$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa File: 661fdda3-d9b9-336b-868c-5694c1d1cfea.roa (raw, json) Hash identifier: PpxwA+cAUuNoeL6w7rv4SwEu7tGoBXuMx4Ku8E3mgdM= Subject key identifier: 39:7F:14:19:9A:9D:45:BC:08:AA:46:34:79:41:5A:51:15:1A:55:98 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD1EA7FBB702269135AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d1:ea:7f:bb:70:22:69:13:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d5eb6a76-304c-4d1c-9c66-e01b78a41511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:88:a7:fa:a7:a3:49:27:dd:0b:ec:ee:87: b6:9f:bc:57:c3:76:c1:6d:3d:13:89:fb:1c:51:5a: c5:fb:17:cb:b9:08:be:04:06:67:c6:f9:00:e9:4d: c2:09:29:47:e8:b7:ce:b8:a4:68:81:dd:69:4e:7f: 87:45:b4:ba:b2:ac:2f:2d:57:90:f7:72:fa:36:f4: 76:c7:af:fe:20:b5:db:5c:47:c2:74:2e:37:9b:2e: 0e:5b:e9:29:ba:8e:84:b0:38:d4:7f:fc:ed:a8:0a: bb:56:dc:4c:84:7a:a7:d8:73:63:e1:e2:2d:2f:ad: f3:d9:02:ec:cf:2b:3d:d3:e0:62:ad:f4:2a:9d:2f: d0:de:14:78:65:e3:1c:55:98:51:e7:97:78:61:dc: c0:f2:10:47:e4:0c:4b:42:16:d3:b6:d9:aa:84:54: cf:1f:a4:db:c6:33:31:f7:71:bd:e0:e4:a5:78:4f: 4e:83:ee:1d:f8:72:50:9f:0b:f9:95:ac:ed:26:96: 6d:fb:9c:7a:89:9b:3f:a0:a8:aa:31:e7:28:a8:fa: 11:77:c9:d5:c0:bf:64:91:8c:33:3e:5a:41:ad:09: 24:53:fc:b3:2a:61:c8:83:56:ac:ca:35:d8:b4:03: 3c:e3:20:94:70:ae:ed:90:4d:02:40:36:4a:29:1c: 5d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7F:14:19:9A:9D:45:BC:08:AA:46:34:79:41:5A:51:15:1A:55:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:94:7b:4d:ba:36:ff:3a:b1:48:b5:7e:03:ec:3e:4d:7b:0c: ed:42:83:95:dc:bd:d5:0d:9e:3f:02:d4:4c:4d:28:12:c9:9b: f0:76:0d:44:bd:2f:e3:53:c8:5c:56:35:13:e6:3e:71:6d:15: fc:f6:45:81:2c:4f:a0:cd:6f:39:57:0e:b6:73:ee:66:59:d6: f8:3f:c9:a9:96:cc:85:d2:51:27:ad:c8:85:55:ed:1f:48:0c: ba:ce:27:d7:41:53:0d:a5:74:84:fd:88:aa:4b:c0:83:c1:40: ac:e7:f5:19:0c:67:4c:a4:fe:2e:f4:a8:f7:76:68:4a:99:0f: 0b:d3:58:7b:f1:9e:f9:ae:39:ef:cc:eb:f1:f0:05:c9:14:87: 62:ce:8f:67:84:a8:1b:61:44:a7:61:bc:0c:31:5a:21:e4:34: 8f:ef:96:bd:30:d8:3f:45:9c:47:92:6a:ae:fe:1a:cc:0e:87: e4:3f:2d:73:1f:43:a0:42:23:76:04:aa:34:6e:c7:d0:78:3e: 8f:13:41:50:cd:7c:a8:59:be:42:aa:3b:bd:e4:94:d7:21:a1: 3a:d1:f6:b1:53:a4:f6:87:95:a4:5f:49:9d:c6:34:92:90:a5: e7:10:29:85:d2:2e:c5:55:ee:9d:72:e0:61:cf:75:52:cc:6b: ee:8a:b5:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutHqf7twImkTWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDVlYjZhNzYtMzA0Yy00ZDFjLTljNjYtZTAxYjc4YTQxNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznuIp/qno0kn3Qvs7oe2n7xXw3bBbT0Tifsc UVrF+xfLuQi+BAZnxvkA6U3CCSlH6LfOuKRogd1pTn+HRbS6sqwvLVeQ93L6NvR2 x6/+ILXbXEfCdC43my4OW+kpuo6EsDjUf/ztqAq7VtxMhHqn2HNj4eItL63z2QLs zys90+BirfQqnS/Q3hR4ZeMcVZhR55d4YdzA8hBH5AxLQhbTttmqhFTPH6TbxjMx 93G94OSleE9Og+4d+HJQnwv5laztJpZt+5x6iZs/oKiqMecoqPoRd8nVwL9kkYwz PlpBrQkkU/yzKmHIg1asyjXYtAM84yCUcK7tkE0CQDZKKRxd9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDl/FBmanUW8CKpGNHlBWlEVGlWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjYxZmRkYTMtZDliOS0z MzZiLTg2OGMtNTY5NGMxZDFjZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+Ue026Nv86sUi1fgPsPk17DO1Cg5XcvdUNnj8C1ExNKBLJm/B2DUS9 L+NTyFxWNRPmPnFtFfz2RYEsT6DNbzlXDrZz7mZZ1vg/yamWzIXSUSetyIVV7R9I DLrOJ9dBUw2ldIT9iKpLwIPBQKzn9RkMZ0yk/i70qPd2aEqZDwvTWHvxnvmuOe/M 6/HwBckUh2LOj2eEqBthRKdhvAwxWiHkNI/vlr0w2D9FnEeSaq7+GswOh+Q/LXMf Q6BCI3YEqjRux9B4Po8TQVDNfKhZvkKqO73klNchoTrR9rFTpPaHlaRfSZ3GNJKQ pecQKYXSLsVV7p1y4GHPdVLMa+6KtYQ= -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:00 2025 by rpki-client