$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa File: 17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa (raw, json) Hash identifier: eK1RjbxRdDbJnL5sheVE2SkBCIfOXyYo2xzjtgWzQdw= Subject key identifier: AF:45:AE:84:20:7C:FF:2C:15:79:09:FB:97:AC:FF:38:5B:EF:92:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849B57A245BADE9E1A3A4F9DA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 15169 IP address blocks: 172.217.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:24:5b:ad:e9:e1:a3:a4:f9:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=f26e040a-bdb7-4a9d-83e2-bf344217ea8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:6c:04:49:06:33:63:5c:17:2c:27:fd:21: 7e:29:37:6d:31:30:f6:11:8d:ad:01:cb:fa:77:a6: b5:08:21:b7:66:d9:cc:2b:32:0e:71:42:6c:ae:42: d0:7b:fc:02:e5:c0:ed:7f:37:94:fb:21:db:51:f7: 48:40:65:63:38:96:33:40:1c:e0:9a:22:b3:18:b4: a9:66:0d:d0:c9:ec:ab:20:ea:e2:7f:2b:92:12:ad: df:e9:a2:43:fb:40:06:43:a4:9e:dd:69:0b:07:95: f2:7d:cb:09:f6:76:da:7e:1d:b7:ef:95:c9:4f:69: f5:61:20:26:98:a5:a5:1c:14:4c:d5:01:b5:ab:b9: a4:46:70:70:5e:68:4a:e4:2e:27:96:d1:37:cb:b5: b4:b5:32:a3:a3:89:30:d5:18:8d:e7:f8:3e:f0:9b: d3:0a:8f:cc:4f:99:cd:3e:14:5f:93:f4:8d:4f:0c: 75:89:ba:4a:b1:24:0d:4a:78:ee:9f:47:24:68:82: c3:6b:ac:d0:7e:73:e6:a3:62:19:da:78:5d:5f:9b: bc:0a:ca:16:ba:6a:4b:4b:ff:2b:be:37:de:f9:7d: 75:b9:29:13:ce:bc:70:b5:7b:b6:04:9a:51:e4:82: 10:80:fa:33:cf:4a:43:1a:c0:7c:82:7d:fb:a8:73: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:45:AE:84:20:7C:FF:2C:15:79:09:FB:97:AC:FF:38:5B:EF:92:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:16:dc:26:c0:60:f9:b0:0a:22:2e:17:9e:88:e0:f0:8d:81: 05:28:38:b4:a6:b7:95:c8:e8:f2:69:a7:38:95:d4:6b:58:c6: 39:d2:bc:3f:e2:83:15:7e:d3:f3:f7:7d:47:76:26:42:3f:36: fc:7e:67:f3:b3:16:44:52:f1:9b:81:72:00:52:18:47:6a:ef: 85:b1:8e:8a:da:4b:76:31:b4:ba:93:3e:25:3e:45:d1:c1:21: 9f:5c:9a:dc:3a:05:17:7c:0f:c4:90:11:27:ff:f8:5f:2d:c0: c5:a4:c2:b2:ce:cf:7e:95:67:96:e7:66:06:42:bb:40:24:0a: 77:f3:71:3e:2e:ce:0f:72:d3:4f:25:55:24:8c:a0:9d:fe:cb: 1c:1c:b9:a0:ce:51:f5:3c:87:bb:f2:7e:eb:b4:d9:0c:e6:9c: 4d:d3:2c:02:a3:08:9b:1b:f0:4c:00:41:f2:a4:5d:60:b1:03: 2f:a1:1d:72:50:75:9d:3f:e5:a5:ca:b8:59:4a:12:d1:e7:d4: af:1c:c7:47:92:95:40:e3:37:03:a8:67:19:9a:a1:f2:29:16: 45:96:1b:3e:1d:3c:b2:49:a4:b6:b8:9e:ac:e4:57:ce:33:6e: 60:67:6d:ac:75:fc:77:61:86:8c:e7:11:78:7a:a1:8d:a8:19: 70:02:18:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eiRbrenho6T52gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk ZjI2ZTA0MGEtYmRiNy00YTlkLTgzZTItYmYzNDQyMTdlYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCpsBEkGM2NcFywn/SF+KTdtMTD2EY2tAcv6 d6a1CCG3ZtnMKzIOcUJsrkLQe/wC5cDtfzeU+yHbUfdIQGVjOJYzQBzgmiKzGLSp Zg3QyeyrIOrifyuSEq3f6aJD+0AGQ6Se3WkLB5XyfcsJ9nbafh2375XJT2n1YSAm mKWlHBRM1QG1q7mkRnBwXmhK5C4nltE3y7W0tTKjo4kw1RiN5/g+8JvTCo/MT5nN PhRfk/SNTwx1ibpKsSQNSnjun0ckaILDa6zQfnPmo2IZ2nhdX5u8CsoWumpLS/8r vjfe+X11uSkTzrxwtXu2BJpR5IIQgPozz0pDGsB8gn37qHNJrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9FroQgfP8sFXkJ+5es/zhb75JLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTdjZDA3MTEtM2JkNC0z ZTA3LThlNmEtYTVmMDRlYjUwZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoW3CbAYPmwCiIuF56I4PCNgQUoOLSmt5XI6PJppziV1GtYxjnSvD/i gxV+0/P3fUd2JkI/Nvx+Z/OzFkRS8ZuBcgBSGEdq74WxjoraS3YxtLqTPiU+RdHB IZ9cmtw6BRd8D8SQESf/+F8twMWkwrLOz36VZ5bnZgZCu0AkCnfzcT4uzg9y008l VSSMoJ3+yxwcuaDOUfU8h7vyfuu02QzmnE3TLAKjCJsb8EwAQfKkXWCxAy+hHXJQ dZ0/5aXKuFlKEtHn1K8cx0eSlUDjNwOoZxmaofIpFkWWGz4dPLJJpLa4nqzkV84z bmBnbax1/HdhhoznEXh6oY2oGXACGJk= -----END CERTIFICATE-----Generated at Sun May 4 10:30:56 2025 by rpki-client