$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c2f479c-b069-3ee1-b689-f37a48d218f8.roa File: 7c2f479c-b069-3ee1-b689-f37a48d218f8.roa (raw, json) Hash identifier: ggRDVvy3Fjba8eCb/+tpa0NjDleJKHjbjuGrQX3Y7DE= Subject key identifier: A0:0F:6C:17:11:DE:87:39:01:D7:5C:DA:30:30:8D:BD:2E:55:D6:B0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6577975E2C336D506180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c2f479c-b069-3ee1-b689-f37a48d218f8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:65:77:97:5e:2c:33:6d:50:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=64481ea5-6364-47bc-a11e-04c8abdded4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:ab:ec:3f:90:ca:10:ff:8c:db:7c:b6:1f: 61:fa:98:c1:b7:a4:9a:2a:7a:c8:cc:13:3b:9d:6d: a4:95:02:28:f0:fd:3e:1d:e1:36:3e:f9:c6:f7:60: 07:09:5d:48:52:a6:66:48:ec:75:1f:39:8e:d6:23: b7:53:9d:19:d6:78:53:44:4c:26:18:e0:5c:b7:1c: e3:ad:28:13:bc:1d:b7:11:c7:a0:63:56:cb:96:fb: c6:b4:2b:32:3b:e6:bc:4d:45:10:c2:51:77:33:79: 97:f7:a4:6f:35:91:79:ff:1d:9f:50:fa:6d:bc:6e: ba:f6:18:28:24:a4:c1:42:95:2e:79:13:35:e7:de: 9c:a7:c4:95:07:a0:1b:28:17:ef:84:76:b9:14:38: f3:ec:13:39:76:ab:e6:4c:d0:36:b2:47:b9:e7:40: f9:47:a4:e2:60:5f:5e:9f:15:50:a1:76:de:e9:03: c2:f2:6a:e9:df:e9:2a:af:04:60:55:96:ad:05:82: c2:d5:87:6f:f8:cf:fb:8b:49:ea:18:1c:d4:32:ff: 31:2d:85:3f:58:4c:38:18:6b:7b:74:66:ac:04:eb: 67:ff:ac:e5:9b:4c:b3:fc:3c:06:28:7a:55:48:63: 2f:dd:af:c9:56:7f:aa:8e:9f:5c:4d:bb:4c:0c:06: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0F:6C:17:11:DE:87:39:01:D7:5C:DA:30:30:8D:BD:2E:55:D6:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c2f479c-b069-3ee1-b689-f37a48d218f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a5:0a:be:a0:75:65:7f:03:2e:08:a0:03:ae:55:64:c8:15: df:c1:ec:1d:cd:25:7f:d3:9c:ba:ed:00:74:af:6f:66:3b:30: b1:1f:1a:32:4b:d3:aa:3a:0a:f8:75:ab:c2:87:d2:84:9d:87: 3a:ef:13:81:2d:d1:7a:f6:84:07:5c:4d:99:1e:b8:30:26:82: ee:39:02:91:4b:3e:24:39:3d:2b:26:93:2c:c5:a5:90:d1:ea: e7:2e:4f:7c:93:90:be:09:c9:c8:8a:06:ba:bb:cf:3e:d8:6e: 72:4a:83:c1:ff:17:2f:6a:b4:8a:d6:f1:af:78:84:4c:32:33: 9d:53:73:f5:04:79:04:b8:2e:00:1f:f9:ac:16:10:4e:8f:c9: 9d:97:c3:02:94:72:12:bf:87:a1:98:af:ad:26:ee:24:63:30: d1:49:c2:5a:15:c7:85:19:62:0c:01:9b:6f:22:ff:1b:fc:dc: e1:0f:fa:14:5a:6a:ef:79:e7:67:e2:a1:c2:cc:ae:72:01:6b: 77:97:53:13:f8:fa:a3:ef:52:f0:1d:d2:88:79:e5:6f:b2:04: e7:ab:98:0a:78:04:82:39:1a:73:34:25:9e:c2:56:14:7d:28: 54:ac:4d:ab:35:b1:3e:c3:c2:78:62:f5:25:69:a5:6b:61:fb: 60:b0:1d:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2V3l14sM21QYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjQ0ODFlYTUtNjM2NC00N2JjLWExMWUtMDRjOGFiZGRlZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE2r7D+QyhD/jNt8th9h+pjBt6SaKnrIzBM7 nW2klQIo8P0+HeE2PvnG92AHCV1IUqZmSOx1HzmO1iO3U50Z1nhTREwmGOBctxzj rSgTvB23EcegY1bLlvvGtCsyO+a8TUUQwlF3M3mX96RvNZF5/x2fUPptvG669hgo JKTBQpUueRM1596cp8SVB6AbKBfvhHa5FDjz7BM5dqvmTNA2ske550D5R6TiYF9e nxVQoXbe6QPC8mrp3+kqrwRgVZatBYLC1Ydv+M/7i0nqGBzUMv8xLYU/WEw4GGt7 dGasBOtn/6zlm0yz/DwGKHpVSGMv3a/JVn+qjp9cTbtMDAbgqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAPbBcR3oc5Addc2jAwjb0uVdawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2MyZjQ3OWMtYjA2OS0z ZWUxLWI2ODktZjM3YTQ4ZDIxOGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmlCr6gdWV/Ay4IoAOuVWTIFd/B7B3NJX/TnLrtAHSvb2Y7MLEfGjJL 06o6Cvh1q8KH0oSdhzrvE4Et0Xr2hAdcTZkeuDAmgu45ApFLPiQ5PSsmkyzFpZDR 6ucuT3yTkL4JyciKBrq7zz7YbnJKg8H/Fy9qtIrW8a94hEwyM51Tc/UEeQS4LgAf +awWEE6PyZ2XwwKUchK/h6GYr60m7iRjMNFJwloVx4UZYgwBm28i/xv83OEP+hRa au9552fiocLMrnIBa3eXUxP4+qPvUvAd0oh55W+yBOermAp4BII5GnM0JZ7CVhR9 KFSsTas1sT7Dwnhi9SVppWth+2CwHfY= -----END CERTIFICATE-----Generated at Sun May 4 10:38:30 2025 by rpki-client