$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac30b313-cfe9-33e4-9f76-6627db129217.roa File: ac30b313-cfe9-33e4-9f76-6627db129217.roa (raw, json) Hash identifier: Jmtezn0wDLLFuKO+opG5501mlzPsrj/0yz/V3flY6ZQ= Subject key identifier: BB:0E:D3:E6:E2:E6:FA:11:6A:26:69:3F:B7:D9:35:06:8A:C4:56:B0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABC112337D207B60C4B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac30b313-cfe9-33e4-9f76-6627db129217.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bc:11:23:37:d2:07:b6:0c:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b47057a8-56c9-45d8-9fe3-a18a4a9becdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:58:85:1d:3b:f2:8c:dd:46:19:3a:53:b5: 07:fa:6e:26:d2:18:14:db:4a:e3:86:86:4c:ab:ab: 65:13:ec:34:8f:7c:b4:f0:9b:d6:ac:87:3f:4d:9a: f8:56:a8:42:90:99:73:e3:f6:9c:ef:7c:1d:38:ae: bf:e2:4e:a5:f7:cd:3c:57:85:38:b0:a3:93:b4:e5: b1:8b:86:af:8d:bf:8d:c8:3b:bf:05:e9:eb:70:fc: 88:0b:b0:ff:ce:ef:fa:89:92:e6:f7:69:a1:02:0b: 9d:49:28:d7:0d:b7:14:29:cd:28:c6:aa:a2:b9:63: 1c:ab:ed:1a:88:b7:c7:95:a1:31:8f:1e:df:d9:a5: 7d:1f:59:e5:4d:78:c3:b3:6e:13:cc:60:eb:8c:c3: f3:e1:f2:8f:6c:bb:2b:57:87:89:e7:66:0a:e2:f4: 4b:f0:80:71:e3:f5:29:a6:45:4e:a8:fa:82:10:cc: be:fe:27:d6:06:2c:72:fb:45:98:fa:35:43:78:53: 97:21:74:62:ed:6b:ec:a6:f8:51:95:72:83:44:03: 98:ab:bf:44:33:9f:e6:6d:ea:3b:bc:05:00:4e:0c: 4c:78:61:8d:55:dc:29:e0:24:70:5b:5f:17:f0:62: 25:50:22:b0:18:dc:2d:ce:0b:72:b5:41:23:dc:64: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0E:D3:E6:E2:E6:FA:11:6A:26:69:3F:B7:D9:35:06:8A:C4:56:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac30b313-cfe9-33e4-9f76-6627db129217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:0e:08:cd:a2:f5:00:8b:16:5c:c7:05:8e:8a:40:bc:24:92: bd:bf:d6:8e:c7:72:ff:d1:f1:fe:1e:4c:96:c3:b1:90:c9:f2: 6e:31:4b:8b:e7:00:c5:77:87:91:04:9b:34:8c:f1:25:2d:2a: 79:7c:0c:54:ed:91:62:55:b7:74:a8:16:74:a8:07:ca:b7:45: fd:36:e4:80:65:ac:3c:f0:12:9c:a5:b7:3c:ec:5c:41:b0:d5: fd:14:a0:ed:d8:26:42:e8:08:18:6d:84:ae:f2:04:fd:a7:45: 07:72:b1:55:cd:0c:b5:32:87:e0:0c:0a:fd:a4:87:41:1b:b3: 33:29:6c:b1:08:ca:7d:db:e9:7f:87:81:a6:ed:4b:16:2b:33: 10:75:9a:f6:bf:f1:71:6b:86:00:94:a2:b5:62:0c:e9:e8:b3: 3c:f4:45:5f:99:df:e5:93:80:ba:71:a2:38:dc:eb:9c:63:d2: 26:9c:74:b6:35:5c:bc:0a:14:8e:74:5e:d2:04:23:30:c3:5d: 26:e9:84:9b:2e:ae:50:4f:f1:38:5b:8e:dd:43:60:df:7e:a4: 73:61:c8:cb:51:3d:a6:f7:94:da:8e:44:8b:21:6c:9e:7a:d5: a3:cd:c2:86:41:af:fe:1b:40:44:f5:15:dc:8a:9b:bc:f3:02: 62:f8:00:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurwRIzfSB7YMSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjQ3MDU3YTgtNTZjOS00NWQ4LTlmZTMtYTE4YTRhOWJlY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeVYhR078ozdRhk6U7UH+m4m0hgU20rjhoZM q6tlE+w0j3y08JvWrIc/TZr4VqhCkJlz4/ac73wdOK6/4k6l9808V4U4sKOTtOWx i4avjb+NyDu/BenrcPyIC7D/zu/6iZLm92mhAgudSSjXDbcUKc0oxqqiuWMcq+0a iLfHlaExjx7f2aV9H1nlTXjDs24TzGDrjMPz4fKPbLsrV4eJ52YK4vRL8IBx4/Up pkVOqPqCEMy+/ifWBixy+0WY+jVDeFOXIXRi7WvspvhRlXKDRAOYq79EM5/mbeo7 vAUATgxMeGGNVdwp4CRwW18X8GIlUCKwGNwtzgtytUEj3GSWcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsO0+bi5voRaiZpP7fZNQaKxFawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWMzMGIzMTMtY2ZlOS0z M2U0LTlmNzYtNjYyN2RiMTI5MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUOCM2i9QCLFlzHBY6KQLwkkr2/1o7Hcv/R8f4eTJbDsZDJ8m4xS4vn AMV3h5EEmzSM8SUtKnl8DFTtkWJVt3SoFnSoB8q3Rf025IBlrDzwEpyltzzsXEGw 1f0UoO3YJkLoCBhthK7yBP2nRQdysVXNDLUyh+AMCv2kh0EbszMpbLEIyn3b6X+H gabtSxYrMxB1mva/8XFrhgCUorViDOnoszz0RV+Z3+WTgLpxojjc65xj0iacdLY1 XLwKFI50XtIEIzDDXSbphJsurlBP8Thbjt1DYN9+pHNhyMtRPab3lNqORIshbJ56 1aPNwoZBr/4bQET1FdyKm7zzAmL4AFE= -----END CERTIFICATE-----Generated at Sun Apr 27 03:37:33 2025 by rpki-client