$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa File: 42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa (raw, json) Hash identifier: D31E1dHSQXZsxDWzh8aeEaHTdk2YbkdqD8JP4N/L28o= Subject key identifier: E7:A0:6B:ED:0D:E7:C7:0D:7F:17:00:12:81:47:5C:BF:FC:EE:B1:A6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA37DD1AC23EDE2E527180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:37:dd:1a:c2:3e:de:2e:52:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=10861f90-53a2-4181-80dd-7bd53031088b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:88:58:b6:4b:cf:1a:9d:51:b1:0c:7e:c5:f8: eb:30:aa:a9:1a:42:ee:1a:23:c7:f0:32:e7:76:c5: ab:9f:43:44:eb:af:fc:05:86:d7:93:b7:08:18:51: 06:20:c3:16:09:c0:6a:1c:d6:9b:6d:d5:76:9e:74: c1:46:a1:f5:a8:77:9e:80:70:d3:e6:f5:af:51:eb: b6:44:d3:f2:bf:aa:15:36:b7:70:7a:2f:ee:2d:92: 43:81:10:18:ab:9f:1b:71:bf:b3:fa:a9:c3:d8:17: 11:64:99:86:d1:db:0c:fb:56:17:c0:14:3b:d7:e4: 86:88:32:f8:85:59:12:4c:38:81:15:d2:53:34:41: 5e:a1:bc:b3:8b:7b:38:dc:e7:e8:cb:f0:32:43:28: 1f:7a:7b:d9:1a:7d:76:9c:4c:78:24:f4:75:db:85: 24:04:9f:82:10:8b:8b:29:ed:e2:9d:8a:af:e7:7f: a2:6d:c1:70:97:1f:0c:2d:bc:56:a6:77:a9:ef:88: 8f:30:0f:77:a9:43:50:6d:90:69:05:3c:38:f3:74: d5:97:e9:47:99:6c:b3:8f:36:74:be:e8:59:62:cd: d2:96:09:28:97:d6:2f:fd:82:14:4c:dc:e0:74:cb: c9:84:bd:9f:7d:91:7c:28:e4:70:31:90:84:fd:52: 03:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A0:6B:ED:0D:E7:C7:0D:7F:17:00:12:81:47:5C:BF:FC:EE:B1:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d6:e9:99:8a:77:e8:c9:a8:75:03:ea:41:a6:5f:3f:8f:03: ce:ad:4b:a6:24:e9:d1:6c:8c:45:51:16:82:79:ac:b6:08:54: 14:ca:c2:f5:d9:a6:d3:ca:58:ac:57:85:eb:b5:a7:a7:6a:a7: e1:6b:48:82:20:14:2f:6d:61:a0:46:29:2b:1e:76:b9:12:bf: 8c:56:5d:86:36:47:ec:50:61:54:55:fb:42:22:75:68:cd:2a: 6e:35:9e:c6:4b:39:6f:3b:19:29:76:4f:4a:9d:70:6a:7b:b9: 53:f5:fa:c5:eb:7c:e6:df:6a:24:47:ed:e9:89:7e:99:e4:f3: f6:cc:59:12:31:ea:ec:fb:e7:f6:65:f8:fd:b3:d8:df:70:5d: 93:a9:4a:09:6c:af:fd:fc:7d:05:96:47:13:94:4c:2a:f5:c9: d1:66:d8:70:02:f4:1a:51:3b:d3:96:70:54:f6:39:2a:27:7e: 37:12:28:3f:4d:31:3f:e1:28:f3:54:98:23:f4:7f:66:e0:11: b4:e9:b6:0b:8b:79:3d:e3:d9:72:98:02:26:2f:d4:4f:6f:86: 55:d3:44:26:11:27:e7:ca:7f:b0:9a:a2:5f:72:24:c1:c5:ca: 22:13:e5:d3:63:bf:ad:6c:32:43:c9:58:38:16:01:ef:e9:3f: af:a8:64:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jfdGsI+3i5ScYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MTA4NjFmOTAtNTNhMi00MTgxLTgwZGQtN2JkNTMwMzEwODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIhYtkvPGp1RsQx+xfjrMKqpGkLuGiPH8DLn dsWrn0NE66/8BYbXk7cIGFEGIMMWCcBqHNabbdV2nnTBRqH1qHeegHDT5vWvUeu2 RNPyv6oVNrdwei/uLZJDgRAYq58bcb+z+qnD2BcRZJmG0dsM+1YXwBQ71+SGiDL4 hVkSTDiBFdJTNEFeobyzi3s43Ofoy/AyQygfenvZGn12nEx4JPR124UkBJ+CEIuL Ke3inYqv53+ibcFwlx8MLbxWpnep74iPMA93qUNQbZBpBTw483TVl+lHmWyzjzZ0 vuhZYs3Slgkol9Yv/YIUTNzgdMvJhL2ffZF8KORwMZCE/VIDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOega+0N58cNfxcAEoFHXL/87rGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDJhZmNlYmItMTVkYy0z OGE5LWE2MGEtMjc2YTllYmYxZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3W6ZmKd+jJqHUD6kGmXz+PA86tS6Yk6dFsjEVRFoJ5rLYIVBTKwvXZ ptPKWKxXheu1p6dqp+FrSIIgFC9tYaBGKSsedrkSv4xWXYY2R+xQYVRV+0IidWjN Km41nsZLOW87GSl2T0qdcGp7uVP1+sXrfObfaiRH7emJfpnk8/bMWRIx6uz75/Zl +P2z2N9wXZOpSglsr/38fQWWRxOUTCr1ydFm2HAC9BpRO9OWcFT2OSonfjcSKD9N MT/hKPNUmCP0f2bgEbTptguLeT3j2XKYAiYv1E9vhlXTRCYRJ+fKf7Caol9yJMHF yiIT5dNjv61sMkPJWDgWAe/pP6+oZAA= -----END CERTIFICATE-----Generated at Sun Jun 15 16:04:09 2025 by rpki-client