$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa File: 0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa (raw, json) Hash identifier: NK49zysB8SjgCH/6DUca8iimO+4zpEJglNqac9NNUJI= Subject key identifier: DF:60:35:36:B1:A5:0E:21:9C:30:6A:4B:6E:D7:C4:42:9C:0B:5C:11 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC88D53A2C284F8F66E20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c8:8d:53:a2:c2:84:f8:f6:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3c806a27-3324-4a93-a6f6-96e53c0cf77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:54:a4:89:c0:3f:0a:90:fe:46:19:db:2c: 67:db:5f:91:60:50:45:49:24:f6:d8:34:61:d5:32: 6f:4b:4c:1f:82:be:a9:5e:e9:a3:cc:e6:0a:79:96: df:d0:db:2b:87:28:13:7f:56:52:a6:67:24:f7:24: f2:3d:c2:30:0e:97:19:3b:0d:77:4e:d0:9e:a0:65: 0b:fa:fb:3e:0c:65:7c:dd:49:ed:be:a0:fe:82:01: 8c:d8:22:e8:7f:2b:8f:79:5e:48:ab:08:d1:bb:c1: 35:a2:46:9a:60:f6:65:6d:69:86:74:86:28:fa:a7: e7:a9:66:2e:b5:0b:ac:7e:c4:c1:b5:24:f2:79:8f: 32:50:76:b5:a0:7f:0d:64:1c:b2:98:35:b2:4c:0e: 8e:66:c6:98:b0:5e:ba:2f:62:42:a0:f5:75:5c:aa: 48:4f:a4:86:a7:7e:61:62:11:3a:3b:b2:d0:88:82: 08:68:fe:db:ec:48:b7:7e:73:a7:c5:2e:73:a9:01: fa:aa:3c:af:60:aa:4f:98:09:b7:48:73:75:43:b3: 09:cc:03:04:8c:75:58:35:6c:38:b4:76:f9:94:1d: b0:81:e3:62:0e:99:07:66:3d:76:45:01:0c:38:4c: 03:a4:39:01:67:26:aa:b8:af:31:bd:d0:3e:4e:40: 10:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:60:35:36:B1:A5:0E:21:9C:30:6A:4B:6E:D7:C4:42:9C:0B:5C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4a31b5-3d2f-3ff8-a7b8-db895972bfe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:3c:a8:1a:6f:c9:b1:d0:db:35:b4:c8:33:1f:a8:a7:4c:2e: 89:00:a1:f0:9e:ad:2f:98:70:91:e4:b6:ed:62:68:19:d3:07: 67:2e:69:17:93:85:8a:94:6e:b5:84:90:f4:b1:92:f0:0a:55: 30:0f:17:b5:10:c4:69:95:f8:f7:c6:82:37:c0:18:2f:ac:a1: 31:53:e4:5e:26:97:7c:ba:e0:61:19:10:08:71:81:68:b9:1a: 36:5f:dc:94:3b:1d:ec:ae:f7:b2:1e:94:30:8d:11:d5:2a:94: c5:9f:c9:dc:d5:51:58:c1:c5:ee:0f:ad:bd:72:08:35:94:9b: c4:9e:12:3d:dd:d8:b1:37:dc:e2:9a:2f:fd:b0:d6:34:f7:90: a4:e5:f5:85:06:4d:b7:46:fb:ce:2b:d8:d1:fd:2b:ab:67:87: fe:d8:38:a6:91:05:5e:17:e5:e5:ad:ab:12:09:00:ee:55:4c: a9:96:63:81:7b:28:ca:5f:df:5e:16:0f:a2:50:94:eb:c3:db: 5c:37:20:a3:e0:85:79:46:3a:b2:1a:45:e8:a4:76:aa:43:8b: 15:a2:31:d7:13:c4:5d:35:2e:40:11:0e:29:f8:f9:0a:37:9b: ce:b1:ce:76:65:5f:44:21:89:54:01:dd:fa:2d:4d:25:06:2b: cf:b1:d8:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusiNU6LChPj2biAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2M4MDZhMjctMzMyNC00YTkzLWE2ZjYtOTZlNTNjMGNmNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndNUpInAPwqQ/kYZ2yxn21+RYFBFSST22DRh 1TJvS0wfgr6pXumjzOYKeZbf0NsrhygTf1ZSpmck9yTyPcIwDpcZOw13TtCeoGUL +vs+DGV83UntvqD+ggGM2CLofyuPeV5IqwjRu8E1okaaYPZlbWmGdIYo+qfnqWYu tQusfsTBtSTyeY8yUHa1oH8NZByymDWyTA6OZsaYsF66L2JCoPV1XKpIT6SGp35h YhE6O7LQiIIIaP7b7Ei3fnOnxS5zqQH6qjyvYKpPmAm3SHN1Q7MJzAMEjHVYNWw4 tHb5lB2wgeNiDpkHZj12RQEMOEwDpDkBZyaquK8xvdA+TkAQcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9gNTaxpQ4hnDBqS27XxEKcC1wRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGI0YTMxYjUtM2QyZi0z ZmY4LWE3YjgtZGI4OTU5NzJiZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ48qBpvybHQ2zW0yDMfqKdMLokAofCerS+YcJHktu1iaBnTB2cuaReT hYqUbrWEkPSxkvAKVTAPF7UQxGmV+PfGgjfAGC+soTFT5F4ml3y64GEZEAhxgWi5 GjZf3JQ7Heyu97IelDCNEdUqlMWfydzVUVjBxe4Prb1yCDWUm8SeEj3d2LE33OKa L/2w1jT3kKTl9YUGTbdG+84r2NH9K6tnh/7YOKaRBV4X5eWtqxIJAO5VTKmWY4F7 KMpf314WD6JQlOvD21w3IKPghXlGOrIaReikdqpDixWiMdcTxF01LkARDin4+Qo3 m86xznZlX0QhiVQB3fotTSUGK8+x2Jw= -----END CERTIFICATE-----Generated at Sun Apr 27 07:41:05 2025 by rpki-client