$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa File: 311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa (raw, json) Hash identifier: wWZgq1RTRxnBQVToTxOBqxTAXK7GLxw6uHIaK9DsCLE= Subject key identifier: 5B:CC:83:EC:ED:90:4E:89:8B:84:89:FD:50:83:AF:0A:3C:98:0B:68 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB607D1F2A5F2BC6278400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:60:7d:1f:2a:5f:2b:c6:27:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4d37be74-4a11-4d89-b5fc-6e730955380c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:0f:3b:06:54:82:22:fc:1c:fc:78:07:8b: cd:03:de:2e:99:77:5c:18:0b:12:9f:bb:53:d3:7c: d0:7d:dc:51:12:b5:63:28:9f:59:f2:71:94:54:6c: fe:e3:a7:71:4c:3e:89:87:93:66:39:02:4d:eb:95: 66:c2:85:0b:cd:0d:d6:31:ca:62:7f:a0:24:ab:cd: eb:6f:bb:0f:b2:63:b1:38:ef:de:a8:6a:1a:b0:dd: 18:b5:50:36:1f:54:56:03:43:5f:cc:fe:02:13:d6: 15:d5:0d:56:da:1b:71:98:e3:82:3a:fe:96:6c:29: 41:a4:a5:8f:8d:cb:d6:d5:2c:ad:81:72:4e:54:26: ba:38:b6:f3:2d:17:3b:88:e8:f0:59:fa:b7:6d:f8: c4:04:57:66:b5:7d:60:fb:36:5b:c8:57:f9:21:25: 21:88:d5:bf:10:a8:58:e4:cc:6d:d4:4f:da:87:f0: f4:4e:4d:32:14:f5:f6:2d:4f:d7:14:b2:7c:b6:a1: a9:7b:f7:fd:a8:8d:39:02:ec:a9:07:7c:f1:29:60: 15:f4:e6:45:ea:fd:04:09:b0:0a:6e:b5:92:41:ea: a0:f5:f7:46:d3:0c:18:2d:86:a1:9d:44:f8:0e:e0: 22:62:82:ed:18:d1:8b:3a:e6:57:ec:10:7e:67:b0: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CC:83:EC:ED:90:4E:89:8B:84:89:FD:50:83:AF:0A:3C:98:0B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e7:d4:f4:3d:0d:ef:40:78:f8:29:60:cc:92:0c:c3:dc:a4: dc:9d:7a:79:37:2d:33:59:a3:a3:92:ba:c7:e9:77:32:ed:53: ae:24:82:89:2c:65:9a:3e:f6:c8:0c:e4:3b:d6:d2:4f:ff:4d: c3:c0:dc:5d:d0:59:24:c2:8c:d4:52:3c:70:ec:73:e5:f5:2c: 8a:d2:9e:34:6e:ff:e3:12:6b:e8:cf:17:82:ea:66:5b:d5:fa: 74:74:66:30:36:3f:0e:f9:2d:84:65:47:bd:ca:f3:c4:27:88: a7:cb:57:67:32:0f:1c:42:20:69:9f:7f:76:28:94:77:3d:37: ee:f5:cb:b5:ce:57:cf:a1:b7:06:20:b8:fd:6b:bd:94:8c:b4: 65:ac:ee:92:a6:b9:91:3a:33:2b:cf:cd:e8:63:31:f7:dc:af: 2f:33:ea:a4:91:1b:d4:4b:ef:9b:d8:d5:18:e9:a6:df:a7:ce: 90:a8:03:2a:f9:ea:bb:1c:ce:89:90:dc:74:db:f2:40:12:22: 5f:5f:65:e9:bf:53:7e:17:42:39:71:16:f2:ef:af:54:fd:18: 93:bb:81:13:d9:f8:2d:51:78:92:72:c2:fb:69:37:1e:dd:5e: 0a:60:74:27:c7:07:c2:29:dc:30:78:d6:7a:06:15:14:03:7f: ab:89:86:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2B9HypfK8YnhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGQzN2JlNzQtNGExMS00ZDg5LWI1ZmMtNmU3MzA5NTUzODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEgPOwZUgiL8HPx4B4vNA94umXdcGAsSn7tT 03zQfdxRErVjKJ9Z8nGUVGz+46dxTD6Jh5NmOQJN65VmwoULzQ3WMcpif6Akq83r b7sPsmOxOO/eqGoasN0YtVA2H1RWA0NfzP4CE9YV1Q1W2htxmOOCOv6WbClBpKWP jcvW1SytgXJOVCa6OLbzLRc7iOjwWfq3bfjEBFdmtX1g+zZbyFf5ISUhiNW/EKhY 5Mxt1E/ah/D0Tk0yFPX2LU/XFLJ8tqGpe/f9qI05AuypB3zxKWAV9OZF6v0ECbAK brWSQeqg9fdG0wwYLYahnUT4DuAiYoLtGNGLOuZX7BB+Z7BGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvMg+ztkE6Ji4SJ/VCDrwo8mAtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzExZWRkMzQtYzIxZS0z NmE3LWE2Y2ItMmZlNGNiNjNkNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfn1PQ9De9AePgpYMySDMPcpNydenk3LTNZo6OSusfpdzLtU64kgoks ZZo+9sgM5DvW0k//TcPA3F3QWSTCjNRSPHDsc+X1LIrSnjRu/+MSa+jPF4LqZlvV +nR0ZjA2Pw75LYRlR73K88QniKfLV2cyDxxCIGmff3YolHc9N+71y7XOV8+htwYg uP1rvZSMtGWs7pKmuZE6MyvPzehjMffcry8z6qSRG9RL75vY1Rjppt+nzpCoAyr5 6rsczomQ3HTb8kASIl9fZem/U34XQjlxFvLvr1T9GJO7gRPZ+C1ReJJywvtpNx7d XgpgdCfHB8Ip3DB41noGFRQDf6uJhkU= -----END CERTIFICATE-----Generated at Sun May 4 10:28:00 2025 by rpki-client