$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33a7e675-8cbb-3daa-b083-db5305d2ba97.roa File: 33a7e675-8cbb-3daa-b083-db5305d2ba97.roa (raw, json) Hash identifier: IhhAouk1kR1+MdwdVM/8kunfNfWHLtZ6tlc1vsLN3s4= Subject key identifier: A8:FD:86:E2:0C:CA:BE:41:B7:27:71:2D:BE:D2:14:C6:82:95:ED:5D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A03A569752EF19DAEDA4B7680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33a7e675-8cbb-3daa-b083-db5305d2ba97.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 15169 IP address blocks: 172.217.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:69:75:2e:f1:9d:ae:da:4b:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=53f739f3-e735-4199-8814-f9200a003a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8d:97:11:b0:f5:87:b0:f2:3e:9e:9f:f8:c5: d6:2b:cf:d1:3a:54:c8:8a:b5:42:7f:88:96:dd:27: 7e:37:5f:5a:ad:50:bc:cb:82:fd:e8:28:4c:40:20: a9:77:16:ce:5a:43:f6:cd:ef:2b:d8:a2:bb:41:89: e2:cb:ed:cb:99:79:53:fb:4e:c8:d8:54:70:63:41: 74:a3:56:6b:b9:29:dc:45:c9:fb:55:3b:0a:7f:e3: 3f:1d:32:9c:70:1b:8e:d5:37:ae:9f:cb:46:97:13: b5:0f:37:42:5c:48:18:b8:15:40:06:48:6d:e5:d1: 52:a6:86:ca:55:15:ee:56:10:d6:d1:5b:d5:40:3e: f3:d0:b3:a5:18:bd:1c:da:1b:da:12:ca:5d:c5:68: 1b:7b:bc:23:f9:f5:1c:68:7c:fa:b6:3a:a2:b3:36: 82:4f:32:ac:e9:3a:5c:16:13:df:d1:8f:97:d6:e7: 8c:b9:05:a6:42:46:9a:fd:da:69:41:18:eb:b2:e7: ed:8a:50:09:1b:d9:c9:aa:6e:96:bf:22:4d:68:57: d5:9e:0c:35:38:d0:7c:be:ed:65:7f:51:e3:fa:88: 36:92:5c:94:3d:33:5b:b4:2a:3d:78:0d:ac:f0:a9: d5:75:d8:98:22:ac:45:ab:8f:dd:d8:f8:1a:4e:c9: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FD:86:E2:0C:CA:BE:41:B7:27:71:2D:BE:D2:14:C6:82:95:ED:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33a7e675-8cbb-3daa-b083-db5305d2ba97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:86:87:04:0b:07:51:63:31:5d:a9:58:94:bb:2a:6a:12:7e: a6:37:5b:e3:4a:f7:eb:28:05:53:80:70:de:20:2d:bc:2c:45: b6:06:69:10:2f:d5:f0:d6:10:07:4b:4b:14:97:51:fb:3a:d7: 4d:db:01:4e:26:c5:ec:56:2b:69:48:a2:04:7c:2e:ed:f3:ad: 93:a8:2e:3b:23:23:c9:46:06:c3:c2:81:8e:3f:bc:93:38:ea: 90:e6:45:df:73:8c:85:36:d5:a1:5a:25:a3:ff:71:3e:37:f9: eb:3f:87:00:db:c5:ae:eb:94:17:de:67:b7:fb:43:50:a5:7b: d4:fb:a4:89:93:f0:e5:ba:8a:b6:02:de:6c:c0:f6:83:fb:73: b6:14:17:e7:45:fb:44:4c:77:52:93:8c:43:4a:89:f8:30:29: d6:b2:ce:2d:0f:7e:2d:34:4d:dd:42:86:26:99:79:36:cc:54: 64:e3:af:13:d2:6d:53:c0:43:17:a1:03:de:3c:c2:c1:2e:f4: 97:01:44:48:8d:0b:f2:83:84:a7:ea:18:a1:24:40:c5:08:57: ac:8a:8a:41:f9:17:7e:a9:ae:e8:70:f6:cf:ec:3f:3c:15:4b: 2d:e9:02:ab:dc:d5:58:20:60:2c:6f:4d:73:aa:e7:27:ee:9f: 92:00:ce:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpWl1LvGdrtpLdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NTNmNzM5ZjMtZTczNS00MTk5LTg4MTQtZjkyMDBhMDAzYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI2XEbD1h7DyPp6f+MXWK8/ROlTIirVCf4iW 3Sd+N19arVC8y4L96ChMQCCpdxbOWkP2ze8r2KK7QYniy+3LmXlT+07I2FRwY0F0 o1ZruSncRcn7VTsKf+M/HTKccBuO1Teun8tGlxO1DzdCXEgYuBVABkht5dFSpobK VRXuVhDW0VvVQD7z0LOlGL0c2hvaEspdxWgbe7wj+fUcaHz6tjqiszaCTzKs6Tpc FhPf0Y+X1ueMuQWmQkaa/dppQRjrsuftilAJG9nJqm6WvyJNaFfVngw1ONB8vu1l f1Hj+og2klyUPTNbtCo9eA2s8KnVddiYIqxFq4/d2PgaTsmF+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj9huIMyr5BtydxLb7SFMaCle1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzNhN2U2NzUtOGNiYi0z ZGFhLWIwODMtZGI1MzA1ZDJiYTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaGhwQLB1FjMV2pWJS7KmoSfqY3W+NK9+soBVOAcN4gLbwsRbYGaRAv 1fDWEAdLSxSXUfs6103bAU4mxexWK2lIogR8Lu3zrZOoLjsjI8lGBsPCgY4/vJM4 6pDmRd9zjIU21aFaJaP/cT43+es/hwDbxa7rlBfeZ7f7Q1Cle9T7pImT8OW6irYC 3mzA9oP7c7YUF+dF+0RMd1KTjENKifgwKdayzi0Pfi00Td1ChiaZeTbMVGTjrxPS bVPAQxehA948wsEu9JcBREiNC/KDhKfqGKEkQMUIV6yKikH5F36pruhw9s/sPzwV Sy3pAqvc1VggYCxvTXOq5yfun5IAzuA= -----END CERTIFICATE-----Generated at Mon Jun 16 12:25:28 2025 by rpki-client