$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa File: c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa (raw, json) Hash identifier: SQnFlW/hZDNVGl2ajNY+CAgHkeBfuaRdhGNelW/2nZM= Subject key identifier: 3C:15:41:5D:F9:61:30:9C:66:6D:A6:F8:65:4D:64:C7:02:E1:75:E9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DB34B741AC310FA3211A6D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa Signing time: Wed 12 Feb 2025 08:35:08 +0000 ROA not before: Wed 12 Feb 2025 08:35:08 +0000 ROA not after: Tue 13 May 2025 07:35:08 +0000 asID: 15169 IP address blocks: 172.217.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:34:b7:41:ac:31:0f:a3:21:1a:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 12 08:35:08 2025 GMT Not After : May 13 07:35:08 2025 GMT Subject: CN=7ec944c6-3b9c-402b-96e0-39ba5fb84f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:ba:4d:12:bf:88:3a:6d:1a:00:2c:b7:25: 4b:56:1e:1e:b1:e6:7b:34:48:b9:9d:3b:d9:30:de: 7e:52:7d:6f:22:fd:97:d9:ea:59:2b:65:8d:b6:a1: 22:51:7a:4d:94:2f:b7:f5:f9:c7:fc:7a:35:07:c0: b4:c5:10:04:16:33:35:d3:d1:53:23:cd:f9:ea:91: 9d:75:da:09:46:fe:1d:e6:b9:b6:8b:56:95:9a:16: 39:fb:0c:19:8f:6a:ad:47:8d:58:6f:21:f5:fd:50: c9:e2:d1:ca:98:f9:3b:e6:e9:1d:63:c5:10:50:da: f4:a3:21:95:2d:17:01:c6:ac:74:88:ac:b4:ba:a0: 5f:75:2b:94:78:34:42:ea:46:f5:14:18:5b:cf:91: d7:b7:f4:aa:3d:b5:3e:46:be:5a:e2:04:d5:27:c2: 6d:21:54:87:7a:1e:0c:f7:9e:0d:49:6c:fc:10:50: c2:9c:75:a8:d9:da:ee:4a:76:a0:ec:44:40:96:5e: f9:69:e6:38:15:32:47:95:9a:2f:d9:48:22:11:21: cb:1d:0b:94:1e:1d:43:29:5b:fe:2e:72:2a:06:7f: 1f:68:4a:ec:31:4b:a0:49:92:e0:af:f0:4b:ef:33: 21:e6:40:44:95:b6:aa:00:cc:3d:2a:a6:72:55:db: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:15:41:5D:F9:61:30:9C:66:6D:A6:F8:65:4D:64:C7:02:E1:75:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:23:b9:ec:30:05:9e:ae:a2:e1:3d:a8:c9:f3:96:b6:20:e9: e9:d0:4e:bb:df:ee:cd:39:41:c4:94:ad:18:bc:33:57:5f:59: 41:b1:3b:d1:68:4f:68:80:b5:c5:b8:6d:8a:5d:2b:96:38:55: d2:40:84:76:39:20:cd:51:19:54:f3:04:d2:14:aa:6b:ff:96: bf:5d:9a:80:2b:cc:97:69:cf:a0:dd:f4:49:ad:f7:1e:b0:d9: 36:86:fa:79:b4:60:e4:06:0e:32:df:f7:4a:5c:dd:f3:1f:05: 7d:a9:36:16:c1:53:25:05:fc:68:7c:39:c6:3b:a7:d4:10:48: 2f:fb:af:54:ac:8e:05:fd:d9:2f:b0:87:3d:84:74:b6:f4:85: 25:ea:44:a7:23:e7:28:8c:3d:72:1a:80:77:1d:d9:36:d6:13: bd:c2:8f:86:cd:31:a4:77:d9:f6:55:b3:e8:f9:e5:13:f3:02: 46:fa:56:c3:ce:d6:6c:41:d2:1e:f3:44:8e:aa:65:52:2b:d7: 82:59:f3:aa:90:09:1f:61:79:ef:12:01:66:a4:03:09:54:0d: 58:6a:c8:ab:61:1e:25:dd:ab:8d:fd:e5:ae:e7:77:cc:4a:b0: 96:e4:50:3d:28:24:3a:3c:ae:f9:58:58:e9:b5:8c:a9:f9:02: 17:a2:ec:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjbNLdBrDEPoyEabYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMjA4MzUwOFoXDTI1MDUxMzA3MzUwOFowLzEtMCsGA1UEAxMk N2VjOTQ0YzYtM2I5Yy00MDJiLTk2ZTAtMzliYTVmYjg0ZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi626TRK/iDptGgAstyVLVh4eseZ7NEi5nTvZ MN5+Un1vIv2X2epZK2WNtqEiUXpNlC+39fnH/Ho1B8C0xRAEFjM109FTI8356pGd ddoJRv4d5rm2i1aVmhY5+wwZj2qtR41YbyH1/VDJ4tHKmPk75ukdY8UQUNr0oyGV LRcBxqx0iKy0uqBfdSuUeDRC6kb1FBhbz5HXt/SqPbU+Rr5a4gTVJ8JtIVSHeh4M 954NSWz8EFDCnHWo2druSnag7ERAll75aeY4FTJHlZov2UgiESHLHQuUHh1DKVv+ LnIqBn8faErsMUugSZLgr/BL7zMh5kBElbaqAMw9KqZyVdtq+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwVQV35YTCcZm2m+GVNZMcC4XXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzM3MWVlOGItNGZlMS0z NDRhLWFjZGQtZmM3ZTllMjQ0MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4juewwBZ6uouE9qMnzlrYg6enQTrvf7s05QcSUrRi8M1dfWUGxO9Fo T2iAtcW4bYpdK5Y4VdJAhHY5IM1RGVTzBNIUqmv/lr9dmoArzJdpz6Dd9Emt9x6w 2TaG+nm0YOQGDjLf90pc3fMfBX2pNhbBUyUF/Gh8OcY7p9QQSC/7r1SsjgX92S+w hz2EdLb0hSXqRKcj5yiMPXIagHcd2TbWE73Cj4bNMaR32fZVs+j55RPzAkb6VsPO 1mxB0h7zRI6qZVIr14JZ86qQCR9hee8SAWakAwlUDVhqyKthHiXdq4395a7nd8xK sJbkUD0oJDo8rvlYWOm1jKn5Ahei7Dk= -----END CERTIFICATE-----Generated at Mon Apr 28 00:10:42 2025 by rpki-client