$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5e2732f-5014-363b-829e-9372ca76347c.roa File: b5e2732f-5014-363b-829e-9372ca76347c.roa (raw, json) Hash identifier: T0qXdiABrX6csvZ1QTJa+EVHXeISkRmeiwA7W7jHgts= Subject key identifier: A1:02:C7:2F:50:18:4E:D7:04:2E:C1:12:E5:18:A3:5B:5D:CF:03:B0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584ADECBD22FC5930D57F469B480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5e2732f-5014-363b-829e-9372ca76347c.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 15169 IP address blocks: 172.217.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:d2:2f:c5:93:0d:57:f4:69:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=15676ac2-81f7-4ed1-927e-464116e72301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b7:dc:1b:bb:1a:69:b3:f6:6f:2c:eb:ec:ca: c4:ad:d6:a7:ea:cf:e8:7d:5f:15:f8:89:5b:d8:bc: 90:65:50:ba:c6:84:a7:4f:a9:8c:a0:f4:88:58:f6: 3e:16:0b:b7:e1:18:f5:ae:81:f2:59:9c:80:75:c0: 66:f4:fa:86:25:58:8d:07:72:b7:7a:c8:ea:81:96: fa:ad:67:ec:9a:a3:8d:7d:a8:36:74:2f:3e:db:84: 6c:e4:9e:06:c9:67:6c:1b:d6:bd:60:46:e4:b0:cb: 3f:54:b6:49:2d:84:a7:94:0f:0a:6d:10:4d:d6:74: 94:4d:3e:bd:84:97:c6:03:f3:f8:15:32:71:39:b8: 27:96:ea:5a:06:5e:92:0f:5f:8e:17:5c:a5:c8:17: 34:71:fe:fc:47:73:14:92:41:ca:93:77:f6:54:c4: d8:3f:ef:ba:58:56:1c:63:58:d7:e1:18:ee:ee:a6: 94:9c:9d:35:2a:8c:83:ea:aa:5d:b3:4b:44:9a:72: 70:e5:18:3b:cb:80:c9:6b:bb:a9:89:a1:9a:9f:eb: 83:5b:16:83:df:b3:56:d6:c1:88:6e:a5:47:30:17: a1:e4:73:41:41:b6:c8:73:8f:df:bf:56:c5:7b:61: 6c:42:37:b2:9e:60:a5:d2:6e:72:17:ab:42:46:27: 13:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:02:C7:2F:50:18:4E:D7:04:2E:C1:12:E5:18:A3:5B:5D:CF:03:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5e2732f-5014-363b-829e-9372ca76347c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:7c:71:e1:da:7f:0b:d8:80:d2:08:54:b7:bb:70:e8:36:e3: 72:40:a6:79:6a:c9:2c:3f:25:43:4b:6e:5a:e7:55:a9:f3:34: 71:29:f1:6e:75:31:6a:c8:78:4c:cd:b4:ae:4c:53:e5:67:3b: f5:9c:b2:ba:b4:49:45:69:e3:86:dd:e7:0c:91:1d:a6:c4:22: 81:5f:a4:b0:65:e5:9b:60:11:ca:07:35:5a:cc:11:38:cd:32: 79:27:89:af:66:40:0b:06:cf:2b:04:65:5b:c4:0d:e9:b6:ee: f5:8d:3d:ab:e0:1a:cd:89:cd:0f:6a:94:f0:5a:0f:a9:59:f3: 9e:c3:7c:47:96:61:ab:a8:cc:79:dc:f6:dd:e9:2d:3b:46:7f: 42:48:78:11:a5:ed:d8:83:8f:60:88:25:bc:55:a9:4a:de:d3: ad:04:59:dc:5b:01:11:3e:75:85:85:28:ed:ef:d6:37:83:6a: bc:32:0c:e1:4c:90:df:29:83:9c:51:ec:23:85:eb:84:87:96: 94:29:c1:ef:03:eb:6a:bf:33:a7:d3:b6:75:19:cb:83:06:f7: ca:04:b4:9b:9c:19:28:e9:6e:79:70:de:f4:36:45:44:47:6a: 14:37:8d:e6:1b:2a:ac:3f:ca:0d:33:57:18:50:a9:30:24:0d: 01:52:bc:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey9IvxZMNV/RptIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MTU2NzZhYzItODFmNy00ZWQxLTkyN2UtNDY0MTE2ZTcyMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7fcG7saabP2byzr7MrErdan6s/ofV8V+Ilb 2LyQZVC6xoSnT6mMoPSIWPY+Fgu34Rj1roHyWZyAdcBm9PqGJViNB3K3esjqgZb6 rWfsmqONfag2dC8+24Rs5J4GyWdsG9a9YEbksMs/VLZJLYSnlA8KbRBN1nSUTT69 hJfGA/P4FTJxObgnlupaBl6SD1+OF1ylyBc0cf78R3MUkkHKk3f2VMTYP++6WFYc Y1jX4Rju7qaUnJ01KoyD6qpds0tEmnJw5Rg7y4DJa7upiaGan+uDWxaD37NW1sGI bqVHMBeh5HNBQbbIc4/fv1bFe2FsQjeynmCl0m5yF6tCRicTKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKECxy9QGE7XBC7BEuUYo1tdzwOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjVlMjczMmYtNTAxNC0z NjNiLTgyOWUtOTM3MmNhNzYzNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt8ceHafwvYgNIIVLe7cOg243JApnlqySw/JUNLblrnVanzNHEp8W51 MWrIeEzNtK5MU+VnO/Wcsrq0SUVp44bd5wyRHabEIoFfpLBl5ZtgEcoHNVrMETjN Mnknia9mQAsGzysEZVvEDem27vWNPavgGs2JzQ9qlPBaD6lZ857DfEeWYauozHnc 9t3pLTtGf0JIeBGl7diDj2CIJbxVqUre060EWdxbARE+dYWFKO3v1jeDarwyDOFM kN8pg5xR7COF64SHlpQpwe8D62q/M6fTtnUZy4MG98oEtJucGSjpbnlw3vQ2RURH ahQ3jeYbKqw/yg0zVxhQqTAkDQFSvAg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:33:38 2025 by rpki-client