$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa File: 5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa (raw, json) Hash identifier: b7PYdArnRxZ5YODZyZQLRMUXwez9UJzjdnxcVTqTk60= Subject key identifier: 48:5A:6C:E9:56:54:AB:D9:1F:8D:0A:E2:06:B0:DA:74:12:F9:13:50 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB73AD128C545F1F62B180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:73:ad:12:8c:54:5f:1f:62:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=13f6778a-4f51-4874-8f89-90e32edfde08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:9f:a9:2c:97:47:13:1b:11:06:a7:7d:2e: dd:d1:3a:8b:f2:29:3d:38:ab:75:99:10:c8:55:12: 85:54:08:40:f1:e8:fc:c2:9b:f5:f3:df:02:00:8c: f7:f3:a0:e1:f3:c2:bc:93:89:84:fa:07:66:6b:b5: 8e:db:e8:14:70:5c:52:c1:c3:4b:55:ae:54:c3:62: 00:df:b3:0c:a8:5a:e6:06:d8:cf:32:c7:e4:91:05: 6f:15:87:0a:d7:5a:e6:95:81:2b:4e:2c:c5:c2:b1: 18:6d:99:8b:7e:de:0c:71:5f:83:b0:d4:64:9f:45: a3:b4:3f:d1:db:ed:f2:f7:01:d4:8d:26:be:ec:93: 5e:9c:34:d9:74:4f:d2:94:52:d5:d9:4f:b3:1c:f7: e4:71:ca:dd:e9:7b:da:e4:55:71:d6:1e:f2:01:13: 68:0b:2a:23:38:02:08:92:60:81:61:0b:99:4a:71: 29:5f:ff:62:0d:4d:67:16:12:c6:29:cb:67:06:ee: 0b:21:ef:5e:5f:b6:a5:68:38:c2:d4:4e:4b:75:d7: fd:37:33:f3:0f:62:1f:01:ce:b7:c8:70:ac:9c:cf: ad:c6:58:e6:a1:e1:6b:63:bf:a1:aa:6d:c8:66:4f: b4:89:8d:99:bf:ee:06:e8:f3:74:a2:de:e9:3d:34: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5A:6C:E9:56:54:AB:D9:1F:8D:0A:E2:06:B0:DA:74:12:F9:13:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:68:4b:57:56:b4:97:56:08:6a:5e:f0:57:0e:42:b2:b1:2b: d1:69:de:fd:15:f9:b3:2c:f3:39:f1:4c:bf:f2:27:23:45:30: ef:86:0a:04:83:e1:2d:04:be:9c:6d:10:f6:c1:84:f9:cc:8d: 5e:32:0a:28:3a:35:ce:1b:c5:0f:b7:c0:b4:43:88:47:d3:60: 2c:a9:e1:a3:99:d5:5f:7d:10:15:aa:99:ab:24:ef:1b:79:76: 9d:bb:ff:96:89:6c:a6:71:3a:14:cc:cd:c1:c7:ec:6b:f1:db: 20:09:d6:62:5e:f0:6a:6a:44:68:03:68:6e:ca:9e:64:28:70: 1a:5c:5a:5e:3e:7c:8b:c7:86:57:94:13:c6:0c:81:35:7e:12: 59:f5:1a:55:97:74:5a:00:d6:e0:18:9e:18:8c:69:da:a7:81: f9:5d:37:0d:65:29:35:c6:d2:3c:03:69:3a:10:8e:dd:d0:a4: 1e:72:80:b0:bc:d2:61:7a:18:9f:b7:42:e8:67:be:ad:b6:c3: 5b:e7:7e:4d:ac:c2:bb:24:83:ba:90:02:39:e6:e5:41:b1:5f: c2:b3:6d:da:17:7d:54:43:3e:96:00:0e:3d:ab:8f:f9:0d:94: 4b:63:23:da:82:3b:8b:44:d5:e7:54:00:50:89:73:62:d5:53: 1a:0d:16:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3OtEoxUXx9isYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTNmNjc3OGEtNGY1MS00ODc0LThmODktOTBlMzJlZGZkZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWqfqSyXRxMbEQanfS7d0TqL8ik9OKt1mRDI VRKFVAhA8ej8wpv1898CAIz386Dh88K8k4mE+gdma7WO2+gUcFxSwcNLVa5Uw2IA 37MMqFrmBtjPMsfkkQVvFYcK11rmlYErTizFwrEYbZmLft4McV+DsNRkn0WjtD/R 2+3y9wHUjSa+7JNenDTZdE/SlFLV2U+zHPfkccrd6Xva5FVx1h7yARNoCyojOAII kmCBYQuZSnEpX/9iDU1nFhLGKctnBu4LIe9eX7alaDjC1E5Lddf9NzPzD2IfAc63 yHCsnM+txljmoeFrY7+hqm3IZk+0iY2Zv+4G6PN0ot7pPTRf8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhabOlWVKvZH40K4gaw2nQS+RNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWQ5YjVhNzctMjBhNC0z NWEyLTk1ZDgtNDM4MGRkNzRhMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBoS1dWtJdWCGpe8FcOQrKxK9Fp3v0V+bMs8znxTL/yJyNFMO+GCgSD 4S0EvpxtEPbBhPnMjV4yCig6Nc4bxQ+3wLRDiEfTYCyp4aOZ1V99EBWqmask7xt5 dp27/5aJbKZxOhTMzcHH7Gvx2yAJ1mJe8GpqRGgDaG7KnmQocBpcWl4+fIvHhleU E8YMgTV+Eln1GlWXdFoA1uAYnhiMadqngfldNw1lKTXG0jwDaToQjt3QpB5ygLC8 0mF6GJ+3Quhnvq22w1vnfk2swrskg7qQAjnm5UGxX8KzbdoXfVRDPpYADj2rj/kN lEtjI9qCO4tE1edUAFCJc2LVUxoNFlU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:33 2025 by rpki-client