$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99a1f6e0-9850-3d93-92e5-5ca182743881.roa File: 99a1f6e0-9850-3d93-92e5-5ca182743881.roa (raw, json) Hash identifier: ihxDmltY+hCp24dJrn26tPIQrvtEufNzEyF+AZoKDn0= Subject key identifier: 25:1A:9A:3D:34:28:98:EE:E9:7D:AE:8E:70:A3:94:0E:18:45:55:5F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5A01B852F055BAC1BB80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99a1f6e0-9850-3d93-92e5-5ca182743881.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5a:01:b8:52:f0:55:ba:c1:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d64183f0-3c49-4051-a143-50272a2b3cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3d:b1:53:85:cb:73:2a:63:58:c9:1d:40:7c: c0:43:0b:30:ff:d1:7d:c3:28:a8:24:4e:0f:36:66: e3:56:78:bb:6a:4c:41:23:39:d2:65:76:fa:69:b7: a0:6f:d5:bf:e0:b6:58:de:85:4b:ea:44:dc:84:ea: c8:1a:7e:ea:05:23:9d:ed:f2:88:cb:db:74:98:51: 79:ca:cb:c3:f0:d3:6b:aa:70:b0:1e:81:cf:91:d6: 40:3f:32:0d:2a:82:b5:a4:96:a5:b6:f6:6a:99:de: f6:1c:37:72:0e:90:85:7e:79:5f:9d:24:b7:88:40: 85:72:cf:4b:80:b4:ef:c3:1a:7e:e9:25:fa:04:a3: 84:c1:1b:43:dc:2f:18:2f:8f:f9:43:ec:63:80:a7: a4:5b:d5:75:90:ba:fc:ba:39:6e:17:9f:f0:0a:a8: 74:a3:06:2c:81:f0:92:41:80:5e:c4:06:48:f3:1c: ec:98:98:49:08:56:31:27:c4:0f:0b:24:61:3b:d7: ab:f0:4a:09:0f:13:14:6c:8b:04:7f:5a:c8:77:d0: e9:7d:47:49:52:12:59:20:c3:8a:0c:ec:3d:14:ca: 5c:25:15:cb:f0:46:7b:ba:86:2a:af:9e:57:b5:2b: b0:f1:90:d0:8e:6d:df:63:b2:22:c7:89:e6:7c:75: 51:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1A:9A:3D:34:28:98:EE:E9:7D:AE:8E:70:A3:94:0E:18:45:55:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99a1f6e0-9850-3d93-92e5-5ca182743881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:28:43:4b:ed:63:2b:f6:03:4e:44:91:b6:f2:ff:33:7d:e4: cf:ec:a7:f5:25:7b:22:a1:10:78:f5:39:e9:53:26:e9:ab:1d: 67:85:a8:1c:f4:d2:b9:fe:cd:47:aa:b5:32:c8:2e:25:8c:8b: 3d:ba:e2:c8:fd:cc:a6:3a:8f:0d:ae:c8:5c:7f:36:9e:c1:5e: 24:11:92:9f:b7:8c:42:99:6c:52:cc:5e:6c:9a:0e:c6:0a:ec: 5a:e5:29:de:18:21:88:f9:d7:aa:a9:aa:a8:2d:00:17:f0:5e: ee:1f:3f:5a:24:04:fe:b6:e1:7d:be:48:f2:29:da:a1:f3:e2: 1e:a2:81:49:2a:ff:f8:54:57:20:62:8a:e0:66:f1:1e:89:26: 36:db:91:64:05:68:f8:0b:71:2f:29:69:5c:e4:1e:b9:4e:b0: 47:75:41:2c:14:30:2a:0d:5f:50:19:6a:53:20:9c:48:8f:0d: de:5a:e1:77:8b:ad:b6:19:72:3e:7a:00:ad:0d:d7:13:95:31: 69:5f:6a:ba:55:c4:6a:a6:8b:0a:ed:dd:5b:bd:ec:cc:56:c9: 1c:f8:18:76:15:c7:38:6b:44:4c:e7:37:6c:b6:ce:3d:b2:36: f4:c9:64:c9:b5:7f:51:b5:08:87:6d:0f:8f:03:6b:9e:cf:3d: cb:7d:c2:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1oBuFLwVbrBu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDY0MTgzZjAtM2M0OS00MDUxLWExNDMtNTAyNzJhMmIzY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT2xU4XLcypjWMkdQHzAQwsw/9F9wyioJE4P NmbjVni7akxBIznSZXb6abegb9W/4LZY3oVL6kTchOrIGn7qBSOd7fKIy9t0mFF5 ysvD8NNrqnCwHoHPkdZAPzINKoK1pJaltvZqmd72HDdyDpCFfnlfnSS3iECFcs9L gLTvwxp+6SX6BKOEwRtD3C8YL4/5Q+xjgKekW9V1kLr8ujluF5/wCqh0owYsgfCS QYBexAZI8xzsmJhJCFYxJ8QPCyRhO9er8EoJDxMUbIsEf1rId9DpfUdJUhJZIMOK DOw9FMpcJRXL8EZ7uoYqr55XtSuw8ZDQjm3fY7Iix4nmfHVRCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUamj00KJju6X2ujnCjlA4YRVVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTlhMWY2ZTAtOTg1MC0z ZDkzLTkyZTUtNWNhMTgyNzQzODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrNmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4oQ0vtYyv2A05Ekbby/zN95M/sp/UleyKhEHj1OelTJumrHWeFqBz0 0rn+zUeqtTLILiWMiz264sj9zKY6jw2uyFx/Np7BXiQRkp+3jEKZbFLMXmyaDsYK 7FrlKd4YIYj516qpqqgtABfwXu4fP1okBP624X2+SPIp2qHz4h6igUkq//hUVyBi iuBm8R6JJjbbkWQFaPgLcS8paVzkHrlOsEd1QSwUMCoNX1AZalMgnEiPDd5a4XeL rbYZcj56AK0N1xOVMWlfarpVxGqmiwrt3Vu97MxWyRz4GHYVxzhrREznN2y2zj2y NvTJZMm1f1G1CIdtD48Da57PPct9wvk= -----END CERTIFICATE-----Generated at Sun May 4 14:51:55 2025 by rpki-client