$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa File: 00c8ed4f-37f4-323f-8afb-55168be0c0df.roa (raw, json) Hash identifier: ySc/qaEuZuXAxSxC0cFGx5dIN/U0aJsx+tpdTNXzUxA= Subject key identifier: 35:F1:2D:E0:72:E5:E8:95:F3:CB:E0:2F:5D:15:B3:08:B2:FC:7F:96 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD409B04AAAB0F1680580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d4:09:b0:4a:aa:b0:f1:68:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=aca08353-449f-4dfb-9952-d1a3625a7a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:af:e2:eb:a3:21:b0:d9:ea:70:d6:83:aa: 0e:29:63:97:81:ec:ff:d2:7b:3b:b0:44:f5:91:97: 4b:51:81:36:d9:11:bc:0a:71:21:52:c0:99:35:0b: ac:2a:1c:e6:b2:34:28:1f:cc:2b:78:95:8e:b4:df: 02:ed:b5:c8:31:23:4c:07:c7:0a:bd:f5:1d:e8:47: df:3f:e5:b6:a7:d2:30:87:f4:9f:ab:7a:dd:24:6e: 43:d6:5e:cc:ea:ee:32:5f:66:cd:1b:bf:99:73:70: f4:ee:1c:d1:b4:5b:49:ee:cf:18:7c:3d:d0:5c:db: 51:c5:26:8f:8e:9d:21:5a:35:47:eb:af:2a:e3:ba: c3:13:4e:f6:12:6f:29:a4:19:0c:5a:3b:29:e3:a3: e7:a4:64:9d:3f:df:4c:cd:4c:4f:b5:0e:c9:40:41: c4:d9:ad:19:25:bf:11:d8:fc:98:7e:7f:33:4e:d4: 8e:8a:c3:00:1f:a2:26:0b:72:24:85:79:8b:a5:59: 52:d6:8d:58:b1:03:97:9c:e1:b6:b0:8e:be:88:00: 48:ad:52:b2:8f:f9:d9:52:45:46:93:ec:38:00:e3: c9:2e:85:fa:00:57:29:48:91:8b:8f:3e:97:35:93: 6f:7f:71:7f:70:e4:e2:1a:c1:4c:a4:d6:a2:33:d0: 0d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F1:2D:E0:72:E5:E8:95:F3:CB:E0:2F:5D:15:B3:08:B2:FC:7F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b8:62:79:cb:d3:b2:3a:3f:45:98:13:c3:00:55:45:a4:73: 54:ef:44:4e:7b:dd:a9:24:b9:f3:5a:17:ae:e2:4c:76:11:bd: 4f:e8:5c:26:eb:2c:dc:fa:ce:d0:c5:1b:98:7d:37:80:ba:b9: b0:f9:ff:26:ae:d6:0d:41:d4:cf:f7:75:6e:cb:88:fa:7b:6b: f3:ed:c3:99:37:03:01:09:47:8d:5a:cd:65:ce:ab:73:f0:ca: fa:5f:b7:c4:c0:99:17:a3:fa:39:b7:28:c2:68:f2:56:88:32: ac:4f:5e:7f:8e:58:e1:0d:df:b0:8a:c3:95:79:64:92:59:e7: 6e:ce:ff:e2:20:1c:ef:44:51:21:93:60:bc:64:bd:7e:17:24: ed:91:c5:49:a4:a6:33:df:d6:91:3e:c6:9a:0c:fc:ff:8b:96: df:29:95:43:27:dd:f8:2b:23:d7:2a:0a:ef:74:f6:de:5f:f3: 8d:6c:95:06:9a:91:34:a6:3b:5f:bf:c4:88:7c:0c:5d:4c:39: fc:43:1f:80:8a:6a:75:ab:1a:61:94:21:f3:d4:e2:3e:ca:0a: ee:9d:a1:2e:f6:ba:ad:37:29:4f:61:b7:35:2c:77:80:1a:e7: fc:4d:47:e0:d3:51:54:d9:08:2f:20:5a:2e:4e:b2:02:68:69: 1d:38:79:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutQJsEqqsPFoBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWNhMDgzNTMtNDQ5Zi00ZGZiLTk5NTItZDFhMzYyNWE3YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgav4uujIbDZ6nDWg6oOKWOXgez/0ns7sET1 kZdLUYE22RG8CnEhUsCZNQusKhzmsjQoH8wreJWOtN8C7bXIMSNMB8cKvfUd6Eff P+W2p9Iwh/Sfq3rdJG5D1l7M6u4yX2bNG7+Zc3D07hzRtFtJ7s8YfD3QXNtRxSaP jp0hWjVH668q47rDE072Em8ppBkMWjsp46PnpGSdP99MzUxPtQ7JQEHE2a0ZJb8R 2PyYfn8zTtSOisMAH6ImC3IkhXmLpVlS1o1YsQOXnOG2sI6+iABIrVKyj/nZUkVG k+w4AOPJLoX6AFcpSJGLjz6XNZNvf3F/cOTiGsFMpNaiM9AN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXxLeBy5eiV88vgL10Vswiy/H+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDBjOGVkNGYtMzdmNC0z MjNmLThhZmItNTUxNjhiZTBjMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS4YnnL07I6P0WYE8MAVUWkc1TvRE573akkufNaF67iTHYRvU/oXCbr LNz6ztDFG5h9N4C6ubD5/yau1g1B1M/3dW7LiPp7a/Ptw5k3AwEJR41azWXOq3Pw yvpft8TAmRej+jm3KMJo8laIMqxPXn+OWOEN37CKw5V5ZJJZ527O/+IgHO9EUSGT YLxkvX4XJO2RxUmkpjPf1pE+xpoM/P+Llt8plUMn3fgrI9cqCu909t5f841slQaa kTSmO1+/xIh8DF1MOfxDH4CKanWrGmGUIfPU4j7KCu6doS72uq03KU9htzUsd4Aa 5/xNR+DTUVTZCC8gWi5OsgJoaR04edc= -----END CERTIFICATE-----Generated at Sun Apr 27 03:17:22 2025 by rpki-client