$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa File: 2363796e-1a6a-3118-a421-6fa84d42857f.roa (raw, json) Hash identifier: eMoOH9Q8fr2Aubkcsvnhb4ig0/Ub/jVYaqh96AzbdAE= Subject key identifier: 1B:C0:A3:1A:96:E5:B1:88:FF:88:31:73:D9:6C:31:D2:03:F6:D5:18 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA388E602D3C60746C7300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:38:8e:60:2d:3c:60:74:6c:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=8adacedf-afb9-449f-8883-004585384b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:40:df:6e:ff:18:4b:ba:5e:c0:8e:ae:31: fb:89:9e:2d:65:ed:df:56:1c:89:51:03:79:ea:dc: 5d:81:d5:ef:b1:a3:27:34:c5:5e:28:a2:e2:82:b9: 25:fa:97:e2:35:05:1d:a0:10:0d:84:27:13:1a:b4: b0:05:cc:72:26:32:2c:54:df:77:60:da:15:97:45: 33:75:eb:4d:58:46:b1:b0:ee:d0:05:fa:c0:32:91: e9:ab:d4:b1:31:e1:70:1e:c0:85:95:ef:af:5c:ae: f9:48:c8:4b:4b:ae:89:9e:c1:05:2c:c8:c9:3a:80: e5:9d:61:f6:47:5c:33:f8:76:33:e2:29:95:c5:44: ff:52:c2:a0:bd:90:85:ee:5b:9b:49:a9:89:7c:43: c9:5c:0c:66:f0:e9:50:5b:d1:0a:05:39:db:10:f3: ca:4c:24:d8:d9:7e:9f:53:c7:0f:66:77:db:3f:b0: a4:d7:51:1e:5f:b1:47:14:66:4f:88:07:ab:e4:12: ca:bb:20:c8:9f:1e:67:c3:53:00:99:84:db:e7:ce: 93:bd:92:64:16:6e:d0:5c:c8:fe:6f:af:72:2f:0a: b3:3f:90:4a:96:48:82:43:2f:9d:74:14:d7:a5:a8: 2b:56:0c:d1:22:f4:3d:57:60:62:7e:b7:be:7f:3f: 16:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C0:A3:1A:96:E5:B1:88:FF:88:31:73:D9:6C:31:D2:03:F6:D5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:13:76:29:5e:06:61:4e:dc:16:9b:c8:62:bd:92:f1:b6:b6: 7a:e6:d0:a0:22:e9:4c:f8:89:97:e5:61:80:1f:33:43:45:3e: e7:22:d4:f0:7f:3d:12:4d:2f:7b:71:10:1e:b0:a5:b0:af:2c: 1f:c4:3e:4c:c3:c1:ac:a9:76:30:2e:54:e3:b8:79:05:ac:82: 49:ac:75:e5:b3:fe:a6:0c:42:af:06:f6:21:05:82:a7:1f:d0: 2d:6d:92:7a:e5:44:59:29:f4:a1:f1:ad:8b:e3:d3:08:e3:af: c6:8f:dc:2b:55:1c:ca:ab:6e:69:0d:78:8b:f0:87:0a:88:ef: 01:75:d6:6e:65:ee:2d:9f:68:24:65:34:6d:d5:eb:25:19:7f: bc:26:b2:7e:e2:36:02:91:e4:06:84:a3:13:2d:14:08:a1:e6: ab:94:d3:c4:d2:0f:d2:5a:b0:37:4c:bb:55:e1:c7:69:7f:f8: 51:f5:2d:cb:9c:26:29:6f:33:50:89:a8:1f:ae:db:aa:52:5c: 5f:8f:8c:e5:ed:85:05:39:09:e3:4c:84:5b:ff:d5:aa:21:2f: 31:74:65:2e:c1:47:7f:f3:c3:17:8c:6f:03:51:4c:4c:ea:fa: 9f:42:86:7a:e8:47:ac:58:ec:d8:81:a7:1b:e0:79:98:7c:a2: 49:e8:39:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jiOYC08YHRscwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk OGFkYWNlZGYtYWZiOS00NDlmLTg4ODMtMDA0NTg1Mzg0YjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg81A327/GEu6XsCOrjH7iZ4tZe3fVhyJUQN5 6txdgdXvsaMnNMVeKKLigrkl+pfiNQUdoBANhCcTGrSwBcxyJjIsVN93YNoVl0Uz detNWEaxsO7QBfrAMpHpq9SxMeFwHsCFle+vXK75SMhLS66JnsEFLMjJOoDlnWH2 R1wz+HYz4imVxUT/UsKgvZCF7lubSamJfEPJXAxm8OlQW9EKBTnbEPPKTCTY2X6f U8cPZnfbP7Ck11EeX7FHFGZPiAer5BLKuyDInx5nw1MAmYTb586TvZJkFm7QXMj+ b69yLwqzP5BKlkiCQy+ddBTXpagrVgzRIvQ9V2Bifre+fz8WbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvAoxqW5bGI/4gxc9lsMdID9tUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjM2Mzc5NmUtMWE2YS0z MTE4LWE0MjEtNmZhODRkNDI4NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHITdileBmFO3BabyGK9kvG2tnrm0KAi6Uz4iZflYYAfM0NFPuci1PB/ PRJNL3txEB6wpbCvLB/EPkzDwaypdjAuVOO4eQWsgkmsdeWz/qYMQq8G9iEFgqcf 0C1tknrlRFkp9KHxrYvj0wjjr8aP3CtVHMqrbmkNeIvwhwqI7wF11m5l7i2faCRl NG3V6yUZf7wmsn7iNgKR5AaEoxMtFAih5quU08TSD9JasDdMu1Xhx2l/+FH1Lcuc JilvM1CJqB+u26pSXF+PjOXthQU5CeNMhFv/1aohLzF0ZS7BR3/zwxeMbwNRTEzq +p9ChnroR6xY7NiBpxvgeZh8oknoObA= -----END CERTIFICATE-----Generated at Mon Jun 30 07:21:57 2025 by rpki-client