$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa File: 3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa (raw, json) Hash identifier: JM3ImPCq/RALynPV0Lv0Vdv1vSQNApWo08ljRpmcUlk= Subject key identifier: E7:BC:9D:60:11:23:C6:B6:2A:C4:DE:D9:0C:1A:49:FF:26:DC:8D:A7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA2DF271A960F376A5B400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2d:f2:71:a9:60:f3:76:a5:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=41d97ed3-74ff-400f-af3a-3e60a1e937de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:24:ef:f6:c2:f7:4f:8a:40:d9:70:78:1e: 39:a0:b7:5f:1e:e1:0f:7a:66:09:d2:24:60:78:1a: 96:7e:9f:7c:9f:b3:4e:a9:2e:23:eb:a8:45:40:52: c5:f3:10:a6:ef:d2:27:9a:5b:65:0e:12:ad:74:9d: 03:e9:ff:55:08:95:a5:2c:01:54:5f:1d:af:2f:40: 5d:e3:b2:e2:62:5f:53:1a:59:ed:ca:2e:21:54:75: c1:c7:15:2c:9b:aa:01:f3:cb:d8:9a:f6:33:c7:02: 59:40:57:a4:11:bb:6b:e6:a8:0e:62:73:4e:e1:c9: f8:37:e6:4e:d5:b3:86:09:af:03:65:91:4e:49:b9: 02:58:9e:28:1f:90:c9:15:fe:99:9e:9d:3c:58:df: 17:97:92:44:2c:f2:ef:92:22:6f:27:5a:ac:84:1f: c3:1c:51:1a:7c:31:8f:0b:2a:d7:55:e8:e3:bd:c7: e9:f1:45:7e:f9:d7:36:1b:39:77:d9:50:7e:36:88: 0c:f9:2f:8b:d7:d4:06:d0:32:af:8a:07:b8:de:ca: 62:2a:88:0a:c5:7b:2d:0a:28:ce:7a:34:03:63:28: 1d:7c:93:4b:78:be:c1:60:47:80:5d:02:2f:cd:63: 12:ab:37:b9:63:f4:ba:72:f7:3e:ca:bb:67:4d:c4: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BC:9D:60:11:23:C6:B6:2A:C4:DE:D9:0C:1A:49:FF:26:DC:8D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:29:86:99:45:58:b0:51:4e:cd:a6:d2:62:ad:52:8f:fa:46: 75:6b:d6:e7:ef:02:a8:e3:9a:fe:e2:87:87:31:ea:49:3c:24: f2:bc:41:6e:84:3c:11:7f:bc:7f:dc:68:44:7b:80:b4:5a:df: 5f:ee:09:6f:d0:c9:cd:56:c7:95:b5:a8:f2:38:1c:f0:cb:be: a4:bf:8d:17:47:e7:bd:ff:41:fe:7b:39:a8:3a:a4:dd:06:6a: 64:4e:07:d8:be:5c:37:12:28:79:a4:62:9c:79:0f:67:66:3e: a5:6a:85:2a:6c:85:b9:dc:1a:94:f2:b7:fd:c8:4f:47:79:5f: 33:89:50:4d:e2:fa:80:70:da:b4:dc:4f:55:e3:68:bd:a8:bd: 81:b2:85:c3:2d:16:56:cf:59:6f:9c:22:15:e3:6a:04:0a:66: c0:1d:45:3a:d7:d1:be:62:3c:fd:61:e5:9a:86:f1:75:b2:fe: 16:c3:1a:cd:81:e3:53:5f:15:e9:83:4b:33:f7:df:93:54:a1: 29:aa:c5:f1:9c:76:76:46:8b:cb:e2:5a:2f:d2:b4:19:70:4a: 38:01:ea:be:68:b7:81:89:31:2c:37:ba:a7:5c:ff:4a:6b:da: 3b:86:95:ca:e2:03:46:60:a7:13:c1:51:ce:2d:b5:9d:bc:9b: 95:47:05:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i3ycalg83altAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NDFkOTdlZDMtNzRmZi00MDBmLWFmM2EtM2U2MGExZTkzN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArskk7/bC90+KQNlweB45oLdfHuEPemYJ0iRg eBqWfp98n7NOqS4j66hFQFLF8xCm79InmltlDhKtdJ0D6f9VCJWlLAFUXx2vL0Bd 47LiYl9TGlntyi4hVHXBxxUsm6oB88vYmvYzxwJZQFekEbtr5qgOYnNO4cn4N+ZO 1bOGCa8DZZFOSbkCWJ4oH5DJFf6Znp08WN8Xl5JELPLvkiJvJ1qshB/DHFEafDGP CyrXVejjvcfp8UV++dc2Gzl32VB+NogM+S+L19QG0DKvige43spiKogKxXstCijO ejQDYygdfJNLeL7BYEeAXQIvzWMSqze5Y/S6cvc+yrtnTcQcBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe8nWARI8a2KsTe2QwaSf8m3I2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2RkYTlmYTgtYjY5Yi0z Y2I0LTliZjEtNTJhZGY5OGYxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIphplFWLBRTs2m0mKtUo/6RnVr1ufvAqjjmv7ih4cx6kk8JPK8QW6E PBF/vH/caER7gLRa31/uCW/Qyc1Wx5W1qPI4HPDLvqS/jRdH573/Qf57Oag6pN0G amROB9i+XDcSKHmkYpx5D2dmPqVqhSpshbncGpTyt/3IT0d5XzOJUE3i+oBw2rTc T1XjaL2ovYGyhcMtFlbPWW+cIhXjagQKZsAdRTrX0b5iPP1h5ZqG8XWy/hbDGs2B 41NfFemDSzP335NUoSmqxfGcdnZGi8viWi/StBlwSjgB6r5ot4GJMSw3uqdc/0pr 2juGlcriA0ZgpxPBUc4ttZ28m5VHBcM= -----END CERTIFICATE-----Generated at Sun Jun 15 23:10:59 2025 by rpki-client