$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab77b461-5cd5-334f-a0bb-cfedcb5b21fe.roa File: ab77b461-5cd5-334f-a0bb-cfedcb5b21fe.roa (raw, json) Hash identifier: Jopgt3tDL5DuyLQvh6OUA8MFsQOuSrMYmLN+KwLlSsM= Subject key identifier: 06:02:44:EE:D7:AC:35:41:13:ED:F7:46:A4:AF:A1:B3:C9:98:A6:A7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC3D59104F394A5176000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab77b461-5cd5-334f-a0bb-cfedcb5b21fe.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c3:d5:91:04:f3:94:a5:17:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=588cc8fb-cc18-4871-823d-5fb70bf00b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:49:11:db:05:35:e2:52:8f:34:19:5b:a4: e2:80:5d:17:1e:34:3d:4f:61:ea:c2:eb:d0:af:fb: c6:cf:a0:30:34:66:87:56:d9:f6:ee:6f:5b:8c:5f: bb:13:fb:72:bb:4b:7a:22:b5:d3:e2:cd:5d:69:ab: b1:bf:7b:ab:fa:9b:5a:4c:0a:5b:50:be:1b:e7:3f: 45:78:b8:70:64:c3:ec:bb:4b:8d:80:1c:26:d2:0c: 82:6d:20:bc:a3:8b:da:68:f1:e3:22:ad:0d:bd:e2: 5e:71:96:91:81:4d:99:b0:98:7e:e5:88:c5:a1:8d: 52:b4:ae:2d:71:33:8d:9e:b3:c3:2e:4a:17:3b:e8: 0f:bc:00:b9:5f:18:4d:9c:c9:a1:98:17:7b:99:e5: e0:c9:df:22:27:45:87:5d:c4:ed:09:fd:48:90:b9: 7b:98:8a:b6:68:f1:02:db:d3:57:0c:cd:25:61:51: 5b:dd:1c:24:ea:4e:e8:65:9b:da:ed:6c:41:5c:4c: 59:f3:5f:a0:74:ee:4a:03:f0:fb:b0:60:25:10:87: 79:c0:17:55:0c:44:e7:c6:6e:60:66:65:4c:3b:ce: f5:bd:48:28:2e:20:90:ee:35:fe:08:80:74:ab:72: e0:81:be:31:c6:25:8c:df:98:31:b4:e4:42:03:a5: fa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:02:44:EE:D7:AC:35:41:13:ED:F7:46:A4:AF:A1:B3:C9:98:A6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab77b461-5cd5-334f-a0bb-cfedcb5b21fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b0:4a:90:b4:ad:36:0e:63:86:bc:89:8e:a8:01:f1:27:00: f7:72:b6:79:34:c8:37:82:78:94:ae:e4:e2:12:35:f9:28:90: 0c:fc:0d:44:3d:1f:91:5a:65:ce:92:52:a7:aa:62:31:70:fb: ac:7c:a6:60:7c:27:36:ad:86:92:1f:34:4b:0a:a8:60:9d:69: 58:b0:eb:b0:16:17:9a:54:b9:91:2b:3c:a8:77:7f:fc:df:b1: 9c:ef:5d:39:42:ea:88:a4:6f:77:d0:f6:9c:3c:a5:96:3a:60: 9f:59:e9:fe:22:37:73:94:76:cc:05:e2:e1:12:ad:dc:56:c5: bd:04:07:7e:1c:29:59:4c:d2:f3:4b:9c:04:54:9d:ad:5e:29: f3:05:64:84:60:8d:d3:ff:eb:8d:5f:a8:71:0c:18:84:5e:ec: 5d:ec:b9:46:33:9f:0b:92:b4:b4:d1:48:17:f5:2a:ec:cc:61: cd:d6:4b:40:ee:19:06:80:1d:cc:f3:05:02:b9:96:71:02:ba: 26:b0:b6:42:12:ca:6b:9a:e7:d4:9c:b8:39:c8:24:91:42:3a: 13:a1:87:15:f3:a0:70:c8:a8:a9:0e:b9:a7:f7:c7:60:f8:35: 40:f3:1b:9f:65:f2:c4:41:f5:8c:73:80:34:64:02:57:9a:e3: c4:e0:89:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusPVkQTzlKUXYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTg4Y2M4ZmItY2MxOC00ODcxLTgyM2QtNWZiNzBiZjAwYjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSlJEdsFNeJSjzQZW6TigF0XHjQ9T2HqwuvQ r/vGz6AwNGaHVtn27m9bjF+7E/tyu0t6IrXT4s1daauxv3ur+ptaTApbUL4b5z9F eLhwZMPsu0uNgBwm0gyCbSC8o4vaaPHjIq0NveJecZaRgU2ZsJh+5YjFoY1StK4t cTONnrPDLkoXO+gPvAC5XxhNnMmhmBd7meXgyd8iJ0WHXcTtCf1IkLl7mIq2aPEC 29NXDM0lYVFb3Rwk6k7oZZva7WxBXExZ81+gdO5KA/D7sGAlEId5wBdVDETnxm5g ZmVMO871vUgoLiCQ7jX+CIB0q3Lggb4xxiWM35gxtORCA6X6DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYCRO7XrDVBE+33RqSvobPJmKanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWI3N2I0NjEtNWNkNS0z MzRmLWEwYmItY2ZlZGNiNWIyMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCwSpC0rTYOY4a8iY6oAfEnAPdytnk0yDeCeJSu5OISNfkokAz8DUQ9 H5FaZc6SUqeqYjFw+6x8pmB8JzathpIfNEsKqGCdaViw67AWF5pUuZErPKh3f/zf sZzvXTlC6oikb3fQ9pw8pZY6YJ9Z6f4iN3OUdswF4uESrdxWxb0EB34cKVlM0vNL nARUna1eKfMFZIRgjdP/641fqHEMGIRe7F3suUYznwuStLTRSBf1KuzMYc3WS0Du GQaAHczzBQK5lnECuiawtkISymua59ScuDnIJJFCOhOhhxXzoHDIqKkOuaf3x2D4 NUDzG59l8sRB9YxzgDRkAlea48TgiTc= -----END CERTIFICATE-----Generated at Sun Apr 27 15:16:21 2025 by rpki-client