$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa File: a67282dc-ef4b-3424-b14a-d7cc85f54925.roa (raw, json) Hash identifier: 69UeiQbxSMU+OAKgpwC2KHLYN/etKjZwf6DmxGqKZNg= Subject key identifier: 1A:86:FF:FA:86:53:CB:99:F8:DD:3D:67:48:40:07:49:F9:9D:5B:C9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACE0250C6D462958A04F8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ce:02:50:c6:d4:62:95:8a:04:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=53c11fb1-f964-4805-856d-fd38717e2324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:41:79:93:67:ee:bf:01:1b:eb:44:bf:13:87: 1b:bd:e5:5a:af:f7:52:54:15:19:b3:b5:24:23:51: 24:16:ad:44:76:0c:12:8b:e0:b4:99:12:d6:10:32: eb:af:ab:09:07:11:03:06:1b:3c:90:19:9e:75:f2: a2:d9:88:e8:6c:79:f2:ee:61:67:1a:00:4d:55:ee: f7:da:17:41:28:ce:70:98:53:7c:38:62:76:93:af: ce:d6:90:07:85:43:35:e7:d0:e6:c5:ad:94:6d:dc: dc:67:51:ae:cf:5f:a8:7b:1f:db:91:70:77:bb:6a: ac:6f:ed:dc:ee:0b:7d:a8:6e:7a:1e:4c:a2:dc:25: 66:f3:97:f7:11:63:8e:f2:88:af:e9:2c:a8:7a:b9: 27:3c:6d:bc:79:d2:31:55:0e:4e:03:ef:0c:42:14: 16:de:0d:17:18:3a:6b:a8:76:e3:a9:30:ed:10:06: ed:49:21:10:1f:7b:d9:33:97:70:bc:a1:9c:f5:8a: e8:55:77:49:fc:67:8f:63:cf:e1:02:69:32:b7:b1: 5a:99:c7:80:3f:12:22:6d:41:57:b2:0d:57:a3:4a: d9:40:34:d6:3a:ac:31:40:87:ca:47:13:f5:8b:69: 40:11:c3:23:23:b7:91:a1:38:10:2f:9b:63:36:36: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:86:FF:FA:86:53:CB:99:F8:DD:3D:67:48:40:07:49:F9:9D:5B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:06:2d:00:b0:12:3c:3b:03:10:37:3c:62:98:36:69:0a:9f: 65:c1:27:0e:37:dc:81:25:32:84:af:0b:a0:09:ef:0e:96:55: db:32:7d:ba:8d:6c:ce:11:98:20:d1:3b:04:db:5c:3e:d0:59: b4:c7:dc:c2:9e:3b:fd:2c:74:96:4a:1f:26:87:ed:0e:fc:91: 0c:94:3e:21:0f:be:90:81:1c:ed:f3:5c:a4:5e:3b:57:07:50: bb:17:ae:ff:78:f9:d9:a4:7c:0b:50:46:79:39:ab:c1:50:51: bb:9d:7a:44:5b:e8:82:15:b8:54:52:ab:5b:7b:92:24:d9:1b: b1:4f:83:4b:c2:95:5d:64:7f:15:73:5e:c4:2d:89:fc:63:0e: 68:bf:d8:de:37:4e:0c:38:ad:7b:a3:bc:2d:c1:94:ad:8c:28: 80:b1:d0:b5:13:b8:51:19:89:72:db:b1:d9:4f:aa:70:3d:66: a4:ca:8c:9c:f5:3c:4c:7b:11:cd:97:14:99:05:cd:d2:99:81: 4a:bc:1d:a5:a9:18:2c:45:54:a4:d7:53:0e:6c:a6:7e:19:49: 5d:33:ed:be:f0:8d:9e:99:48:72:cf:9d:e3:74:13:1b:da:06: c2:50:bd:16:79:30:01:3c:1a:52:a5:c9:35:9c:4e:23:85:4b: f8:e5:32:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus4CUMbUYpWKBPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTNjMTFmYjEtZjk2NC00ODA1LTg1NmQtZmQzODcxN2UyMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20F5k2fuvwEb60S/E4cbveVar/dSVBUZs7Uk I1EkFq1EdgwSi+C0mRLWEDLrr6sJBxEDBhs8kBmedfKi2YjobHny7mFnGgBNVe73 2hdBKM5wmFN8OGJ2k6/O1pAHhUM159Dmxa2UbdzcZ1Guz1+oex/bkXB3u2qsb+3c 7gt9qG56Hkyi3CVm85f3EWOO8oiv6SyoerknPG28edIxVQ5OA+8MQhQW3g0XGDpr qHbjqTDtEAbtSSEQH3vZM5dwvKGc9YroVXdJ/GePY8/hAmkyt7FamceAPxIibUFX sg1Xo0rZQDTWOqwxQIfKRxP1i2lAEcMjI7eRoTgQL5tjNjaAeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqG//qGU8uZ+N09Z0hAB0n5nVvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTY3MjgyZGMtZWY0Yi0z NDI0LWIxNGEtZDdjYzg1ZjU0OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsGLQCwEjw7AxA3PGKYNmkKn2XBJw433IElMoSvC6AJ7w6WVdsyfbqN bM4RmCDROwTbXD7QWbTH3MKeO/0sdJZKHyaH7Q78kQyUPiEPvpCBHO3zXKReO1cH ULsXrv94+dmkfAtQRnk5q8FQUbudekRb6IIVuFRSq1t7kiTZG7FPg0vClV1kfxVz XsQtifxjDmi/2N43Tgw4rXujvC3BlK2MKICx0LUTuFEZiXLbsdlPqnA9ZqTKjJz1 PEx7Ec2XFJkFzdKZgUq8HaWpGCxFVKTXUw5spn4ZSV0z7b7wjZ6ZSHLPneN0Exva BsJQvRZ5MAE8GlKlyTWcTiOFS/jlMgg= -----END CERTIFICATE-----Generated at Sun May 4 11:24:44 2025 by rpki-client