehPH9yMLedtH5n41ZGXdufvDd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmU2MjU1YTgtMzhmNS0z MDJkLTkwODItMjM3ZTU4ZWNiNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHufdFY9ueoqjhZcLnCAgJTp0m9acJf12mEA9KHc5X1LP7TKk9siXx3y 6cjH6M/wksp1Ay1wOCGZYojMaXsrYWL3hvEIl/HFUb/SDd2MWpKBxZsKfXlQN8/P 1ceT79LETg35DjvNJ4ImSxxpFBQbVBA2MfqshHc+xYIVmJP5JYAcwP6UGcuSlTzd qK6bn0wS0RDZ0HXF61TOmQpFWQonsvfbB4wfSusNHtCXcq4X5td0rMEiVdkeRDry D+JHHI8SPbkKLsXvuSyXQFnlJMXZeGrVwVSry31kK2AkxUWFf770umW0xWgWfglo C95chj2jK67D+fNPfWJJOSQiWbIZnb8= -----END CERTIFICATE-----Generated at Thu Jul 10 01:37:50 2025 by rpki-client