$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfd34f80-5b5d-329f-818d-08233d807954.roa File: cfd34f80-5b5d-329f-818d-08233d807954.roa (raw, json) Hash identifier: 7e9EBWef6ZNyean53NijVULlFR26mGgCuQ1evL48SAQ= Subject key identifier: 8D:04:AF:CD:99:3A:20:33:71:3A:FF:D5:EA:D0:63:93:75:24:B4:9E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB614A8BE47F2131CE7580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfd34f80-5b5d-329f-818d-08233d807954.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:61:4a:8b:e4:7f:21:31:ce:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fd1261c2-ccba-47cc-bebb-0d2b64297aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:97:e4:b4:10:13:74:f9:9c:93:bd:19:b5: 1f:32:29:6c:d3:a2:87:48:9b:f3:9a:91:4e:17:ba: 03:ae:e3:1f:4a:a6:25:6b:2a:83:61:b6:93:73:85: 97:98:33:3c:50:6d:81:1c:1a:7f:21:7c:7e:f8:0a: f2:db:15:1a:1f:85:b8:1e:74:5f:90:9e:2b:27:ee: a0:45:73:d2:86:6b:91:2c:9a:df:5f:35:fc:04:5c: f3:ed:9b:cb:e7:3b:62:f4:52:e2:8d:d2:42:b0:3b: ea:65:3b:66:31:6a:c6:52:31:5c:3f:3d:0c:3b:d7: db:15:33:97:ec:9b:7f:6d:37:59:08:0e:52:0d:0a: 6a:3f:0a:9a:8b:e1:73:8d:82:3d:da:1e:cb:59:f5: dd:02:31:c0:af:42:8e:64:91:a2:45:d8:b0:b2:24: 94:9e:d1:de:2f:16:b3:e1:82:16:89:a4:03:92:98: c5:a6:cc:cf:d4:6f:0c:82:1f:3b:95:e9:00:75:5d: b6:5d:22:04:ce:f4:3f:c2:e1:1c:d9:f0:cb:8c:cb: 61:97:1b:20:5d:24:a6:c4:34:d7:1c:63:e4:79:9f: 17:03:30:df:c3:5c:2d:93:21:22:6e:48:ca:f6:11: d7:db:a6:8f:2f:cf:32:9a:c2:12:12:3b:4b:4c:ec: 45:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:04:AF:CD:99:3A:20:33:71:3A:FF:D5:EA:D0:63:93:75:24:B4:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfd34f80-5b5d-329f-818d-08233d807954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:29:cd:87:7a:5e:ff:b6:e4:c7:e0:ff:6a:f2:99:82:c4:54: ae:25:f5:58:71:97:a3:d7:0d:f8:4b:78:5a:72:a0:c6:b8:f1: e2:73:75:30:a4:32:6f:d0:15:b3:a1:90:87:dd:d3:32:f8:b5: ef:f4:32:8b:58:51:a5:0a:ec:25:77:17:a7:91:48:76:b4:b6: 31:0b:80:ec:ab:d4:98:01:b0:15:f2:96:f9:01:5d:52:df:db: b0:6c:1e:95:50:aa:7f:b0:c2:1c:68:66:6c:b8:0b:66:51:36: fe:39:fb:04:22:74:c4:fa:7b:bb:a1:f0:4d:f8:88:d5:98:3a: b2:07:73:62:a1:5d:58:f8:14:05:60:06:28:3a:a1:2d:4a:fd: a4:81:e7:94:46:87:53:66:c6:29:2f:37:c6:ee:e9:31:76:50: f2:5d:43:39:bc:4e:bf:76:fb:d1:57:f0:70:da:d4:29:97:90: dd:d9:2a:27:61:05:58:8e:46:10:2f:46:80:8c:b5:e7:0e:3f: eb:20:b9:7e:4a:37:f5:f0:e4:73:36:7d:34:47:8b:15:b3:61: 21:bb:6b:7e:1b:ff:08:79:24:92:d2:04:08:71:6d:73:dc:a6: 81:84:41:68:33:15:cb:8d:6b:42:2a:bf:32:ce:fe:a3:84:ea: 5a:f6:7d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2FKi+R/ITHOdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmQxMjYxYzItY2NiYS00N2NjLWJlYmItMGQyYjY0Mjk3YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOiX5LQQE3T5nJO9GbUfMils06KHSJvzmpFO F7oDruMfSqYlayqDYbaTc4WXmDM8UG2BHBp/IXx++Ary2xUaH4W4HnRfkJ4rJ+6g RXPShmuRLJrfXzX8BFzz7ZvL5zti9FLijdJCsDvqZTtmMWrGUjFcPz0MO9fbFTOX 7Jt/bTdZCA5SDQpqPwqai+FzjYI92h7LWfXdAjHAr0KOZJGiRdiwsiSUntHeLxaz 4YIWiaQDkpjFpszP1G8Mgh87lekAdV22XSIEzvQ/wuEc2fDLjMthlxsgXSSmxDTX HGPkeZ8XAzDfw1wtkyEibkjK9hHX26aPL88ymsISEjtLTOxFNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0Er82ZOiAzcTr/1erQY5N1JLSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2ZkMzRmODAtNWI1ZC0z MjlmLTgxOGQtMDgyMzNkODA3OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYpzYd6Xv+25Mfg/2rymYLEVK4l9Vhxl6PXDfhLeFpyoMa48eJzdTCk Mm/QFbOhkIfd0zL4te/0MotYUaUK7CV3F6eRSHa0tjELgOyr1JgBsBXylvkBXVLf 27BsHpVQqn+wwhxoZmy4C2ZRNv45+wQidMT6e7uh8E34iNWYOrIHc2KhXVj4FAVg Big6oS1K/aSB55RGh1NmxikvN8bu6TF2UPJdQzm8Tr92+9FX8HDa1CmXkN3ZKidh BViORhAvRoCMtecOP+sguX5KN/Xw5HM2fTRHixWzYSG7a34b/wh5JJLSBAhxbXPc poGEQWgzFcuNa0IqvzLO/qOE6lr2feQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:34 2025 by rpki-client