$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa File: 452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa (raw, json) Hash identifier: UKxYokSHfuWzrRl1fBkwgEE3r96RoPbVhuJxuA1EZEk= Subject key identifier: 16:1E:8E:5B:38:28:78:9F:07:24:53:80:77:E0:F8:EE:19:0E:5B:42 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5D2E5B7198806A5B9B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5d:2e:5b:71:98:80:6a:5b:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3ffdfc71-0277-443b-acb0-353b6a0758f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:67:59:a3:1e:4c:06:b3:c6:f5:d1:29:3a: 7a:70:b2:b9:14:1d:db:2e:23:38:f8:a1:cb:2a:7d: e2:20:7b:86:95:44:a4:d2:81:ba:47:ce:aa:29:e4: 10:dd:47:00:a9:29:01:cf:90:ea:c1:d1:23:d0:73: ae:2e:f2:d6:e1:ad:44:25:5d:f7:55:6d:95:f2:01: 05:f4:b5:ba:85:b5:21:a8:1d:1e:27:8b:77:24:29: 2c:f0:95:62:18:f1:0f:c5:65:ef:72:c1:a2:4b:67: 77:e7:2b:9e:d1:f8:cb:e2:bf:0c:c9:dc:0d:ea:9b: 00:74:fb:2b:0d:65:36:9f:ec:c9:22:a3:4c:ae:db: d4:b0:85:79:6a:2c:0c:43:1e:0f:c2:d3:a0:74:85: 88:dd:2d:7c:c2:02:32:1c:56:f3:5b:0b:6c:0d:58: e1:7f:9b:05:3a:39:25:e1:14:76:1d:05:26:97:ca: e0:b7:69:b5:11:28:de:f3:64:8b:ab:bb:c7:9e:ce: 69:6b:0e:56:78:d4:3d:33:08:94:9e:38:2c:d8:a7: 5a:98:1c:38:b8:2c:12:ce:79:ff:1a:24:8e:13:68: 0b:e7:b6:51:26:9b:e1:99:2f:19:ce:2b:30:ea:37: e9:63:67:42:04:07:5d:96:35:60:bc:36:56:07:fe: f2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1E:8E:5B:38:28:78:9F:07:24:53:80:77:E0:F8:EE:19:0E:5B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e2:9a:82:d4:0e:94:e8:0b:5f:2d:d6:10:e8:72:9f:67:7e: 17:c4:8f:17:df:21:63:aa:ea:c4:49:f7:10:ab:4e:22:95:0d: 7e:df:0d:4d:76:0d:d8:62:02:b9:a3:64:28:b4:2a:7e:0e:d1: 4a:1b:99:cd:b1:e3:6f:0c:61:34:f5:53:4f:d2:2d:66:bf:67: ea:24:55:0a:dc:26:d2:11:d8:79:97:d2:05:d0:3c:fc:f7:6d: 89:f1:62:e3:1e:26:36:8d:96:7b:67:fd:3d:ce:ef:f2:61:d3: fd:eb:41:33:e0:77:54:c3:1e:79:6d:8a:c0:aa:28:b8:79:dd: 21:81:b2:89:39:f7:39:44:f9:98:a3:f0:85:90:92:03:da:2b: 45:5b:f5:30:e5:d8:86:e0:25:8c:dd:f9:f4:77:1f:91:70:5c: 7a:ce:b2:67:30:80:b8:12:90:a0:07:8d:c6:55:b3:7e:00:e7: c8:bc:22:b2:d9:49:9a:9c:ae:29:4f:01:db:48:b5:df:02:cf: 25:6a:a5:75:6e:68:ba:e4:ff:3e:0d:b5:86:e5:85:39:3d:2a: ec:81:38:b1:af:ff:61:5e:e1:61:ab:0e:a0:8c:7a:de:21:64: 80:a6:60:43:94:86:7f:0e:a9:aa:d7:58:e6:65:21:dc:d1:de: 4c:ca:ea:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku10uW3GYgGpbmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2ZmZGZjNzEtMDI3Ny00NDNiLWFjYjAtMzUzYjZhMDc1OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneZnWaMeTAazxvXRKTp6cLK5FB3bLiM4+KHL Kn3iIHuGlUSk0oG6R86qKeQQ3UcAqSkBz5DqwdEj0HOuLvLW4a1EJV33VW2V8gEF 9LW6hbUhqB0eJ4t3JCks8JViGPEPxWXvcsGiS2d35yue0fjL4r8MydwN6psAdPsr DWU2n+zJIqNMrtvUsIV5aiwMQx4PwtOgdIWI3S18wgIyHFbzWwtsDVjhf5sFOjkl 4RR2HQUml8rgt2m1ESje82SLq7vHns5paw5WeNQ9MwiUnjgs2KdamBw4uCwSznn/ GiSOE2gL57ZRJpvhmS8Zzisw6jfpY2dCBAddljVgvDZWB/7yFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYejls4KHifByRTgHfg+O4ZDltCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDUyMDg1YjgtZGRmZS0z MzE2LWFjMmUtZjcyOWQ2ZTNmMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnimoLUDpToC18t1hDocp9nfhfEjxffIWOq6sRJ9xCrTiKVDX7fDU12 DdhiArmjZCi0Kn4O0Uobmc2x428MYTT1U0/SLWa/Z+okVQrcJtIR2HmX0gXQPPz3 bYnxYuMeJjaNlntn/T3O7/Jh0/3rQTPgd1TDHnltisCqKLh53SGBsok59zlE+Zij 8IWQkgPaK0Vb9TDl2IbgJYzd+fR3H5FwXHrOsmcwgLgSkKAHjcZVs34A58i8IrLZ SZqcrilPAdtItd8CzyVqpXVuaLrk/z4NtYblhTk9KuyBOLGv/2Fe4WGrDqCMet4h ZICmYEOUhn8OqarXWOZlIdzR3kzK6gI= -----END CERTIFICATE-----Generated at Sun May 4 10:30:55 2025 by rpki-client