$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa File: 0185b0e0-6696-3609-972e-b79ff80a6c20.roa (raw, json) Hash identifier: T2om0DZ+VVcrFoBpj2/OkcveUhAkf3R1+20ESCDxO1Q= Subject key identifier: E9:D0:0F:EE:60:83:85:C9:32:B7:1F:58:B0:4C:7C:03:96:B6:7A:87 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12BA91211CBED3EE78860 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.217.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2b:a9:12:11:cb:ed:3e:e7:88:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=a7350a8a-bbca-4310-aaf7-1fe067f05743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:54:b1:1b:1d:a8:9e:3f:90:9f:a4:4c:bb:c8: a5:03:42:ad:c7:34:4d:36:66:eb:a6:93:07:64:f8: 18:bf:9d:78:24:24:77:38:98:2d:ba:f4:15:60:4a: a1:a9:c3:15:24:d0:e4:50:5e:f8:b0:60:85:96:f8: ff:a6:5d:19:f6:3f:b9:d1:a3:8a:de:3a:89:d3:dc: 73:d3:ca:3d:65:b2:e4:d7:9f:9e:f7:41:95:52:ec: 3f:06:d5:30:0d:31:5c:76:e2:89:6f:ae:91:68:41: 40:d3:73:9b:51:f6:df:24:f4:ee:93:20:d1:3c:78: 9a:5b:51:c4:06:29:35:a1:92:3f:36:66:e4:ba:cd: 48:ce:80:53:8a:e8:a7:51:67:9a:6d:57:99:94:3e: c2:bf:7c:e1:61:54:9c:57:f1:e7:41:82:65:12:81: 8b:3c:93:a8:a8:a8:f0:9a:54:c4:91:a7:98:16:01: 90:fe:e6:36:39:99:35:c1:7a:8c:3e:a0:72:3f:7e: 71:dc:ba:49:76:e0:db:ed:7f:ab:bf:6a:0d:18:5d: 9e:aa:e7:79:69:cc:86:a8:c1:eb:c5:dc:dc:89:9c: e9:5c:47:5b:50:ec:a7:79:c7:be:35:7a:e0:90:91: ab:df:3c:e9:a5:8a:0f:70:07:f8:2b:d9:3e:a0:85: 5b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D0:0F:EE:60:83:85:C9:32:B7:1F:58:B0:4C:7C:03:96:B6:7A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:29:c6:ec:ba:3e:2c:05:aa:90:d7:dd:f3:e5:f1:fe:3a:8d: 09:9b:3e:74:e0:4c:88:dc:40:cb:51:82:d8:69:8d:5e:78:74: 5f:b5:96:47:3a:b7:61:f7:66:4a:80:a2:e6:83:18:e2:94:02: b5:6a:ce:fc:4b:71:0b:2f:e0:05:a8:d8:47:d1:bf:2b:21:c1: 6d:4d:8f:4a:53:2c:62:04:73:28:f3:b4:04:85:32:7f:45:7c: 62:e0:a8:bb:c8:b1:bc:56:27:ca:52:72:55:40:2f:a8:65:64: 4e:ed:3d:33:b0:c6:98:4e:ef:42:bc:16:a0:aa:16:7f:07:c3: 28:d4:f8:33:d5:9f:24:14:bc:1b:22:63:bb:ba:a8:ad:e7:a3: 71:f7:4b:db:ed:6d:a4:d9:3d:0a:59:2b:18:70:c4:ce:8c:d6: 11:7b:43:38:88:b2:20:61:a6:49:a3:5c:14:31:53:a3:3d:ca: a9:88:05:3d:71:fb:fc:f8:0f:63:a0:62:aa:da:fa:54:92:95: 25:26:ee:7d:3f:61:15:0c:b7:36:ec:c9:f2:d0:f9:12:77:53: ca:ed:b1:d5:b3:57:19:71:c6:49:bf:0f:e1:d3:f8:44:7e:34: 9b:8c:91:73:8e:ed:94:e2:45:86:1c:c8:62:0f:91:9e:c5:a7: e7:35:8c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSupEhHL7T7niGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk YTczNTBhOGEtYmJjYS00MzEwLWFhZjctMWZlMDY3ZjA1NzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilSxGx2onj+Qn6RMu8ilA0KtxzRNNmbrppMH ZPgYv514JCR3OJgtuvQVYEqhqcMVJNDkUF74sGCFlvj/pl0Z9j+50aOK3jqJ09xz 08o9ZbLk15+e90GVUuw/BtUwDTFcduKJb66RaEFA03ObUfbfJPTukyDRPHiaW1HE Bik1oZI/Nmbkus1IzoBTiuinUWeabVeZlD7Cv3zhYVScV/HnQYJlEoGLPJOoqKjw mlTEkaeYFgGQ/uY2OZk1wXqMPqByP35x3LpJduDb7X+rv2oNGF2equd5acyGqMHr xdzciZzpXEdbUOynece+NXrgkJGr3zzppYoPcAf4K9k+oIVbbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnQD+5gg4XJMrcfWLBMfAOWtnqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDE4NWIwZTAtNjY5Ni0z NjA5LTk3MmUtYjc5ZmY4MGE2YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8pxuy6PiwFqpDX3fPl8f46jQmbPnTgTIjcQMtRgthpjV54dF+1lkc6 t2H3ZkqAouaDGOKUArVqzvxLcQsv4AWo2EfRvyshwW1Nj0pTLGIEcyjztASFMn9F fGLgqLvIsbxWJ8pSclVAL6hlZE7tPTOwxphO70K8FqCqFn8HwyjU+DPVnyQUvBsi Y7u6qK3no3H3S9vtbaTZPQpZKxhwxM6M1hF7QziIsiBhpkmjXBQxU6M9yqmIBT1x +/z4D2OgYqra+lSSlSUm7n0/YRUMtzbsyfLQ+RJ3U8rtsdWzVxlxxkm/D+HT+ER+ NJuMkXOO7ZTiRYYcyGIPkZ7Fp+c1jDs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:46 2025 by rpki-client