$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa File: dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa (raw, json) Hash identifier: ZXQmpgkAikLqWNE6mVyQYnubKT+SxF3jem5EHAyCusw= Subject key identifier: F7:7B:4C:3E:D7:20:C4:3A:A7:D3:E0:59:76:5E:48:2A:97:4A:38:21 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A71EB56384D61CE49338CA4C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 15169 IP address blocks: 172.217.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:56:38:4d:61:ce:49:33:8c:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=80e54014-acd1-414a-9b5d-1f2174da16f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:0b:14:bd:7a:5e:87:aa:ee:05:e7:4e:1c:8d: b7:e6:c3:e2:cb:28:8a:1c:31:3a:66:60:82:cd:b9: 3b:b2:ee:d2:dc:91:6e:28:86:8d:6b:7e:44:c2:07: 55:ef:3b:d0:04:89:7c:d9:5e:fc:8c:14:64:7e:9e: 2e:8a:68:d8:42:f4:d1:76:c9:6a:77:fb:0d:0f:b2: 78:00:12:51:e8:b5:b6:15:93:af:02:45:d1:c5:3a: 17:3f:88:a0:13:db:45:e6:55:44:25:8b:ab:c3:4b: 83:dc:6a:5c:30:58:f1:39:2d:af:41:ac:71:3f:2c: ed:f9:97:aa:24:ae:0f:c2:10:d7:7c:17:56:96:d6: 61:bd:26:a0:d7:c9:37:6e:8e:75:d2:ff:30:c6:13: 95:28:62:c1:86:89:1f:d5:b6:c1:5a:4b:79:4b:aa: d0:4a:17:74:ed:93:c6:5f:15:58:f4:eb:66:99:f1: 7d:97:86:1e:98:94:72:2e:77:72:e5:15:23:43:4c: 6e:df:1a:9d:16:99:0e:c5:30:dc:42:59:ca:46:35: da:76:7b:7d:d7:91:5b:6b:6c:47:31:48:07:bd:a5: 93:24:50:35:48:bd:cb:be:82:7b:4a:23:f0:0b:57: 70:a5:b0:9a:bd:1e:1c:ca:c6:78:8a:77:12:fb:42: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7B:4C:3E:D7:20:C4:3A:A7:D3:E0:59:76:5E:48:2A:97:4A:38:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:58:20:1d:6a:4d:67:49:9f:d6:a2:54:53:d4:0c:f2:10:60: 13:d7:49:e5:6c:fe:63:ba:67:2d:db:82:35:e7:82:1c:66:06: 08:fa:69:98:56:5f:84:72:c8:e1:6a:f4:50:13:f9:66:c8:fa: f9:68:66:53:98:e6:3a:65:91:d9:dc:7a:0b:09:72:be:da:7f: ce:e7:0a:6c:7c:64:eb:4c:af:cd:8c:be:5e:06:95:ca:e9:9c: 19:33:87:9c:91:a8:21:bd:b5:41:75:f8:36:90:2c:a0:5d:7c: 6f:cc:9f:4c:f5:30:12:6e:6b:10:52:4d:6f:2b:0b:b0:05:d9: bc:02:b2:61:7f:f0:1f:3b:9c:16:ad:25:b9:b4:8f:84:a4:f6: 53:b4:e2:bf:54:10:6d:28:b3:4a:ef:20:ea:fb:f5:96:76:90: 27:b4:97:83:38:35:54:e8:fa:fb:2d:69:90:78:50:00:4b:47: 0c:6d:60:38:72:15:15:5a:94:81:72:5d:ee:f3:4a:44:99:46: 93:59:85:ea:ea:ef:5a:e7:b6:ba:f5:ff:db:e6:f8:a8:d0:93: 8d:8c:4e:c7:e9:c5:b9:d6:86:84:68:16:13:05:ae:0a:b9:51: f6:01:33:41:a4:ae:fa:8b:2d:7e:80:91:f3:b9:a8:0e:f4:5e: 2c:b9:09:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61Y4TWHOSTOMpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ODBlNTQwMTQtYWNkMS00MTRhLTliNWQtMWYyMTc0ZGExNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/QsUvXpeh6ruBedOHI235sPiyyiKHDE6ZmCC zbk7su7S3JFuKIaNa35EwgdV7zvQBIl82V78jBRkfp4uimjYQvTRdslqd/sND7J4 ABJR6LW2FZOvAkXRxToXP4igE9tF5lVEJYurw0uD3GpcMFjxOS2vQaxxPyzt+Zeq JK4PwhDXfBdWltZhvSag18k3bo510v8wxhOVKGLBhokf1bbBWkt5S6rQShd07ZPG XxVY9OtmmfF9l4YemJRyLndy5RUjQ0xu3xqdFpkOxTDcQlnKRjXadnt915Fba2xH MUgHvaWTJFA1SL3LvoJ7SiPwC1dwpbCavR4cysZ4incS+0IitQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPd7TD7XIMQ6p9PgWXZeSCqXSjghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZiOGM1ZmYtNDA0NS0z NzJmLWJiMzEtOTNmNTE2NTFjMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5YIB1qTWdJn9aiVFPUDPIQYBPXSeVs/mO6Zy3bgjXnghxmBgj6aZhW X4RyyOFq9FAT+WbI+vloZlOY5jplkdncegsJcr7af87nCmx8ZOtMr82Mvl4Glcrp nBkzh5yRqCG9tUF1+DaQLKBdfG/Mn0z1MBJuaxBSTW8rC7AF2bwCsmF/8B87nBat Jbm0j4Sk9lO04r9UEG0os0rvIOr79ZZ2kCe0l4M4NVTo+vstaZB4UABLRwxtYDhy FRValIFyXe7zSkSZRpNZherq71rntrr1/9vm+KjQk42MTsfpxbnWhoRoFhMFrgq5 UfYBM0GkrvqLLX6AkfO5qA70Xiy5CUU= -----END CERTIFICATE-----Generated at Thu Jul 10 09:32:22 2025 by rpki-client