$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa File: 1b60dea6-b796-375b-92fa-3d1691aacc51.roa (raw, json) Hash identifier: X8YgDyJECpS1Qm5px8Tix1J+63J0Q0YMvhzoDrXDgPA= Subject key identifier: 06:E2:E8:18:F6:A5:87:41:1D:3E:7F:1C:1B:47:FA:CC:B2:3D:0D:AF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BB0F69FEE347DF52D6711700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 15169 IP address blocks: 172.217.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:69:fe:e3:47:df:52:d6:71:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=231d21dd-47aa-4594-9969-8b795dff0e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a8:c0:5d:e1:89:10:dc:3e:2c:bf:f6:4b:71: dc:18:b6:29:ac:13:1e:68:27:d1:3a:0b:81:38:30: 16:aa:a1:2c:2c:33:5f:81:15:7e:36:5c:e7:96:85: c0:0a:c0:d7:dc:87:6a:2b:59:9c:ac:55:10:49:1a: 05:f9:36:bd:a5:45:23:46:d0:bc:47:62:71:b1:82: ea:ea:4e:94:19:6e:f0:2f:75:87:e9:70:9f:54:bb: 95:8f:8a:69:21:b8:23:5a:1a:46:85:45:e7:bb:93: 83:0a:9b:60:18:3d:0f:38:39:7a:f6:41:2b:12:70: ca:b0:2e:4d:08:cd:38:85:da:99:95:7b:9f:84:26: 32:77:57:3b:f6:11:17:77:90:75:26:63:7a:4a:ca: 42:41:e1:36:51:77:a8:40:d0:be:46:3a:f2:c5:da: 62:a1:8f:7b:cc:0d:b5:d0:06:0e:9a:85:55:1e:57: ff:35:c1:ee:dc:11:30:32:aa:ed:d1:22:e4:23:6c: eb:f8:23:b7:f9:f6:e3:26:89:16:97:13:0a:eb:aa: 59:fc:52:40:f3:88:51:a5:b1:59:81:62:3e:3a:e7: 47:88:ba:38:70:f8:1a:dd:01:a3:62:d4:01:1b:92: 64:c1:34:4f:7a:d1:d3:36:b0:e2:22:16:f2:d7:75: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E2:E8:18:F6:A5:87:41:1D:3E:7F:1C:1B:47:FA:CC:B2:3D:0D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:25:b8:7e:d9:f6:09:bc:bf:f1:60:c6:7c:60:4f:52:12:07: c7:2b:b1:ad:80:1c:8e:7a:89:76:8e:10:52:46:90:1e:8b:8c: 00:2f:00:7f:86:08:f7:ac:17:04:58:1e:cb:d7:eb:cf:e6:1b: 35:8d:f3:cc:18:cb:93:19:db:d5:1f:61:52:a2:2c:b0:a7:ce: af:60:f8:30:9b:a0:af:b0:e5:c4:1d:df:dc:32:d3:a8:61:0e: b3:cf:3b:b5:7e:5b:59:39:75:ae:20:1f:b1:13:00:ed:00:98: af:0d:8f:65:fe:40:d7:dd:42:35:66:56:4e:a9:b6:24:e5:d4: 83:a3:ba:ea:f7:c2:6b:26:53:7a:7e:61:12:b7:ac:2c:d9:b4: 37:fb:e3:a7:b4:7a:2b:92:56:83:e6:12:06:96:19:49:29:bc: 2a:e2:9d:70:d5:a9:cf:0b:91:66:9f:4d:6d:cf:ec:7d:b1:c8: 9f:e0:31:1b:67:01:95:d8:e7:a4:99:56:69:78:5a:7d:12:ba: 26:71:b5:53:08:2c:6b:bb:c1:61:45:1e:8d:17:3e:f6:88:7b: 28:3e:5f:c3:bf:8c:0a:db:b3:8d:d4:ed:69:1d:bf:30:50:bf: d5:2b:c3:9a:bf:11:41:e4:3c:19:4a:49:5b:8b:c5:90:a4:72: cf:60:f7:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D2n+40ffUtZxFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk MjMxZDIxZGQtNDdhYS00NTk0LTk5NjktOGI3OTVkZmYwZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqjAXeGJENw+LL/2S3HcGLYprBMeaCfROguB ODAWqqEsLDNfgRV+NlznloXACsDX3IdqK1mcrFUQSRoF+Ta9pUUjRtC8R2JxsYLq 6k6UGW7wL3WH6XCfVLuVj4ppIbgjWhpGhUXnu5ODCptgGD0PODl69kErEnDKsC5N CM04hdqZlXufhCYyd1c79hEXd5B1JmN6SspCQeE2UXeoQNC+RjryxdpioY97zA21 0AYOmoVVHlf/NcHu3BEwMqrt0SLkI2zr+CO3+fbjJokWlxMK66pZ/FJA84hRpbFZ gWI+OudHiLo4cPga3QGjYtQBG5JkwTRPetHTNrDiIhby13XEfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbi6Bj2pYdBHT5/HBtH+syyPQ2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWI2MGRlYTYtYjc5Ni0z NzViLTkyZmEtM2QxNjkxYWFjYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQluH7Z9gm8v/FgxnxgT1ISB8crsa2AHI56iXaOEFJGkB6LjAAvAH+G CPesFwRYHsvX68/mGzWN88wYy5MZ29UfYVKiLLCnzq9g+DCboK+w5cQd39wy06hh DrPPO7V+W1k5da4gH7ETAO0AmK8Nj2X+QNfdQjVmVk6ptiTl1IOjuur3wmsmU3p+ YRK3rCzZtDf746e0eiuSVoPmEgaWGUkpvCrinXDVqc8LkWafTW3P7H2xyJ/gMRtn AZXY56SZVml4Wn0SuiZxtVMILGu7wWFFHo0XPvaIeyg+X8O/jArbs43U7WkdvzBQ v9Urw5q/EUHkPBlKSVuLxZCkcs9g9yM= -----END CERTIFICATE-----Generated at Sun May 4 11:04:50 2025 by rpki-client