$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa File: 8420604a-78c3-354a-867d-4cbdeb9953ad.roa (raw, json) Hash identifier: a9J9HvFyrWNRU/dvyTkk5B1RU8MoN6qwQHrjIifFn1o= Subject key identifier: 72:26:9E:82:6B:0E:36:00:64:CC:BF:D3:86:09:4B:58:0F:36:B0:37 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5DF917A86EA0464DDE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5d:f9:17:a8:6e:a0:46:4d:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0da600d4-c2f7-4bea-bb82-d01ec904345d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e8:fc:d5:a9:2d:73:7b:3d:a0:4d:b3:ff:fe: 6f:e0:48:29:88:b2:8b:54:e7:b6:68:de:79:91:dc: 41:6e:0f:60:c4:c4:df:fe:5f:3a:8b:84:41:9e:55: 57:fd:00:0d:cd:28:dc:80:f8:e1:bb:9f:53:f1:31: f9:43:ba:b6:90:2d:d2:b1:05:6e:45:6e:12:27:28: 9e:0d:ba:9c:22:c0:1b:69:94:d6:a1:18:7e:fd:3f: d0:27:75:04:fd:7e:cb:ee:d8:01:88:44:e1:9d:5c: b1:d5:69:e1:20:39:90:1f:5e:c6:79:54:d7:6b:39: 05:f6:be:c2:cc:7d:a0:69:4f:b2:ad:fe:00:a6:86: 49:72:8a:25:1d:f6:29:df:17:0d:08:6e:ee:0b:39: 1a:93:35:7e:41:49:34:f4:f3:8f:af:b6:99:3c:98: 35:1d:90:6a:24:d2:5a:6f:16:1a:5a:70:e3:4f:f5: fb:bb:83:9d:c3:d8:83:2c:bc:78:82:51:c5:af:1f: 7c:42:9a:5e:f5:dd:d7:09:0f:72:31:fc:fe:ba:ae: 15:77:ed:58:ae:7f:f1:98:13:5e:ea:f0:f1:45:d1: 19:b9:b6:ed:19:a2:91:72:8e:dd:e7:08:4f:68:2f: 98:76:b1:fc:62:4c:1b:e9:ce:4c:e6:d8:3d:98:b1: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:26:9E:82:6B:0E:36:00:64:CC:BF:D3:86:09:4B:58:0F:36:B0:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:60:ad:ee:9d:7a:67:e7:11:59:4b:bc:8d:27:57:12:c4:5f: 5e:38:7f:d5:a2:60:8e:4f:8c:f3:cc:23:bc:9d:b3:03:79:32: 0a:96:51:e2:b8:ed:cc:0b:a4:b1:8c:1a:ea:57:d9:d3:5a:7b: 39:84:f4:04:62:74:d4:de:db:b6:0e:2f:d1:fd:38:2b:6d:b4: c9:d3:de:4d:85:dc:c3:ea:e6:9a:8e:7a:61:85:27:24:a5:a8: 4d:7f:ec:9c:b8:32:17:be:13:21:fb:e8:29:31:c7:b8:3c:dd: eb:3d:81:50:0d:35:7d:4a:2c:7a:e6:85:ec:3a:31:d1:d6:ef: 82:cd:92:d0:b2:e8:d4:45:a7:be:b9:71:d5:b2:93:25:53:19: b3:a6:dd:96:53:ec:15:ad:dd:95:6a:ec:0b:41:ed:55:d1:98: e9:3e:8c:87:83:a0:24:9f:b3:21:3b:65:5c:8b:d0:99:1e:fd: b3:c3:42:c8:0a:11:e1:54:2b:5f:32:9e:4a:cd:3c:8a:f6:41: 57:72:cf:c0:81:6b:11:e2:37:3b:ad:26:08:3d:e2:7d:96:38: 50:17:df:fe:8d:4e:fe:ab:f6:50:2e:a0:25:dd:0c:20:30:d6: ad:66:bb:b1:85:96:b7:0f:b4:a3:ae:ff:13:43:9d:ca:52:fc: f4:c1:07:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku135F6huoEZN3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGRhNjAwZDQtYzJmNy00YmVhLWJiODItZDAxZWM5MDQzNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+j81aktc3s9oE2z//5v4EgpiLKLVOe2aN55 kdxBbg9gxMTf/l86i4RBnlVX/QANzSjcgPjhu59T8TH5Q7q2kC3SsQVuRW4SJyie DbqcIsAbaZTWoRh+/T/QJ3UE/X7L7tgBiEThnVyx1WnhIDmQH17GeVTXazkF9r7C zH2gaU+yrf4ApoZJcoolHfYp3xcNCG7uCzkakzV+QUk09POPr7aZPJg1HZBqJNJa bxYaWnDjT/X7u4Odw9iDLLx4glHFrx98Qppe9d3XCQ9yMfz+uq4Vd+1Yrn/xmBNe 6vDxRdEZubbtGaKRco7d5whPaC+YdrH8Ykwb6c5M5tg9mLGqGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHImnoJrDjYAZMy/04YJS1gPNrA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODQyMDYwNGEtNzhjMy0z NTRhLTg2N2QtNGNiZGViOTk1M2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1gre6demfnEVlLvI0nVxLEX144f9WiYI5PjPPMI7ydswN5MgqWUeK4 7cwLpLGMGupX2dNaezmE9ARidNTe27YOL9H9OCtttMnT3k2F3MPq5pqOemGFJySl qE1/7Jy4Mhe+EyH76Ckxx7g83es9gVANNX1KLHrmhew6MdHW74LNktCy6NRFp765 cdWykyVTGbOm3ZZT7BWt3ZVq7AtB7VXRmOk+jIeDoCSfsyE7ZVyL0Jke/bPDQsgK EeFUK18ynkrNPIr2QVdyz8CBaxHiNzutJgg94n2WOFAX3/6NTv6r9lAuoCXdDCAw 1q1mu7GFlrcPtKOu/xNDncpS/PTBB3U= -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:41 2025 by rpki-client