$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47c53405-00ff-30ef-9681-07bd496100de.roa File: 47c53405-00ff-30ef-9681-07bd496100de.roa (raw, json) Hash identifier: 9WoSIRQIoSo7nRqkZvfC0y0odhOBKDupmnQ8asNbfrU= Subject key identifier: D1:68:31:66:65:36:90:7C:26:6A:62:E5:67:64:66:DA:85:C8:70:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA35E09A05703D86E59520 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47c53405-00ff-30ef-9681-07bd496100de.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:35:e0:9a:05:70:3d:86:e5:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=73736ecb-e27d-4a56-a968-ad81808d5f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:65:86:af:f5:6a:b0:40:12:5c:f2:4b:11: 72:8e:e8:dd:8c:21:26:37:20:91:52:c8:1d:d8:9c: eb:a5:cf:6b:25:64:4c:cb:af:59:c3:e6:ab:d2:c1: 6f:ab:9a:c8:47:0c:1b:db:df:38:80:b8:1d:43:64: 23:42:5d:17:2a:73:bf:e1:b3:47:22:c4:84:2c:77: 27:fa:9f:31:c6:19:5f:36:e4:2b:61:00:ad:7e:df: 37:87:b8:91:f7:bd:7b:12:99:2d:cc:60:70:85:1c: ab:e8:58:b3:f4:5d:55:ca:5f:dc:fd:2f:e6:a5:13: 0f:a2:a8:f5:23:02:5e:d1:25:aa:ba:e5:2e:6b:17: 41:90:80:74:0b:7b:04:73:86:69:b9:e1:be:33:e6: cc:21:4a:78:e9:1a:f0:db:88:77:4d:d4:a4:a2:b2: f3:a6:57:ff:b7:15:7b:36:bf:2e:43:3e:e4:c7:34: 6f:22:3f:e9:c6:17:e2:20:cc:ca:d3:42:f9:f0:7f: 76:1a:60:64:76:39:65:e6:52:dd:af:e8:a6:f9:c8: e3:c7:9a:ad:e3:7d:45:41:58:59:75:d0:f0:4d:fb: 8f:8f:a5:aa:16:69:ea:1e:cd:e0:a8:22:42:74:c4: fb:ca:fb:ab:54:e9:87:8f:4e:7c:da:d8:c3:5b:6f: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:68:31:66:65:36:90:7C:26:6A:62:E5:67:64:66:DA:85:C8:70:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47c53405-00ff-30ef-9681-07bd496100de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:dd:12:30:79:15:2d:5a:fb:b7:10:68:f3:18:b3:e5:32:c3: 73:d9:0b:1d:39:1b:19:f8:bf:3b:b3:56:68:64:13:f5:a3:eb: ad:5b:4b:c7:db:ff:cf:6c:a2:b1:e6:c3:cb:ad:ec:aa:43:fb: 8b:6d:ab:26:ff:7c:6b:26:8b:1d:12:76:85:50:18:b3:7e:18: 52:ba:ba:2a:3f:d2:e0:d8:77:a9:74:55:54:27:0e:b2:b7:dc: 93:64:a3:87:24:f5:b8:f4:7a:ff:bc:9b:db:57:d4:4d:06:22: 38:d5:07:8d:67:8d:ff:e1:21:f9:17:14:f8:fe:62:7a:85:25: 33:e8:a7:67:d2:c2:12:16:76:d7:a3:30:a9:6b:9b:53:6c:51: 88:cd:aa:e9:8b:a9:f2:a9:f4:48:ac:40:8c:bb:64:1e:38:3a: dd:5c:6b:b3:ce:b5:b2:1f:38:b0:28:cd:3c:f2:dd:c0:a1:b1: 86:f3:47:d7:6e:61:2d:40:b5:87:a3:40:f6:6c:2d:28:5b:44: 2e:27:8b:f2:a0:23:23:a8:53:0e:ab:fb:a5:8e:e1:18:c6:d6: b0:d2:8e:45:7e:33:4e:06:4e:70:f5:1a:b0:26:3b:fd:28:98: 96:23:3b:83:85:7d:6a:2b:32:1d:c6:77:5d:0d:3c:bc:42:3c: ff:10:13:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jXgmgVwPYbllSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NzM3MzZlY2ItZTI3ZC00YTU2LWE5NjgtYWQ4MTgwOGQ1ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujRlhq/1arBAElzySxFyjujdjCEmNyCRUsgd 2Jzrpc9rJWRMy69Zw+ar0sFvq5rIRwwb2984gLgdQ2QjQl0XKnO/4bNHIsSELHcn +p8xxhlfNuQrYQCtft83h7iR9717EpktzGBwhRyr6Fiz9F1Vyl/c/S/mpRMPoqj1 IwJe0SWquuUuaxdBkIB0C3sEc4ZpueG+M+bMIUp46Rrw24h3TdSkorLzplf/txV7 Nr8uQz7kxzRvIj/pxhfiIMzK00L58H92GmBkdjll5lLdr+im+cjjx5qt431FQVhZ ddDwTfuPj6WqFmnqHs3gqCJCdMT7yvurVOmHj0582tjDW2+hgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFoMWZlNpB8Jmpi5WdkZtqFyHAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDdjNTM0MDUtMDBmZi0z MGVmLTk2ODEtMDdiZDQ5NjEwMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHdEjB5FS1a+7cQaPMYs+Uyw3PZCx05Gxn4vzuzVmhkE/Wj661bS8fb /89sorHmw8ut7KpD+4ttqyb/fGsmix0SdoVQGLN+GFK6uio/0uDYd6l0VVQnDrK3 3JNko4ck9bj0ev+8m9tX1E0GIjjVB41njf/hIfkXFPj+YnqFJTPop2fSwhIWdtej MKlrm1NsUYjNqumLqfKp9EisQIy7ZB44Ot1ca7POtbIfOLAozTzy3cChsYbzR9du YS1AtYejQPZsLShbRC4ni/KgIyOoUw6r+6WO4RjG1rDSjkV+M04GTnD1GrAmO/0o mJYjO4OFfWorMh3Gd10NPLxCPP8QE5I= -----END CERTIFICATE-----Generated at Sun Jun 15 19:15:08 2025 by rpki-client