$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa File: 1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa (raw, json) Hash identifier: cjwf+ZYcICRUbwgZXiRb9X4oBdgIbV5EoT/eC5suBTo= Subject key identifier: 0C:66:AC:67:5A:15:FD:5A:ED:4B:DB:09:B8:E2:4D:E3:8F:2B:41:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD05843C71A5A8F9A7CA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d0:58:43:c7:1a:5a:8f:9a:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4797af80-638e-4d6d-9be7-aa4cac24480a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7e:fa:c3:17:3f:68:70:df:42:64:98:c5:02: 20:76:80:73:6a:ab:fc:6d:75:d9:9c:70:ac:50:e9: 83:21:cc:36:03:28:c5:06:26:f0:27:41:e1:9b:64: 09:c0:27:13:28:58:bd:c9:38:28:f6:b9:1c:2c:91: a7:1e:68:82:3d:27:cb:f2:23:71:ef:ee:7a:20:33: 7b:55:6c:3e:08:5c:f2:39:ce:f0:53:44:24:49:7b: 21:61:3d:4e:65:3b:0a:36:67:8d:73:1b:0b:92:91: dd:e4:d9:8e:07:38:7f:5b:3e:39:e1:ea:fc:5a:a6: 2d:44:15:0b:3a:6e:90:e0:97:e8:4a:0a:72:38:c3: 99:f8:b5:cb:0e:67:05:b0:87:95:99:11:4f:82:e9: de:18:57:bb:d3:26:74:7d:70:03:84:f5:df:5a:f2: 89:2a:91:ec:45:e4:0e:1e:6d:28:f4:7d:f2:ab:37: e8:23:e4:58:53:a4:eb:6b:5f:70:81:e8:04:56:85: f1:fc:62:b2:8e:68:7f:81:58:d9:de:8f:6e:ee:bf: 8f:c8:bf:b5:b3:d5:3f:22:ab:b3:12:5c:ed:3f:77: 2d:44:f8:bc:9d:e0:a3:cf:d1:f6:dc:94:39:b0:cd: c8:1a:7a:61:af:02:f8:cd:f6:40:fa:28:2b:52:7f: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:66:AC:67:5A:15:FD:5A:ED:4B:DB:09:B8:E2:4D:E3:8F:2B:41:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:65:b7:51:5d:9d:63:cc:f9:41:15:0b:ff:40:66:7e:75:8e: f7:47:44:21:a0:fc:35:59:78:c9:87:59:44:d3:c5:53:d3:59: 86:de:ee:63:5d:30:cc:1d:c7:e8:86:3b:c2:2b:a5:15:a8:24: 00:72:4f:7a:1a:36:b5:39:e7:18:84:c6:0e:75:9e:e5:5e:28: 91:6c:30:55:e8:80:35:d0:81:61:5a:e3:f9:85:ea:6c:ac:0f: 69:62:6f:3e:f6:cd:73:30:54:3a:25:52:d3:67:a5:b7:62:d9: d9:3d:71:ae:1b:c6:93:2a:80:ba:05:44:70:40:96:ed:33:7e: 57:dd:fa:b1:57:5f:ba:cc:25:aa:76:39:6e:52:74:55:04:78: de:45:f1:69:50:52:df:68:1f:30:e0:a2:ba:27:54:6d:d9:03: 7b:54:2d:7f:71:19:5b:09:e4:22:78:c7:3b:00:1a:68:de:dc: 12:73:0f:5d:79:d1:03:3b:f6:4a:1d:d2:05:41:c6:7b:6c:c9: 5c:76:1a:2c:1c:bb:f0:77:81:24:e5:d0:eb:e4:9f:82:44:9d: f4:42:5a:69:52:d9:ef:07:16:30:32:0c:8d:c8:48:87:63:64: 00:84:cc:7c:8f:cb:c6:06:ab:e3:08:dd:4e:26:4b:18:7a:82: c2:1b:82:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutBYQ8caWo+afKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDc5N2FmODAtNjM4ZS00ZDZkLTliZTctYWE0Y2FjMjQ0ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH76wxc/aHDfQmSYxQIgdoBzaqv8bXXZnHCs UOmDIcw2AyjFBibwJ0Hhm2QJwCcTKFi9yTgo9rkcLJGnHmiCPSfL8iNx7+56IDN7 VWw+CFzyOc7wU0QkSXshYT1OZTsKNmeNcxsLkpHd5NmOBzh/Wz454er8WqYtRBUL Om6Q4JfoSgpyOMOZ+LXLDmcFsIeVmRFPguneGFe70yZ0fXADhPXfWvKJKpHsReQO Hm0o9H3yqzfoI+RYU6Tra19wgegEVoXx/GKyjmh/gVjZ3o9u7r+PyL+1s9U/Iquz ElztP3ctRPi8neCjz9H23JQ5sM3IGnphrwL4zfZA+igrUn+S9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxmrGdaFf1a7UvbCbjiTeOPK0EMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTA5NWU0OGUtYWZhOC0z M2YyLWIwZTYtZmNhNmRmM2FjODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHllt1FdnWPM+UEVC/9AZn51jvdHRCGg/DVZeMmHWUTTxVPTWYbe7mNd MMwdx+iGO8IrpRWoJAByT3oaNrU55xiExg51nuVeKJFsMFXogDXQgWFa4/mF6mys D2libz72zXMwVDolUtNnpbdi2dk9ca4bxpMqgLoFRHBAlu0zflfd+rFXX7rMJap2 OW5SdFUEeN5F8WlQUt9oHzDgoronVG3ZA3tULX9xGVsJ5CJ4xzsAGmje3BJzD115 0QM79kod0gVBxntsyVx2Giwcu/B3gSTl0Ovkn4JEnfRCWmlS2e8HFjAyDI3ISIdj ZACEzHyPy8YGq+MI3U4mSxh6gsIbgsY= -----END CERTIFICATE-----Generated at Sun May 4 10:50:09 2025 by rpki-client