$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa File: 8684240a-b3e2-3586-b1f0-1953cb883e6c.roa (raw, json) Hash identifier: 7XgpVz6UwSX+OLDxOWVQAtiqBQoQb5WpJJLFywGIzqc= Subject key identifier: 8B:73:3B:88:8D:57:CB:CE:94:D5:28:E2:BD:03:0C:38:0B:A8:5F:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB63CE090B98139F395F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:63:ce:09:0b:98:13:9f:39:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=219f4ccc-164f-47c5-a116-5647c2b1504a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:a1:56:16:8d:aa:c1:80:0e:ea:dd:15:3a: f3:e9:79:ab:b2:05:3c:4f:78:0a:16:77:4b:5c:0c: ee:79:32:43:13:6f:d9:12:a8:e7:d3:1e:f3:b0:55: f3:3e:c5:33:29:0a:2b:01:d3:55:2c:6b:88:1b:90: c0:a0:16:79:04:c6:85:34:f9:bd:a2:ac:7b:42:2d: ed:a5:12:93:03:b1:8f:cf:ee:59:3d:3e:9c:a0:fa: 58:7b:8f:2e:4c:9f:22:7f:94:ff:7a:99:10:5f:23: f2:a7:38:4e:4e:66:28:40:fd:d4:63:1a:6a:71:c8: 5d:dc:0b:45:d2:10:7e:b4:c6:c6:d4:e1:df:d1:7b: e3:38:bb:5a:22:dc:e3:19:14:0c:43:27:cc:3b:cb: 6a:ab:ea:02:0a:04:2f:cd:85:c0:79:c6:fd:a1:bd: 77:07:10:57:bd:46:73:ed:a0:a0:e8:16:78:7a:ad: 99:23:42:b3:53:7f:97:7d:c2:ae:29:ad:84:f3:e3: bf:a8:42:e7:f8:11:65:71:ef:ab:c5:b2:3b:3f:37: 98:d2:8d:45:1f:38:48:45:02:be:53:fe:9c:74:33: 22:f3:f8:47:e2:15:60:10:a2:34:dc:f2:3e:e1:37: de:b3:de:d4:09:3d:8c:7d:6c:58:ca:fe:96:55:e5: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:73:3B:88:8D:57:CB:CE:94:D5:28:E2:BD:03:0C:38:0B:A8:5F:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:88:b9:b7:e6:eb:78:89:79:9b:24:99:83:3f:38:ca:07:f3: 19:f0:d1:d1:6f:73:ec:21:56:b0:38:ce:18:01:6f:dc:c3:1f: ec:67:8a:4e:31:df:12:ec:e4:73:d1:95:3f:d7:04:b4:a6:57: d8:7f:d3:63:3f:3b:83:90:32:08:1b:e1:b3:62:9f:82:04:22: 58:d9:9b:25:30:0b:d1:cd:60:9d:7c:37:fb:87:30:69:b8:ab: ba:9c:74:2c:3b:dd:ae:e4:96:d4:9c:e3:18:fb:f5:b3:d3:79: 3b:7c:bb:31:d9:35:99:a4:11:e8:52:d1:16:2f:29:c7:49:fc: eb:b5:97:1b:ec:ed:79:92:93:54:12:79:9b:42:b2:b1:43:52: 73:62:e9:48:f1:af:b4:09:08:b7:be:bf:1a:d5:f9:71:6d:1c: 3c:9f:19:98:4e:c4:df:b4:da:49:16:e1:32:3d:1d:f7:54:d6: 27:68:99:a6:39:02:10:9f:c8:63:a1:10:ca:fe:8e:8f:70:19: 7c:a3:95:95:f5:d4:e8:ee:de:22:4c:31:7d:1e:f2:0d:e8:58: df:0e:65:cc:ae:32:a9:00:78:95:16:01:6f:c1:c7:1f:20:9b: d1:ee:43:b4:3c:ee:ac:f4:72:ce:42:ec:44:a9:6f:01:2c:87: c3:e1:13:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2POCQuYE585XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjE5ZjRjY2MtMTY0Zi00N2M1LWExMTYtNTY0N2MyYjE1MDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ2hVhaNqsGADurdFTrz6XmrsgU8T3gKFndL XAzueTJDE2/ZEqjn0x7zsFXzPsUzKQorAdNVLGuIG5DAoBZ5BMaFNPm9oqx7Qi3t pRKTA7GPz+5ZPT6coPpYe48uTJ8if5T/epkQXyPypzhOTmYoQP3UYxpqcchd3AtF 0hB+tMbG1OHf0XvjOLtaItzjGRQMQyfMO8tqq+oCCgQvzYXAecb9ob13BxBXvUZz 7aCg6BZ4eq2ZI0KzU3+XfcKuKa2E8+O/qELn+BFlce+rxbI7PzeY0o1FHzhIRQK+ U/6cdDMi8/hH4hVgEKI03PI+4Tfes97UCT2MfWxYyv6WVeVlZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItzO4iNV8vOlNUo4r0DDDgLqF8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY4NDI0MGEtYjNlMi0z NTg2LWIxZjAtMTk1M2NiODgzZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaIubfm63iJeZskmYM/OMoH8xnw0dFvc+whVrA4zhgBb9zDH+xnik4x 3xLs5HPRlT/XBLSmV9h/02M/O4OQMggb4bNin4IEIljZmyUwC9HNYJ18N/uHMGm4 q7qcdCw73a7kltSc4xj79bPTeTt8uzHZNZmkEehS0RYvKcdJ/Ou1lxvs7XmSk1QS eZtCsrFDUnNi6Ujxr7QJCLe+vxrV+XFtHDyfGZhOxN+02kkW4TI9HfdU1idomaY5 AhCfyGOhEMr+jo9wGXyjlZX11Oju3iJMMX0e8g3oWN8OZcyuMqkAeJUWAW/Bxx8g m9HuQ7Q87qz0cs5C7ESpbwEsh8PhE8o= -----END CERTIFICATE-----Generated at Sun May 4 11:59:49 2025 by rpki-client