$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa File: 87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa (raw, json) Hash identifier: AZ9TM3y4u+6tVPr4unVJEGG+21EQI9OXug6LLUJVmsI= Subject key identifier: 2A:24:40:6A:E5:5B:15:73:BA:FF:2B:47:EF:0E:69:95:E3:48:6B:DD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB76CD311BF848CB19CA88 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:76:cd:31:1b:f8:48:cb:19:ca:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=810712d7-2cdd-4687-acd4-cb14f9056153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b2:a5:d6:ad:42:e8:75:f5:78:b4:8c:23:83: 38:9f:3d:a6:e7:01:bb:06:53:d5:bd:a7:31:ae:e1: 79:20:d7:73:01:17:8c:96:bc:f9:19:24:21:f0:ea: ba:6f:4d:b0:b1:46:ed:e9:16:42:4f:2a:74:1d:0a: 53:a5:c0:13:2d:16:02:9b:91:15:55:ed:9c:af:b4: a0:93:40:5c:0f:d9:57:f5:a2:95:bf:35:fe:45:38: 60:fc:4f:99:a1:0d:01:97:6e:5e:73:73:3e:8f:b0: 7b:0f:27:86:1b:e6:5d:36:a0:ca:8c:da:be:f5:d9: f4:34:da:6c:ba:67:3f:95:f0:93:c0:ac:0d:9b:a5: 44:07:2b:a6:c5:15:b2:c9:9a:72:46:cc:52:9a:ff: 6f:30:fa:2c:f6:69:39:22:29:2d:f0:f1:11:7b:c0: 35:2c:79:88:f8:e6:8a:4a:78:f2:87:64:81:47:49: b9:54:3c:b8:32:c0:46:3e:7f:e5:ad:6b:38:f3:af: 20:01:83:e0:c2:40:6b:8d:01:de:0e:d1:7c:b9:7c: 06:fc:b8:6f:ae:d8:1f:92:34:38:6e:9e:d2:0a:39: 88:6e:a4:56:a8:f1:12:90:25:f1:d2:eb:84:f1:8b: 75:d4:5f:d6:dd:f0:ea:6c:cf:84:67:24:87:38:28: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:24:40:6A:E5:5B:15:73:BA:FF:2B:47:EF:0E:69:95:E3:48:6B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87f4dc2c-31bc-33ec-8e7d-d1bd65ba6a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d5:37:52:69:05:6b:68:cd:e5:32:c0:4b:9e:c1:e3:91:3f: 3c:6d:de:9f:7b:55:94:86:93:6f:85:5f:30:12:f5:68:c6:92: 48:ec:8b:d0:85:ce:e2:64:28:77:df:aa:f5:46:d3:3d:17:fe: 5e:a6:d1:ad:07:68:16:27:e0:5f:d5:34:c6:19:97:af:6a:46: 35:aa:0b:3d:56:35:1c:27:d9:92:e4:78:ce:f6:bc:22:21:aa: 5d:bc:9a:49:f5:39:96:ac:f0:74:89:11:04:c4:d2:dd:41:82: 55:e0:d5:8a:61:bc:ba:b9:ad:35:e0:47:f1:5a:0e:54:86:bd: 70:3c:fa:a8:22:fb:dc:2a:cc:4e:ff:65:15:a6:be:58:65:24: 72:d3:46:81:fb:ea:64:6f:71:f6:1d:7f:fa:c2:85:49:c1:af: 4a:b6:fd:c2:43:ea:ba:45:ac:f4:1e:5d:21:28:4b:46:9b:1f: 1d:92:79:ca:8e:6d:49:92:e5:fd:a2:d4:57:7d:40:f3:2c:58: 8f:85:a9:f1:a1:c9:e3:85:ac:da:eb:e2:da:d2:45:4c:1a:6c: 1a:72:b2:f9:89:58:74:af:7f:f8:3e:b2:7f:94:46:b1:66:df: f2:5f:fe:ae:d0:8a:22:4a:fa:d0:80:d1:ec:bf:ed:a2:ed:c8: 0a:52:b7:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3bNMRv4SMsZyogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODEwNzEyZDctMmNkZC00Njg3LWFjZDQtY2IxNGY5MDU2MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirKl1q1C6HX1eLSMI4M4nz2m5wG7BlPVvacx ruF5INdzAReMlrz5GSQh8Oq6b02wsUbt6RZCTyp0HQpTpcATLRYCm5EVVe2cr7Sg k0BcD9lX9aKVvzX+RThg/E+ZoQ0Bl25ec3M+j7B7DyeGG+ZdNqDKjNq+9dn0NNps umc/lfCTwKwNm6VEByumxRWyyZpyRsxSmv9vMPos9mk5Iikt8PERe8A1LHmI+OaK Snjyh2SBR0m5VDy4MsBGPn/lrWs4868gAYPgwkBrjQHeDtF8uXwG/LhvrtgfkjQ4 bp7SCjmIbqRWqPESkCXx0uuE8Yt11F/W3fDqbM+EZySHOCj2uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCokQGrlWxVzuv8rR+8OaZXjSGvdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODdmNGRjMmMtMzFiYy0z M2VjLThlN2QtZDFiZDY1YmE2YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnVN1JpBWtozeUywEueweORPzxt3p97VZSGk2+FXzAS9WjGkkjsi9CF zuJkKHffqvVG0z0X/l6m0a0HaBYn4F/VNMYZl69qRjWqCz1WNRwn2ZLkeM72vCIh ql28mkn1OZas8HSJEQTE0t1BglXg1YphvLq5rTXgR/FaDlSGvXA8+qgi+9wqzE7/ ZRWmvlhlJHLTRoH76mRvcfYdf/rChUnBr0q2/cJD6rpFrPQeXSEoS0abHx2SecqO bUmS5f2i1Fd9QPMsWI+FqfGhyeOFrNrr4trSRUwabBpysvmJWHSvf/g+sn+URrFm 3/Jf/q7QiiJK+tCA0ey/7aLtyApSt+s= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:22 2025 by rpki-client