$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa File: ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa (raw, json) Hash identifier: UxXeZ4YSuBfV/YsPE5TN2dMKU3hvI0uo1ZRICzmay6g= Subject key identifier: 38:F8:8D:AA:85:83:AF:A9:44:51:E5:64:C3:7D:9F:F2:31:0A:56:1B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BB0F69A56B097793FE082AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 15169 IP address blocks: 172.217.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:69:a5:6b:09:77:93:fe:08:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=a2c870c9-a7d7-458a-af66-7a9413ab35ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:d1:74:56:c7:c8:ec:dc:03:e8:89:0b:fc: 53:ba:3d:d2:dc:f0:9c:4c:2e:8e:5b:c7:a3:db:79: 3c:67:be:e0:98:4f:58:92:17:4d:0a:b7:52:7f:65: b4:98:db:55:fc:80:69:20:63:49:9e:67:e3:91:46: f9:f9:a4:cc:2c:8f:9e:c7:35:04:7c:e5:fd:d5:37: 9f:94:10:f4:8d:55:44:1b:9e:d2:05:24:83:b0:40: 57:ad:04:b4:6d:4d:f8:b2:51:f1:37:db:41:5d:70: 13:dc:c7:c6:f5:1a:67:4a:22:33:92:c4:bc:a1:db: d7:90:a1:77:7d:98:e4:81:7f:f5:74:99:57:41:47: c5:4a:1a:df:0b:e4:8d:e0:2a:3e:1c:62:b9:89:ec: ce:07:ab:1a:3c:b1:d7:7f:20:4c:da:8f:e4:31:e5: 78:6e:86:6a:99:42:ec:52:da:94:47:15:53:3c:8c: 42:00:bd:7b:08:48:95:87:64:e6:34:fc:e5:97:98: af:b1:ba:d2:d0:af:eb:1d:2f:3f:04:dc:81:af:30: 64:6e:32:02:ee:9a:7b:35:c8:3f:76:5a:73:0e:3a: 00:b5:7a:11:42:fb:32:a7:28:43:ce:12:29:7a:4f: e6:a3:e3:b6:36:a9:ec:7c:1c:be:11:8f:a6:bd:c1: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F8:8D:AA:85:83:AF:A9:44:51:E5:64:C3:7D:9F:F2:31:0A:56:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9d:ac:5f:52:aa:c1:19:9c:07:40:65:a8:ef:ea:d0:cc:30: 07:ba:b5:87:28:5e:7d:0c:c5:0a:74:b4:5c:7d:20:aa:cd:e3: f2:af:10:6d:ac:14:48:6b:d6:74:18:ff:82:37:e6:1b:f0:30: 8e:8a:9a:27:cd:f2:b7:00:f6:c7:bb:4b:d3:33:9c:66:c3:ac: 91:88:76:9f:3e:29:3b:6d:54:23:f6:7e:ec:2e:3e:cc:9c:76: ea:f7:18:91:42:90:d0:98:5a:d8:90:28:1f:6f:3a:9b:7e:a7: 87:9c:13:0c:c2:6d:2c:3b:8e:24:ae:19:49:a3:51:8a:c8:38: 19:7f:68:d9:8d:ac:23:fa:8d:0d:35:fd:7a:10:f3:f4:10:45: cd:30:16:9f:7f:df:24:b2:03:24:34:ea:af:f1:56:64:62:f5: 30:fc:3c:27:d6:bd:4f:47:1e:02:3c:23:70:ab:a8:7f:58:d4: d4:6c:c5:82:c5:4c:af:19:c9:ba:5d:dc:d3:63:8e:89:68:ea: 5c:98:7b:cc:cf:00:30:d5:3e:fd:08:85:ba:56:41:48:37:51: a7:f7:9a:71:9d:68:f4:86:40:aa:78:03:c3:e2:4f:c5:30:ba: 8d:40:0a:4a:c3:04:a4:b6:33:a6:6a:d2:d5:53:38:ae:25:69: 5f:5c:e4:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D2mlawl3k/4IKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk YTJjODcwYzktYTdkNy00NThhLWFmNjYtN2E5NDEzYWIzNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIXRdFbHyOzcA+iJC/xTuj3S3PCcTC6OW8ej 23k8Z77gmE9YkhdNCrdSf2W0mNtV/IBpIGNJnmfjkUb5+aTMLI+exzUEfOX91Tef lBD0jVVEG57SBSSDsEBXrQS0bU34slHxN9tBXXAT3MfG9RpnSiIzksS8odvXkKF3 fZjkgX/1dJlXQUfFShrfC+SN4Co+HGK5iezOB6saPLHXfyBM2o/kMeV4boZqmULs UtqURxVTPIxCAL17CEiVh2TmNPzll5ivsbrS0K/rHS8/BNyBrzBkbjIC7pp7Ncg/ dlpzDjoAtXoRQvsypyhDzhIpek/mo+O2NqnsfBy+EY+mvcFL0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDj4jaqFg6+pRFHlZMN9n/IxClYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmEwNjlmZjQtZjU1Zi0z NGE0LWJlNjktYTY4Y2YxNWJmNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGdrF9SqsEZnAdAZajv6tDMMAe6tYcoXn0MxQp0tFx9IKrN4/KvEG2s FEhr1nQY/4I35hvwMI6KmifN8rcA9se7S9MznGbDrJGIdp8+KTttVCP2fuwuPsyc dur3GJFCkNCYWtiQKB9vOpt+p4ecEwzCbSw7jiSuGUmjUYrIOBl/aNmNrCP6jQ01 /XoQ8/QQRc0wFp9/3ySyAyQ06q/xVmRi9TD8PCfWvU9HHgI8I3CrqH9Y1NRsxYLF TK8Zybpd3NNjjolo6lyYe8zPADDVPv0IhbpWQUg3Uaf3mnGdaPSGQKp4A8PiT8Uw uo1ACkrDBKS2M6Zq0tVTOK4laV9c5Fw= -----END CERTIFICATE-----Generated at Sun May 4 12:09:56 2025 by rpki-client