$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae10f005-8cd2-3961-a371-9810da85e3a8.roa File: ae10f005-8cd2-3961-a371-9810da85e3a8.roa (raw, json) Hash identifier: OYq27I4gE6XCN2HQSnCcdAYVR/T/fsdJJs+JDxRSKrY= Subject key identifier: E9:66:3C:F8:62:47:50:03:65:F2:C8:B4:84:EC:B3:BE:42:65:6C:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A5B95B842493D53BDA243FBEC Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae10f005-8cd2-3961-a371-9810da85e3a8.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 15169 IP address blocks: 172.217.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b8:42:49:3d:53:bd:a2:43:fb:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=6cf7db33-dd5a-4af2-808c-c89bb2b320ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:72:12:cb:ef:00:e5:78:1c:b3:5f:9f:a6: 7e:b0:06:f3:61:8d:a5:b1:d1:08:3d:92:6a:4b:6f: 1f:3b:fe:7f:2c:b7:f5:2c:31:df:98:a9:c5:11:5c: 36:ca:00:5c:aa:6a:4f:6d:d8:2e:a9:1f:2b:b9:f0: 9f:ba:bb:02:dc:42:95:b3:f9:de:5f:23:6c:25:ac: 0d:9f:fc:59:e2:94:a5:5d:64:ad:26:f6:82:d4:4b: 2e:d1:c2:06:14:ce:6a:b1:4f:31:8b:53:e3:54:2e: c8:20:24:79:fd:cf:b9:2e:da:07:80:b2:21:19:31: 29:44:07:44:07:ed:32:e2:ca:59:99:d2:9a:4a:bc: 5e:ce:56:08:75:8a:74:97:be:92:25:7b:2c:fc:fa: e9:22:5a:6b:d2:5f:33:ea:42:8f:2c:58:ed:70:2e: 91:2d:31:b2:b2:f2:a9:f6:48:55:21:68:80:94:fd: da:e2:99:51:e7:08:c9:08:d2:2c:58:2b:f4:58:e3: 4a:2c:84:54:fb:2d:9e:07:c5:ff:1c:5e:cf:8e:f3: b3:ac:6d:e6:75:7a:c9:20:64:8b:a3:ee:82:5c:fe: 40:49:4c:fe:25:b7:7b:d0:68:3a:0d:0e:62:fe:45: 58:b7:d8:cc:91:18:53:82:d2:55:95:55:ef:d8:c0: 29:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:66:3C:F8:62:47:50:03:65:F2:C8:B4:84:EC:B3:BE:42:65:6C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae10f005-8cd2-3961-a371-9810da85e3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a4:d9:a1:e5:29:a9:7c:0b:8d:23:90:a7:21:ac:09:83:e3: 42:ad:80:15:11:0e:62:a5:0a:5f:04:3d:92:9b:09:13:fb:45: b0:94:ab:5e:e3:a6:0e:16:60:71:99:94:df:ff:4c:1c:7b:a2: 01:b4:38:39:1d:56:11:71:46:f1:6a:ad:f8:cc:f7:20:31:67: 86:b3:e8:ee:ed:fa:2d:09:92:41:94:0f:87:4e:dd:15:00:4c: 98:59:09:2c:7d:79:6f:6f:ee:0e:c2:96:61:65:94:14:ae:01: c9:d9:e5:33:42:bb:0e:89:07:bd:72:f4:39:9c:41:20:1c:7b: d6:fc:30:03:70:dc:a5:8c:b0:39:42:c1:1b:a7:73:fb:2a:1e: ed:d4:90:ec:0f:13:66:ee:cb:1a:74:e9:43:c9:53:80:b3:02: 96:b8:ec:d9:ce:d8:51:83:03:93:5f:64:7f:3b:08:23:a0:bd: e5:c5:76:6b:0a:5c:fc:ee:de:a6:40:47:5d:96:be:54:30:34: 35:27:07:2f:16:e0:59:29:4b:d5:f9:82:ed:c7:7f:b7:f8:84: 0d:91:31:7e:ef:b2:2a:68:c2:55:1c:b0:27:6a:c4:c0:8b:0b: 05:1b:55:64:da:7a:66:48:46:54:e7:e2:1c:60:5b:dd:f6:55: 88:1b:28:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbhCST1TvaJD++wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk NmNmN2RiMzMtZGQ1YS00YWYyLTgwOGMtYzg5YmIyYjMyMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlidyEsvvAOV4HLNfn6Z+sAbzYY2lsdEIPZJq S28fO/5/LLf1LDHfmKnFEVw2ygBcqmpPbdguqR8rufCfursC3EKVs/neXyNsJawN n/xZ4pSlXWStJvaC1Esu0cIGFM5qsU8xi1PjVC7IICR5/c+5LtoHgLIhGTEpRAdE B+0y4spZmdKaSrxezlYIdYp0l76SJXss/PrpIlpr0l8z6kKPLFjtcC6RLTGysvKp 9khVIWiAlP3a4plR5wjJCNIsWCv0WONKLIRU+y2eB8X/HF7PjvOzrG3mdXrJIGSL o+6CXP5ASUz+Jbd70Gg6DQ5i/kVYt9jMkRhTgtJVlVXv2MApqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlmPPhiR1ADZfLItITss75CZWxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWUxMGYwMDUtOGNkMi0z OTYxLWEzNzEtOTgxMGRhODVlM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKk2aHlKal8C40jkKchrAmD40KtgBURDmKlCl8EPZKbCRP7RbCUq17j pg4WYHGZlN//TBx7ogG0ODkdVhFxRvFqrfjM9yAxZ4az6O7t+i0JkkGUD4dO3RUA TJhZCSx9eW9v7g7ClmFllBSuAcnZ5TNCuw6JB71y9DmcQSAce9b8MANw3KWMsDlC wRunc/sqHu3UkOwPE2buyxp06UPJU4CzApa47NnO2FGDA5NfZH87CCOgveXFdmsK XPzu3qZAR12WvlQwNDUnBy8W4FkpS9X5gu3Hf7f4hA2RMX7vsipowlUcsCdqxMCL CwUbVWTaemZIRlTn4hxgW932VYgbKFg= -----END CERTIFICATE-----Generated at Mon Jun 30 10:33:53 2025 by rpki-client