$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06f81788-7bad-32bc-b7c2-e0bbdd35e0a0.roa File: 06f81788-7bad-32bc-b7c2-e0bbdd35e0a0.roa (raw, json) Hash identifier: NxDBhh69+NjTprAxcluzUu4jqN63ksGa3R+JAiuV2y0= Subject key identifier: D5:82:39:35:B7:E3:B6:97:B4:D2:79:9E:03:63:A5:A1:9C:4A:38:D2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BB0F6A173C64D6487301C8A8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06f81788-7bad-32bc-b7c2-e0bbdd35e0a0.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 15169 IP address blocks: 172.217.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:6a:17:3c:64:d6:48:73:01:c8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=68ae4ed0-addf-412f-b021-0c2cd1eb24a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:90:56:71:5c:ef:5f:db:54:42:3a:ae:b4:84: dd:8a:bb:96:71:ae:62:ef:23:2d:f9:fc:1e:4c:ab: a3:88:4c:ff:65:14:33:21:33:7c:43:90:4b:cf:1d: 61:ef:87:0f:20:7f:94:0a:86:a5:0c:99:93:85:14: 7c:1d:40:bd:0d:f2:cf:43:6b:51:c9:8b:6f:70:4c: 2b:5f:47:0e:d0:50:78:95:59:3d:62:8e:6b:ed:69: d9:90:46:cc:72:f2:86:d7:89:da:bf:1b:57:90:a9: 6a:c3:08:6c:32:59:23:e9:3d:06:b0:96:6f:e1:6e: 2a:6f:a9:ff:f8:bd:32:2d:cc:91:57:8d:9d:a6:b6: a0:45:92:7d:37:1d:62:34:15:a3:c7:11:7c:c0:71: 41:2d:e8:32:b3:c6:01:43:c1:66:e9:b7:2b:f4:7c: d6:f8:98:57:d9:8d:72:f8:34:60:0e:9e:09:a8:5f: 8d:d1:06:1c:e4:3e:3e:a5:d1:6d:41:1a:ae:ba:93: c5:e3:31:c9:7b:9c:9d:ed:00:b2:f1:73:d1:7e:a6: 09:e7:d4:8d:ce:af:28:e0:b3:40:29:a3:77:7c:2c: e4:5d:06:a8:3b:79:bb:3b:b3:b6:4c:1b:10:fa:bd: 73:7b:f3:35:96:8a:43:a1:79:5f:71:6c:1c:ee:37: c6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:82:39:35:B7:E3:B6:97:B4:D2:79:9E:03:63:A5:A1:9C:4A:38:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06f81788-7bad-32bc-b7c2-e0bbdd35e0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:56:e5:04:84:a5:91:6e:ca:0c:c1:21:72:ba:6b:49:9c:e3: 55:b1:01:7a:17:81:99:64:61:62:92:cf:d8:31:6f:dd:ce:6c: c2:57:4c:a9:6a:02:e9:ed:3a:c5:a1:d9:9c:f4:8a:0c:fb:80: 6d:6d:07:2e:1a:30:7c:ed:f0:12:58:f7:c2:22:e5:38:d1:7f: f3:e7:4e:50:18:7f:8a:8b:68:5b:96:be:24:f7:2c:e5:3b:f3: 53:95:2b:83:34:0b:74:3f:45:e3:3e:63:62:3e:dd:50:65:9f: 46:e9:4d:42:3e:0a:8b:c2:78:d6:46:f0:f4:29:df:6a:cb:e4: 6c:d1:08:8a:14:74:fc:b7:b0:1e:8c:09:3f:7c:ba:2a:80:1b: 14:75:53:bf:bf:6f:18:1f:47:92:ff:94:60:25:8b:a0:83:9d: 02:7c:3c:63:08:07:6a:03:2f:a3:04:fd:07:db:ad:91:03:ea: 51:c3:07:5c:92:3e:e7:fd:ec:c8:bf:8c:6a:b7:1e:fa:73:bf: 59:f2:e2:2b:84:5b:ae:8c:0f:69:9a:e7:49:16:0c:b7:2b:c4: 6e:b4:a4:23:d7:ba:45:38:ce:90:ac:1d:f2:5e:80:71:10:f5: a4:48:45:8e:91:b6:ce:98:bc:0a:65:d9:c6:14:f9:bd:6e:df: e1:cd:37:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D2oXPGTWSHMByKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk NjhhZTRlZDAtYWRkZi00MTJmLWIwMjEtMGMyY2QxZWIyNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZBWcVzvX9tUQjqutITdiruWca5i7yMt+fwe TKujiEz/ZRQzITN8Q5BLzx1h74cPIH+UCoalDJmThRR8HUC9DfLPQ2tRyYtvcEwr X0cO0FB4lVk9Yo5r7WnZkEbMcvKG14navxtXkKlqwwhsMlkj6T0GsJZv4W4qb6n/ +L0yLcyRV42dpragRZJ9Nx1iNBWjxxF8wHFBLegys8YBQ8Fm6bcr9HzW+JhX2Y1y +DRgDp4JqF+N0QYc5D4+pdFtQRquupPF4zHJe5yd7QCy8XPRfqYJ59SNzq8o4LNA KaN3fCzkXQaoO3m7O7O2TBsQ+r1ze/M1lopDoXlfcWwc7jfGyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWCOTW347aXtNJ5ngNjpaGcSjjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDZmODE3ODgtN2JhZC0z MmJjLWI3YzItZTBiYmRkMzVlMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZW5QSEpZFuygzBIXK6a0mc41WxAXoXgZlkYWKSz9gxb93ObMJXTKlq AuntOsWh2Zz0igz7gG1tBy4aMHzt8BJY98Ii5TjRf/PnTlAYf4qLaFuWviT3LOU7 81OVK4M0C3Q/ReM+Y2I+3VBln0bpTUI+CovCeNZG8PQp32rL5GzRCIoUdPy3sB6M CT98uiqAGxR1U7+/bxgfR5L/lGAli6CDnQJ8PGMIB2oDL6ME/QfbrZED6lHDB1yS Puf97Mi/jGq3Hvpzv1ny4iuEW66MD2ma50kWDLcrxG60pCPXukU4zpCsHfJegHEQ 9aRIRY6Rts6YvApl2cYU+b1u3+HNN7I= -----END CERTIFICATE-----Generated at Sun Jun 15 17:26:56 2025 by rpki-client