$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa File: 2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa (raw, json) Hash identifier: 8+dFPZB8yvME7x61ZveFQe3jEHgYTYzAJJ8WSxTzvxE= Subject key identifier: 0F:79:12:B5:34:EA:E8:CE:8F:85:90:A3:7C:EB:9A:6F:42:0D:74:B1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848EA91F8E5CD13E7EFB95A7980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa Signing time: Mon 17 Feb 2025 20:40:09 +0000 ROA not before: Mon 17 Feb 2025 20:40:09 +0000 ROA not after: Sun 18 May 2025 19:40:09 +0000 asID: 15169 IP address blocks: 172.217.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ea:91:f8:e5:cd:13:e7:ef:b9:5a:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 17 20:40:09 2025 GMT Not After : May 18 19:40:09 2025 GMT Subject: CN=fb87d6a6-4b9c-4e0d-8dc7-5fef99015790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:8e:8c:7c:27:a9:d6:e9:38:a5:d6:08:7d: ab:81:fb:d2:82:97:c3:f8:77:7e:a9:54:46:8e:e8: ec:8d:ea:63:09:42:66:c0:c6:c5:51:a5:10:39:81: 24:30:70:be:4d:88:2d:f6:60:95:f5:13:dc:4c:51: 24:a2:54:e5:80:64:99:30:33:eb:71:6a:b2:c5:7b: ac:30:9a:21:3b:c0:cc:91:3e:82:fd:b1:39:bb:b6: 04:d8:3b:2b:6b:78:61:32:9c:16:8b:34:46:2d:ad: 19:01:04:bc:1d:ac:0a:f9:b4:3f:f3:a8:38:23:ef: 0e:8a:dc:9f:13:65:d2:6d:d5:d8:09:49:f2:02:03: b3:f7:d4:b6:ad:0f:a5:36:0f:53:7a:e2:d8:7e:f2: 82:07:4f:6b:9c:0d:f3:a3:c5:09:3d:9a:17:bf:84: c9:42:b1:4e:98:73:c3:3a:4f:51:4b:ee:7c:4c:5c: e8:73:5a:70:04:a4:ec:be:35:ea:e5:aa:e6:3a:4c: 78:4d:d8:38:b8:2c:12:58:71:dc:bb:78:21:40:a9: fe:7a:51:ef:ff:0e:1b:ba:06:01:e9:51:f0:67:88: 6d:7e:61:02:19:11:c2:fc:bc:e2:df:c2:74:ac:ec: cc:1d:58:84:c3:f9:3d:34:4d:ec:ef:0e:b6:55:7a: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:79:12:B5:34:EA:E8:CE:8F:85:90:A3:7C:EB:9A:6F:42:0D:74:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:93:bd:41:36:be:5e:7f:2e:5a:49:d8:47:79:e3:c9:3b:14: 31:bd:03:05:46:0b:e8:59:b0:04:77:57:d9:f2:d9:66:07:3b: 3a:7d:2f:9e:b5:18:c5:d1:41:7f:18:da:e6:be:2c:bd:ac:61: 0e:55:36:12:4b:e0:71:7a:bf:03:b7:b4:88:52:65:7c:0c:5f: be:d1:b1:1c:29:ff:7c:e4:37:f5:1b:3b:08:43:2f:c2:43:36: aa:d0:ed:b8:00:5b:2f:8c:08:fc:d6:d3:64:cb:bc:bf:be:c1: 27:02:a7:85:4d:90:04:54:06:cb:00:68:34:bf:7c:f4:7c:64: 21:13:a2:55:aa:92:2e:4f:e8:42:38:2e:c9:c3:97:6b:ca:b5: 02:7a:f1:c8:e5:d4:00:72:d1:01:c1:3c:16:05:fa:9e:07:5a: a7:da:a4:44:51:35:21:05:08:4b:a4:d5:5d:77:b1:f0:b3:62: 19:7e:db:b0:3f:5d:bc:da:13:e2:3e:3c:60:c1:9b:a8:e1:a5: 9a:9e:c9:e9:9c:87:7f:ec:e3:63:51:a3:c0:dd:78:0b:74:e6: d8:56:54:3b:8b:57:49:f5:13:4f:49:76:11:47:cb:04:31:29: f2:53:b3:4f:fe:4d:92:6d:a8:47:1a:b8:67:01:e8:a1:00:db: 14:f8:f3:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjqkfjlzRPn77laeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxNzIwNDAwOVoXDTI1MDUxODE5NDAwOVowLzEtMCsGA1UEAxMk ZmI4N2Q2YTYtNGI5Yy00ZTBkLThkYzctNWZlZjk5MDE1NzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsOOjHwnqdbpOKXWCH2rgfvSgpfD+Hd+qVRG jujsjepjCUJmwMbFUaUQOYEkMHC+TYgt9mCV9RPcTFEkolTlgGSZMDPrcWqyxXus MJohO8DMkT6C/bE5u7YE2Dsra3hhMpwWizRGLa0ZAQS8HawK+bQ/86g4I+8Oityf E2XSbdXYCUnyAgOz99S2rQ+lNg9TeuLYfvKCB09rnA3zo8UJPZoXv4TJQrFOmHPD Ok9RS+58TFzoc1pwBKTsvjXq5armOkx4Tdg4uCwSWHHcu3ghQKn+elHv/w4bugYB 6VHwZ4htfmECGRHC/Lzi38J0rOzMHViEw/k9NE3s7w62VXodywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA95ErU06ujOj4WQo3zrmm9CDXSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmVlYTVlNDMtNGEyNy0z OTI4LTlhNmItZmJiNWNmMjMwODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeTvUE2vl5/LlpJ2Ed548k7FDG9AwVGC+hZsAR3V9ny2WYHOzp9L561 GMXRQX8Y2ua+LL2sYQ5VNhJL4HF6vwO3tIhSZXwMX77RsRwp/3zkN/UbOwhDL8JD NqrQ7bgAWy+MCPzW02TLvL++wScCp4VNkARUBssAaDS/fPR8ZCETolWqki5P6EI4 LsnDl2vKtQJ68cjl1ABy0QHBPBYF+p4HWqfapERRNSEFCEuk1V13sfCzYhl+27A/ XbzaE+I+PGDBm6jhpZqeyemch3/s42NRo8DdeAt05thWVDuLV0n1E09JdhFHywQx KfJTs0/+TZJtqEcauGcB6KEA2xT487U= -----END CERTIFICATE-----Generated at Sun May 4 10:40:10 2025 by rpki-client