$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa File: 7c4bfe71-a264-378d-8208-efb0eb90221e.roa (raw, json) Hash identifier: IbBcbK+b8obozwG1O9QuJV1MB33c88ub7PTs4nYUlOo= Subject key identifier: B1:C2:B0:0A:FC:BD:28:6D:69:DA:D1:FE:1E:D6:8F:DA:8B:52:1F:CA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6BAA5144D3F6E9E6BB00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6b:aa:51:44:d3:f6:e9:e6:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=656eea6d-1ea5-40f5-919c-5fc31378b60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a1:39:c3:36:88:d0:aa:71:2b:bd:f7:2a:a8: 89:88:55:2e:4e:89:45:26:11:a1:49:48:f0:7a:b3: f0:c5:38:ce:51:40:38:95:4a:44:9b:80:df:27:03: 02:78:c6:ea:dc:13:70:42:7e:d6:80:2c:92:38:97: b5:c3:3d:a7:d1:be:b8:53:ee:dc:70:31:bc:c5:2d: 8f:8d:52:1d:ea:28:0b:f4:ab:1b:50:1a:75:42:cb: 19:f7:26:0b:57:24:d0:45:4c:42:94:75:76:80:f2: 2d:00:4a:b8:5e:ae:8f:62:a4:f0:fb:22:51:c6:ad: cf:ee:cf:f0:bb:f2:cc:44:9f:75:95:57:80:7f:f1: 9b:97:f2:9e:f5:50:11:fb:3d:64:dc:3c:36:a2:66: ad:d9:29:7b:ec:e1:46:e3:7e:4d:6f:81:cc:f6:75: 9b:de:22:29:9e:3f:65:56:e8:90:5f:9b:0e:c9:b0: 37:d4:ba:b0:73:32:ed:1e:b0:77:db:ce:1b:7b:d3: 5e:de:fe:40:51:c3:5b:08:8a:61:8c:2d:af:ca:ab: 8f:cd:4c:37:c8:ec:c1:c8:7b:5d:87:50:e2:47:a0: bb:df:57:8f:8a:66:b8:44:53:1a:8c:86:d9:f5:30: 06:e8:17:80:b6:5b:f8:d7:2f:39:33:74:cc:3d:28: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C2:B0:0A:FC:BD:28:6D:69:DA:D1:FE:1E:D6:8F:DA:8B:52:1F:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6a:7f:92:c3:f3:5e:31:9a:e2:33:19:4b:2b:a1:ee:76:62: da:49:ee:e1:e1:8b:5a:17:79:33:12:bf:de:e7:52:a9:39:20: d1:20:d1:b3:a4:10:24:e0:00:9c:5e:0f:22:50:b6:f8:76:0b: 07:54:d7:60:da:52:4d:b2:57:a1:39:c1:7d:41:d3:a5:27:87: 6a:66:c9:20:96:19:99:4d:97:07:e6:3b:60:df:ff:75:68:70: 25:1c:ba:7f:f6:dc:eb:96:1f:94:1d:81:76:2b:7a:1f:49:88: d8:8e:10:5b:e6:0e:3f:c9:98:9e:04:62:4c:a3:1b:76:9e:bb: 81:2d:a8:9d:e8:e2:ed:fa:fb:33:43:e8:2f:de:96:98:5b:5f: 03:e0:7c:2e:73:bb:d4:1b:fa:63:d0:e8:96:6b:d9:84:57:18: e4:fa:e2:6d:9d:dd:b7:2d:38:dd:97:4c:6b:fc:f6:3c:a5:37: fa:67:26:40:28:0c:b6:09:40:50:2e:60:5e:0f:37:b8:cb:2c: af:e5:8c:ac:0c:72:73:fd:a1:6a:ce:0a:e7:e9:db:8d:9b:7f: e0:f5:ab:78:38:c7:48:99:3e:c7:b3:51:01:93:a2:d9:7b:0e: 4a:d0:c3:97:2b:d2:b7:5b:ce:2d:9d:24:26:12:0a:21:b6:a1: 04:55:50:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2uqUUTT9unmuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjU2ZWVhNmQtMWVhNS00MGY1LTkxOWMtNWZjMzEzNzhiNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKE5wzaI0KpxK733KqiJiFUuTolFJhGhSUjw erPwxTjOUUA4lUpEm4DfJwMCeMbq3BNwQn7WgCySOJe1wz2n0b64U+7ccDG8xS2P jVId6igL9KsbUBp1QssZ9yYLVyTQRUxClHV2gPItAEq4Xq6PYqTw+yJRxq3P7s/w u/LMRJ91lVeAf/Gbl/Ke9VAR+z1k3Dw2omat2Sl77OFG435Nb4HM9nWb3iIpnj9l VuiQX5sOybA31LqwczLtHrB3284be9Ne3v5AUcNbCIphjC2vyquPzUw3yOzByHtd h1DiR6C731ePima4RFMajIbZ9TAG6BeAtlv41y85M3TMPSiu3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHCsAr8vShtadrR/h7Wj9qLUh/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2M0YmZlNzEtYTI2NC0z NzhkLTgyMDgtZWZiMGViOTAyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdqf5LD814xmuIzGUsroe52YtpJ7uHhi1oXeTMSv97nUqk5INEg0bOk ECTgAJxeDyJQtvh2CwdU12DaUk2yV6E5wX1B06Unh2pmySCWGZlNlwfmO2Df/3Vo cCUcun/23OuWH5QdgXYreh9JiNiOEFvmDj/JmJ4EYkyjG3aeu4EtqJ3o4u36+zND 6C/elphbXwPgfC5zu9Qb+mPQ6JZr2YRXGOT64m2d3bctON2XTGv89jylN/pnJkAo DLYJQFAuYF4PN7jLLK/ljKwMcnP9oWrOCufp242bf+D1q3g4x0iZPsezUQGTotl7 DkrQw5cr0rdbzi2dJCYSCiG2oQRVUJE= -----END CERTIFICATE-----Generated at Sun May 4 11:49:52 2025 by rpki-client