$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa File: b8e4ffb5-04fb-3989-bac1-011a62674a35.roa (raw, json) Hash identifier: cnaNRHxmqt7GttUJHiycwJF2bfgRVy3bqjUu6zwA8P8= Subject key identifier: 8C:C7:6D:E8:3B:41:7E:62:CA:5D:D8:D4:6D:8B:EA:EC:5A:46:F6:7D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA2D9B2517F2C7B7B6A06C Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2d:9b:25:17:f2:c7:b7:b6:a0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=e93a5e8b-7c8a-4c02-8db6-9ce729c6a757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:18:20:5f:a4:ea:3a:0d:86:4b:36:75:64: b4:0a:aa:cd:89:bd:91:3b:f8:5e:d1:f4:2c:00:42: 3a:9f:a5:b8:c7:a0:4b:d6:e7:db:7c:b5:38:9f:71: 13:bc:19:2e:c7:68:42:0e:fa:28:a1:da:d9:c4:dd: ef:4e:d7:1b:5f:63:bd:5e:90:d1:48:4a:e2:fa:c0: c3:66:c5:d7:bd:9b:f7:4b:38:91:2e:83:48:5b:63: 7b:54:b8:bc:55:35:93:29:00:b8:c1:e0:2a:48:9e: 09:53:04:21:cf:3f:5c:66:8f:9b:15:a1:91:32:c3: 44:d8:9c:eb:e4:7f:f8:18:50:9e:b1:0d:4b:60:2b: 87:a8:ab:36:16:60:2d:bf:70:eb:4c:95:83:5a:54: 69:b9:4c:7b:79:dd:c3:8e:dc:bb:21:de:b8:20:81: 1f:cc:67:b1:45:11:03:e9:95:97:8f:88:42:e5:27: d4:57:0c:9e:6e:fe:30:1a:ed:72:ba:af:46:cb:25: fd:78:5d:1b:e6:fe:80:9c:ea:f8:35:6b:99:b7:cd: ac:40:ed:db:bc:0b:ba:34:d0:e7:69:f9:88:c7:ac: c6:95:13:99:3c:48:6a:a5:cb:f2:2e:45:37:01:39: 4a:1c:54:06:d3:86:90:3b:c4:44:f2:2b:a5:e2:ee: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C7:6D:E8:3B:41:7E:62:CA:5D:D8:D4:6D:8B:EA:EC:5A:46:F6:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6c:31:d7:66:91:dd:56:d8:dc:9e:c0:a9:86:20:7d:fa:a2: 87:4a:7c:2c:f9:a6:19:05:36:a8:78:33:e9:bb:58:13:27:c0: 40:6e:86:ed:69:67:65:a5:3b:36:61:bd:65:b6:21:64:f8:02: 84:86:24:0f:d3:f8:5d:3b:1c:d7:a1:89:45:c8:4f:35:4d:1d: dc:5a:1c:79:3d:49:91:fc:11:38:47:ae:bf:2d:e7:38:9c:ce: 51:f3:d8:b7:c8:87:92:de:84:ac:d4:b7:f2:87:e7:c4:33:ab: df:80:62:a6:18:7e:aa:64:cf:39:22:9d:b0:f1:ca:d9:42:41: 00:fe:f7:67:3a:66:63:fb:89:d9:56:8b:1e:97:3a:e6:da:1d: 3a:26:60:fd:00:1b:c2:0b:a6:8a:33:7e:b2:7b:0e:75:a6:15: e9:3d:23:40:ab:7a:21:0f:c6:45:be:36:2f:8c:9d:4d:75:1a: a9:17:b4:76:38:6c:5c:64:72:83:a7:bf:9e:32:f1:01:69:70: 9a:83:3f:db:91:f6:41:8d:23:d9:1d:6a:f0:9b:21:8c:ac:88: e2:2c:14:55:43:36:00:74:e2:58:9d:6d:a3:f5:85:d9:c1:2b: 2f:a5:4a:ce:cb:17:a9:a7:b9:28:b7:0d:38:3e:1e:3a:a9:4a: 4a:38:87:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i2bJRfyx7e2oGwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZTkzYTVlOGItN2M4YS00YzAyLThkYjYtOWNlNzI5YzZhNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+gYIF+k6joNhks2dWS0CqrNib2RO/he0fQs AEI6n6W4x6BL1ufbfLU4n3ETvBkux2hCDvooodrZxN3vTtcbX2O9XpDRSEri+sDD ZsXXvZv3SziRLoNIW2N7VLi8VTWTKQC4weAqSJ4JUwQhzz9cZo+bFaGRMsNE2Jzr 5H/4GFCesQ1LYCuHqKs2FmAtv3DrTJWDWlRpuUx7ed3Djty7Id64IIEfzGexRRED 6ZWXj4hC5SfUVwyebv4wGu1yuq9GyyX9eF0b5v6AnOr4NWuZt82sQO3bvAu6NNDn afmIx6zGlROZPEhqpcvyLkU3ATlKHFQG04aQO8RE8iul4u5KNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzHbeg7QX5iyl3Y1G2L6uxaRvZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjhlNGZmYjUtMDRmYi0z OTg5LWJhYzEtMDExYTYyNjc0YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVsMddmkd1W2NyewKmGIH36oodKfCz5phkFNqh4M+m7WBMnwEBuhu1p Z2WlOzZhvWW2IWT4AoSGJA/T+F07HNehiUXITzVNHdxaHHk9SZH8EThHrr8t5zic zlHz2LfIh5LehKzUt/KH58Qzq9+AYqYYfqpkzzkinbDxytlCQQD+92c6ZmP7idlW ix6XOubaHTomYP0AG8ILpoozfrJ7DnWmFek9I0CreiEPxkW+Ni+MnU11GqkXtHY4 bFxkcoOnv54y8QFpcJqDP9uR9kGNI9kdavCbIYysiOIsFFVDNgB04lidbaP1hdnB Ky+lSs7LF6mnuSi3DTg+HjqpSko4hzE= -----END CERTIFICATE-----Generated at Sun Jun 15 15:03:31 2025 by rpki-client