$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa File: 71ae16c5-d31e-3798-a172-6d1d107c2749.roa (raw, json) Hash identifier: BrtbLYXnK9fgcQaIg2eFOqVJqKs0OwZqVvrYNm0FSZw= Subject key identifier: 7E:7C:21:FA:B0:55:4B:3E:F8:D2:78:83:47:A5:A8:70:8A:71:55:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD2EB7AD11728DEAD1400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d2:eb:7a:d1:17:28:de:ad:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=acebc653-8e94-4495-9b53-59af38053299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:62:1a:e3:6e:49:42:54:83:85:46:80:47: 20:df:de:ad:b4:d0:49:91:f0:f8:0c:62:61:14:56: 24:cc:1f:a7:d6:48:f9:51:be:0f:24:c6:bc:c1:3d: 1a:78:2f:5b:5d:17:87:2b:7e:65:48:c4:1d:f0:56: cb:e2:1f:16:20:ca:46:0f:a2:18:25:a6:d6:0f:02: ac:fc:26:68:6f:54:db:f8:85:8e:3e:b3:ab:bc:e9: ad:c4:b6:9a:65:c2:4d:81:ec:f9:ac:02:96:fb:66: ae:d7:2b:4f:6e:9e:b1:81:8b:78:17:a8:ad:d6:3b: 07:be:b4:9c:75:38:79:62:ef:08:94:98:b0:ff:e2: 07:17:ea:37:e0:bf:4f:dc:56:45:43:20:39:06:a0: de:9c:85:c2:e7:bb:f7:5f:cc:c1:db:45:27:dd:22: 94:be:ec:dd:fc:72:63:fc:8e:13:26:52:3f:78:a1: e3:cd:4c:99:c2:83:8b:a0:ae:a6:e6:71:16:50:3c: aa:b5:b9:e2:02:2b:48:c1:bc:2c:61:eb:a0:f7:d2: 9a:01:40:c0:82:d7:9a:4a:d3:66:c2:82:a7:fa:67: 41:f2:fe:52:40:aa:77:7c:a6:a8:10:ef:2c:4f:6b: 0b:3e:48:b3:64:54:b1:c8:5e:21:dc:c6:e9:be:84: 4f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7C:21:FA:B0:55:4B:3E:F8:D2:78:83:47:A5:A8:70:8A:71:55:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:68:ec:cc:bf:81:66:06:93:9d:17:f6:63:e1:39:9c:09:34: 8f:b1:5d:bb:ba:c4:42:cf:34:8b:c3:8c:d3:7b:4b:b5:03:99: a2:63:5e:59:e1:46:cf:51:fe:03:d7:eb:43:96:fd:31:19:5f: 07:24:06:fe:33:5a:1d:ac:c9:01:30:92:47:af:52:56:3a:f6: 31:e6:11:29:43:00:58:b5:a0:73:11:c8:be:9f:aa:ca:4c:41: b5:78:d8:3b:cb:60:83:1a:e0:32:8b:b4:c6:a2:f2:09:2d:bd: 72:a2:ed:79:25:8c:f8:29:14:c2:6f:9e:5f:59:19:85:88:40: 7c:28:69:29:58:a5:de:65:e5:b8:2a:55:6e:42:d9:06:17:55: 59:d1:22:95:0b:7a:9e:bb:fd:bc:15:e3:13:9e:61:7f:6a:5e: 2b:f3:9a:c0:8d:91:db:be:6a:b4:a3:6d:46:f5:89:27:a9:67: a2:f9:10:48:04:d1:0d:c5:99:2b:31:27:ca:37:99:3c:59:7e: a3:3e:dd:62:c0:bc:a9:ae:15:c2:48:ae:b3:21:47:3a:30:3d: 09:24:ca:8b:f7:21:c2:a2:8c:ed:bf:20:0e:ee:c0:03:81:0c: c1:45:f8:ad:6f:a7:45:3f:b8:ac:61:fa:6e:19:98:ed:cc:93: 9f:94:f7:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutLretEXKN6tFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWNlYmM2NTMtOGU5NC00NDk1LTliNTMtNTlhZjM4MDUzMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf1iGuNuSUJUg4VGgEcg396ttNBJkfD4DGJh FFYkzB+n1kj5Ub4PJMa8wT0aeC9bXReHK35lSMQd8FbL4h8WIMpGD6IYJabWDwKs /CZob1Tb+IWOPrOrvOmtxLaaZcJNgez5rAKW+2au1ytPbp6xgYt4F6it1jsHvrSc dTh5Yu8IlJiw/+IHF+o34L9P3FZFQyA5BqDenIXC57v3X8zB20Un3SKUvuzd/HJj /I4TJlI/eKHjzUyZwoOLoK6m5nEWUDyqtbniAitIwbwsYeug99KaAUDAgteaStNm woKn+mdB8v5SQKp3fKaoEO8sT2sLPkizZFSxyF4h3MbpvoRPtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH58IfqwVUs++NJ4g0elqHCKcVW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzFhZTE2YzUtZDMxZS0z Nzk4LWExNzItNmQxZDEwN2MyNzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9o7My/gWYGk50X9mPhOZwJNI+xXbu6xELPNIvDjNN7S7UDmaJjXlnh Rs9R/gPX60OW/TEZXwckBv4zWh2syQEwkkevUlY69jHmESlDAFi1oHMRyL6fqspM QbV42DvLYIMa4DKLtMai8gktvXKi7XkljPgpFMJvnl9ZGYWIQHwoaSlYpd5l5bgq VW5C2QYXVVnRIpULep67/bwV4xOeYX9qXivzmsCNkdu+arSjbUb1iSepZ6L5EEgE 0Q3FmSsxJ8o3mTxZfqM+3WLAvKmuFcJIrrMhRzowPQkkyov3IcKijO2/IA7uwAOB DMFF+K1vp0U/uKxh+m4ZmO3Mk5+U94o= -----END CERTIFICATE-----Generated at Sun May 4 11:48:35 2025 by rpki-client