$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa File: 65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa (raw, json) Hash identifier: 7MHZHChQTybJtxpGgvnaChPeQSgEjH6nKQ5z/WQZ7k4= Subject key identifier: A8:6B:32:90:26:6D:BB:3D:E8:BE:9D:BE:7A:39:81:10:B3:59:0C:72 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC053492E8718F14ED1C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c0:53:49:2e:87:18:f1:4e:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=091fc706-85ea-46d5-b4b8-29502be07849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:ef:01:bb:33:b3:21:83:e4:4b:cc:1c:73: d6:11:e7:ba:d1:e2:39:5b:c9:87:1c:66:47:f6:89: 3d:31:81:f9:5c:0d:3d:03:12:b3:6c:a4:9f:a4:68: a3:42:6e:88:07:e3:a9:c1:7d:90:fc:c0:13:b3:1f: 3f:b9:19:7d:a8:95:e5:91:68:ce:fa:46:b0:19:54: 87:d2:76:79:cd:71:b8:36:9d:1d:ee:14:4e:6c:7c: 38:29:39:8b:62:07:46:56:7e:94:85:ca:f9:d0:c4: 6f:b4:ca:b9:db:f0:49:62:67:04:aa:e9:05:25:5d: aa:7f:dd:aa:f7:e5:54:55:00:c2:2a:fd:95:b7:50: 3d:a3:7e:af:b7:26:f6:b2:33:14:33:bb:c9:fc:05: de:4c:4b:9f:65:ab:50:52:5d:0d:2d:5e:06:9a:01: 76:89:0b:8c:ab:9b:36:1e:1c:a9:f1:77:b9:44:4c: 5d:59:f7:81:21:cc:2d:3e:5a:ee:a9:a6:06:71:0a: 18:7f:ae:67:f7:30:8f:23:00:43:7a:03:60:db:45: b4:d6:b6:57:b4:88:52:55:9f:4c:f7:6e:e1:25:a0: 22:1e:5d:6f:e0:4e:d9:ab:c5:32:93:2f:7d:1d:50: 01:f6:49:b5:b5:8c:a8:73:19:7b:18:74:7b:4d:0d: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6B:32:90:26:6D:BB:3D:E8:BE:9D:BE:7A:39:81:10:B3:59:0C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d6:34:e7:3c:1a:83:8d:33:23:32:88:7c:eb:ea:9d:f0:9f: 25:57:7e:97:d3:5c:3f:a7:4c:7d:86:92:46:c7:45:43:fe:54: 58:68:73:a3:d1:48:23:03:00:51:10:ee:9d:14:55:78:bd:f4: a2:4f:c8:8d:c6:ab:a1:28:01:76:2a:61:67:b8:4f:f2:37:07: 18:d1:5c:b8:59:03:29:ea:86:f2:53:62:54:0a:38:9a:3f:50: f4:b6:97:e6:23:8e:02:3a:5d:c4:72:42:8c:c7:4b:19:d1:78: b2:79:88:bb:f9:72:bf:2f:2d:4b:93:c8:2a:f8:21:43:85:9e: 0a:a6:ae:f1:ad:09:75:f5:41:21:b5:a7:3e:cf:95:f7:fa:1c: f2:e2:05:5e:e8:34:1e:c5:8b:7c:d0:14:23:ea:01:15:b2:61: 5f:42:df:63:7a:ed:ef:c0:96:6f:d7:95:6d:be:3b:c6:d7:98: f9:4a:aa:87:99:96:01:04:6b:0d:1f:df:b9:0b:9b:e6:4a:75: 5f:66:1c:c3:56:a1:71:92:a7:9f:ea:b5:30:07:7f:40:88:75: ae:df:cc:32:c7:bb:16:16:2a:f3:6c:f0:21:4d:cc:c8:1b:74: d5:96:b6:c4:51:de:2c:23:01:4a:1b:11:3e:c2:61:11:fb:e8: 33:a8:2f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusBTSS6HGPFO0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDkxZmM3MDYtODVlYS00NmQ1LWI0YjgtMjk1MDJiZTA3ODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWrvAbszsyGD5EvMHHPWEee60eI5W8mHHGZH 9ok9MYH5XA09AxKzbKSfpGijQm6IB+OpwX2Q/MATsx8/uRl9qJXlkWjO+kawGVSH 0nZ5zXG4Np0d7hRObHw4KTmLYgdGVn6Uhcr50MRvtMq52/BJYmcEqukFJV2qf92q 9+VUVQDCKv2Vt1A9o36vtyb2sjMUM7vJ/AXeTEufZatQUl0NLV4GmgF2iQuMq5s2 Hhyp8Xe5RExdWfeBIcwtPlruqaYGcQoYf65n9zCPIwBDegNg20W01rZXtIhSVZ9M 927hJaAiHl1v4E7Zq8Uyky99HVAB9km1tYyocxl7GHR7TQ0jewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhrMpAmbbs96L6dvno5gRCzWQxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjVhNmU1YmEtYzA1NC0z YTA0LThjM2YtMmQ0ZGUxMWU5NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7WNOc8GoONMyMyiHzr6p3wnyVXfpfTXD+nTH2GkkbHRUP+VFhoc6PR SCMDAFEQ7p0UVXi99KJPyI3Gq6EoAXYqYWe4T/I3BxjRXLhZAynqhvJTYlQKOJo/ UPS2l+YjjgI6XcRyQozHSxnReLJ5iLv5cr8vLUuTyCr4IUOFngqmrvGtCXX1QSG1 pz7Plff6HPLiBV7oNB7Fi3zQFCPqARWyYV9C32N67e/Alm/XlW2+O8bXmPlKqoeZ lgEEaw0f37kLm+ZKdV9mHMNWoXGSp5/qtTAHf0CIda7fzDLHuxYWKvNs8CFNzMgb dNWWtsRR3iwjAUobET7CYRH76DOoL0Q= -----END CERTIFICATE-----Generated at Sat Apr 26 20:48:26 2025 by rpki-client