$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa File: a061a393-c24b-3e7d-890c-891cf39b13c9.roa (raw, json) Hash identifier: fFqPqfMXu5FopfELknBsiZSc90Ot6Lr08mD6o7PoeqY= Subject key identifier: B4:0C:F0:5C:E0:A0:91:A3:2A:E6:25:CB:5C:3C:7F:C0:76:6A:B7:C9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA38512120F9E4C9281180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:38:51:21:20:f9:e4:c9:28:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=b869e014-72d5-45cc-9107-38f0cde689d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:2f:64:6b:b0:5b:56:3d:54:62:73:29:70: c6:3c:89:2b:92:4a:02:a1:8e:db:7e:ac:9f:f3:ba: 1e:e9:8d:f0:b8:43:13:c4:7d:0a:be:8f:69:c1:d1: d2:82:92:0f:b1:49:71:25:a4:a9:8e:4c:ad:41:c0: 65:ef:c9:12:e9:85:67:3a:37:1e:58:98:98:15:bb: bd:e7:8d:01:0d:15:55:38:65:d6:77:4e:46:67:5d: 55:ee:45:9f:fb:a8:7c:bc:b4:1f:ee:3d:94:9a:29: 80:ab:a1:f8:49:e7:c6:db:db:5e:c8:40:9c:4b:61: 3c:bb:a2:7c:99:12:0b:08:51:63:1e:89:d4:df:30: 70:a4:c7:f7:04:ba:74:a8:44:e1:26:5b:ad:44:c1: dc:e9:67:2c:ef:f6:9a:2d:12:7c:de:3c:b6:72:8b: 5b:1e:bd:6c:11:95:83:be:e5:9c:aa:a2:1b:33:b9: 1f:e5:d2:0a:2b:5a:5d:2a:68:29:4b:17:f4:cf:c9: 8f:28:01:53:7f:d1:b8:89:18:02:6d:23:12:90:c1: 1f:90:5c:d1:b3:80:d0:9d:d5:cf:37:b5:79:13:e8: 0a:a1:91:f4:a2:23:55:27:3a:fd:d9:a6:43:b6:58: e9:ae:28:55:ce:48:6a:29:ce:bf:61:18:59:0a:e7: 0a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0C:F0:5C:E0:A0:91:A3:2A:E6:25:CB:5C:3C:7F:C0:76:6A:B7:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ef:be:9f:a5:e2:ba:2d:d9:1d:f9:9f:e6:2f:07:8e:bc:c3: ab:5c:a1:5a:e1:19:fa:42:c0:ab:d5:4f:d4:bc:d4:1a:b3:e4: da:10:57:cf:69:a6:85:c7:4b:7d:d9:b9:2b:f1:a4:c1:3e:15: 4f:46:b7:70:ef:aa:f2:ec:04:63:a1:26:92:88:02:2e:70:39: 34:59:19:16:22:ea:2a:d8:76:bf:09:17:f0:48:5f:03:ac:b8: 48:38:29:d6:51:ae:88:ac:01:04:d8:1c:77:3c:3e:a2:47:42: 00:19:8a:cb:4e:e6:ca:71:20:a0:27:f2:30:5c:f3:bf:e2:a2: fe:da:f4:3a:a8:a7:b7:aa:64:50:66:6e:11:bd:4b:47:c5:09: bc:94:aa:01:00:17:c0:bb:24:e2:49:9e:a1:8b:27:bf:40:8e: d9:e8:79:81:a6:c5:6a:d6:f7:65:31:56:fd:0e:cd:a6:01:4f: 7c:ed:be:ec:60:e3:62:21:03:a2:24:20:d8:5c:4d:11:26:b0: fa:d6:5c:6a:dd:cf:01:72:cd:d8:d2:0a:1d:33:c6:e7:0b:f8: f2:04:9f:fb:a4:cd:bf:39:11:ae:8b:cf:46:ba:10:75:6f:48: 02:ae:79:df:a0:b8:ac:3d:31:b1:ae:ba:9d:36:6b:c1:34:3d: 00:f1:af:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jhRISD55MkoEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk Yjg2OWUwMTQtNzJkNS00NWNjLTkxMDctMzhmMGNkZTY4OWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp4vZGuwW1Y9VGJzKXDGPIkrkkoCoY7bfqyf 87oe6Y3wuEMTxH0Kvo9pwdHSgpIPsUlxJaSpjkytQcBl78kS6YVnOjceWJiYFbu9 540BDRVVOGXWd05GZ11V7kWf+6h8vLQf7j2UmimAq6H4SefG29teyECcS2E8u6J8 mRILCFFjHonU3zBwpMf3BLp0qEThJlutRMHc6Wcs7/aaLRJ83jy2cotbHr1sEZWD vuWcqqIbM7kf5dIKK1pdKmgpSxf0z8mPKAFTf9G4iRgCbSMSkMEfkFzRs4DQndXP N7V5E+gKoZH0oiNVJzr92aZDtljprihVzkhqKc6/YRhZCucKjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQM8FzgoJGjKuYly1w8f8B2arfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA2MWEzOTMtYzI0Yi0z ZTdkLTg5MGMtODkxY2YzOWIxM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfvvp+l4rot2R35n+YvB468w6tcoVrhGfpCwKvVT9S81Bqz5NoQV89p poXHS33ZuSvxpME+FU9Gt3DvqvLsBGOhJpKIAi5wOTRZGRYi6irYdr8JF/BIXwOs uEg4KdZRroisAQTYHHc8PqJHQgAZistO5spxIKAn8jBc87/iov7a9Dqop7eqZFBm bhG9S0fFCbyUqgEAF8C7JOJJnqGLJ79AjtnoeYGmxWrW92UxVv0OzaYBT3ztvuxg 42IhA6IkINhcTREmsPrWXGrdzwFyzdjSCh0zxucL+PIEn/ukzb85Ea6Lz0a6EHVv SAKued+guKw9MbGuup02a8E0PQDxr5I= -----END CERTIFICATE-----Generated at Mon Jun 30 04:00:51 2025 by rpki-client