$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa File: bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa (raw, json) Hash identifier: AQHpzEQAEnt9iK+wWBMDwHdrjzZnoO8UXe7UWshpB4s= Subject key identifier: 42:36:41:71:7B:43:E6:74:8B:42:83:EE:D1:C0:A5:27:5F:B0:AB:2F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD2F6DF03308D347DF580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d2:f6:df:03:30:8d:34:7d:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7ee456e4-e840-4e8c-8fcb-20adf2abd8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:38:09:79:c1:0d:8b:05:d5:d0:f7:48:1a:37: 08:bf:24:28:4c:f5:b4:9d:9a:f6:97:fa:24:25:01: 4a:00:f9:1c:aa:d1:bd:5e:98:58:14:09:2b:2f:92: 74:2f:f1:3c:66:00:82:bd:00:43:10:17:41:15:c4: 5e:93:aa:9b:f2:f9:75:5d:e0:f1:50:83:72:93:94: 8b:ed:ad:65:51:cb:11:f9:f6:f4:d8:e2:a0:b6:bf: 3d:5d:61:c8:73:6d:8d:8d:97:5d:82:57:3f:c7:e4: 9e:f6:ce:19:c0:17:b0:29:33:54:6d:61:ac:6c:b9: fc:de:37:32:c3:20:33:22:d8:a1:b5:ca:89:30:ad: b6:69:40:c9:d4:6c:2b:d4:2c:2e:c8:0b:03:f2:70: 05:2c:ec:c8:96:b7:ca:b1:6e:68:ff:74:38:28:48: 74:bb:56:d9:fc:6d:2c:e4:c1:b5:46:be:68:9d:7b: b6:2b:f6:6c:6f:6f:50:19:df:7b:96:bd:ce:b6:a4: 1c:f9:25:51:0f:ee:01:24:ae:5c:e7:47:e7:8a:03: 7e:07:0d:ba:7a:86:ae:44:0b:87:75:c1:4c:00:9f: 85:ea:0d:75:19:7d:a9:82:28:ec:3c:88:d6:a2:69: 1e:43:d4:0e:20:01:7b:5c:a1:a5:f1:45:28:06:a7: 73:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:36:41:71:7B:43:E6:74:8B:42:83:EE:D1:C0:A5:27:5F:B0:AB:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:48:ba:4e:a4:89:af:c4:3b:4e:b9:3f:3a:4e:b0:d9:66:0c: 46:c3:cc:25:36:e9:6f:84:bb:27:f8:62:e1:9a:e2:10:0e:d3: 3b:fb:e0:dc:af:98:d7:61:dd:f3:ff:93:b8:ad:2a:f3:c5:e7: 24:cf:43:0a:51:79:75:bf:6a:20:a5:8d:c9:f1:b8:48:79:49: d4:52:98:8b:b3:21:a7:52:55:ce:53:c9:ca:c4:d4:c2:4b:ba: a5:75:b7:df:f5:bb:90:2d:f1:46:71:9d:d2:3d:d9:14:56:c4: 33:16:6a:b8:b8:ca:9d:a5:27:e0:48:13:4f:d7:be:9a:66:aa: 22:e3:95:6c:2c:81:5e:26:ed:02:5f:8a:94:92:c9:ff:4f:4e: 76:d2:88:fa:e5:63:71:2a:3e:6c:18:7b:d9:c5:bc:15:25:96: 7f:89:04:5c:94:94:1a:02:5b:91:f8:5c:e8:58:aa:0a:ae:4c: d7:dd:05:d3:f6:c0:aa:9b:2c:53:ff:5d:8a:ad:4f:86:a4:a0: 56:f6:0c:78:ee:8d:30:70:e5:c4:15:f4:24:53:00:00:6d:b2: c3:41:1f:41:bc:48:03:ba:ff:64:6c:9c:36:de:e9:b9:f4:17: 56:d6:3a:dc:02:a8:9a:e4:71:86:00:9d:e0:c3:86:65:54:59: 30:5d:47:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutL23wMwjTR99YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2VlNDU2ZTQtZTg0MC00ZThjLThmY2ItMjBhZGYyYWJkOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTgJecENiwXV0PdIGjcIvyQoTPW0nZr2l/ok JQFKAPkcqtG9XphYFAkrL5J0L/E8ZgCCvQBDEBdBFcRek6qb8vl1XeDxUINyk5SL 7a1lUcsR+fb02OKgtr89XWHIc22NjZddglc/x+Se9s4ZwBewKTNUbWGsbLn83jcy wyAzItihtcqJMK22aUDJ1Gwr1CwuyAsD8nAFLOzIlrfKsW5o/3Q4KEh0u1bZ/G0s 5MG1Rr5onXu2K/Zsb29QGd97lr3OtqQc+SVRD+4BJK5c50fnigN+Bw26eoauRAuH dcFMAJ+F6g11GX2pgijsPIjWomkeQ9QOIAF7XKGl8UUoBqdztwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI2QXF7Q+Z0i0KD7tHApSdfsKsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmRjMjlhMDItZGZjOC0z NGFiLThlZTktZTEzMTE3OTQzN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpIuk6kia/EO065PzpOsNlmDEbDzCU26W+Euyf4YuGa4hAO0zv74Nyv mNdh3fP/k7itKvPF5yTPQwpReXW/aiCljcnxuEh5SdRSmIuzIadSVc5TycrE1MJL uqV1t9/1u5At8UZxndI92RRWxDMWari4yp2lJ+BIE0/XvppmqiLjlWwsgV4m7QJf ipSSyf9PTnbSiPrlY3EqPmwYe9nFvBUlln+JBFyUlBoCW5H4XOhYqgquTNfdBdP2 wKqbLFP/XYqtT4akoFb2DHjujTBw5cQV9CRTAABtssNBH0G8SAO6/2RsnDbe6bn0 F1bWOtwCqJrkcYYAneDDhmVUWTBdRzA= -----END CERTIFICATE-----Generated at Mon Apr 28 12:42:41 2025 by rpki-client