$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa File: d81db5f9-daca-3854-894b-06f15dcabb67.roa (raw, json) Hash identifier: OC6xNcSvGrCCIn6KSS3hnO8jFopvLf3tghX00ua79Sg= Subject key identifier: 61:C3:9F:68:E8:3A:55:E8:02:20:6D:DB:2E:55:CF:AD:D3:E0:1A:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849D4312B32AB75C72B17AD1C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:2b:32:ab:75:c7:2b:17:ad:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=5130c70e-662c-4f6c-b0f8-9d9db76623f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1b:e9:a8:8e:45:33:a5:1c:6e:6a:d2:54:3a: 50:53:75:87:95:1c:c4:8d:a5:69:ad:5d:8f:72:0b: 85:38:d1:db:c9:cc:9a:a5:fe:e9:79:21:13:92:52: 80:ad:53:53:2d:1a:55:95:b3:45:08:9e:eb:0d:56: 0d:59:72:7a:5c:cb:62:ad:91:7c:4d:af:75:87:f1: 21:fe:a9:59:1d:43:2f:77:14:56:3c:70:41:aa:b1: 2c:51:a8:0e:91:e0:b9:52:37:c6:23:1d:65:8e:a5: c8:c4:0b:2c:2f:38:25:7b:77:57:8b:7f:e0:ac:6f: 20:c2:d4:4a:53:1b:df:3b:c8:41:20:f8:14:9e:1a: 84:15:c6:37:fc:bf:d3:9e:fc:3e:6f:53:2f:d6:f1: ba:11:0c:3a:39:bf:ed:70:82:bc:54:17:10:c1:dd: d7:6d:79:18:a6:23:8d:ea:28:6b:e7:16:82:99:1a: a1:33:64:a7:74:d7:47:3f:a5:08:ab:c3:40:c9:93: 67:71:08:af:2b:9b:fe:82:86:5c:c9:b9:ee:53:5e: 01:2a:41:1f:34:40:af:86:16:48:8e:da:de:13:e1: 4f:6a:40:c5:b6:bc:c9:e2:c3:60:7e:40:33:e8:a2: b0:b0:d5:0c:c6:09:6e:88:99:e5:77:77:16:56:3c: a5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C3:9F:68:E8:3A:55:E8:02:20:6D:DB:2E:55:CF:AD:D3:E0:1A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:56:07:19:d4:11:44:7c:ec:52:a1:b0:36:80:ce:82:ce:78: b6:93:95:72:aa:6b:d5:94:12:a2:64:a5:d4:65:fc:20:d9:b7: a7:39:12:40:69:11:05:07:c9:9f:c4:7b:e1:5e:96:28:cb:83: df:89:aa:f4:4b:7a:3d:94:fe:99:57:e1:75:3c:99:5b:58:a6: 08:2e:10:e9:8a:49:e7:9b:6d:16:96:8a:af:6e:4c:22:06:2f: 9b:cc:a7:dd:e1:07:7e:12:07:09:f3:91:b5:aa:e9:b2:01:db: 4e:69:0a:dc:6e:41:1a:a4:10:88:bd:e0:e3:e9:15:5a:79:b4: 96:0e:78:6a:da:25:3e:ea:ee:ad:1a:07:a1:3a:31:18:cc:79: 59:52:1a:e7:b6:79:51:db:5c:ee:bb:f8:b6:04:f0:d3:a6:4b: 94:ec:65:37:4e:5e:a5:b3:43:1c:2c:5f:d0:4c:76:f5:b2:11: eb:a2:af:51:db:69:92:3e:79:56:06:c5:d7:c3:85:80:63:12: 32:b1:10:5b:3d:0c:41:0c:9e:96:9c:ff:b2:ea:a4:7f:6a:e9: 60:33:ba:e5:06:f4:38:ef:27:d4:d6:54:a7:6d:f1:4b:9c:39: 34:7d:86:93:4a:fc:1a:00:d2:e2:69:1f:18:8a:0d:08:bf:73: c0:e4:b8:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMSsyq3XHKxetHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTEzMGM3MGUtNjYyYy00ZjZjLWIwZjgtOWQ5ZGI3NjYyM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxvpqI5FM6UcbmrSVDpQU3WHlRzEjaVprV2P cguFONHbycyapf7peSETklKArVNTLRpVlbNFCJ7rDVYNWXJ6XMtirZF8Ta91h/Eh /qlZHUMvdxRWPHBBqrEsUagOkeC5UjfGIx1ljqXIxAssLzgle3dXi3/grG8gwtRK UxvfO8hBIPgUnhqEFcY3/L/Tnvw+b1Mv1vG6EQw6Ob/tcIK8VBcQwd3XbXkYpiON 6ihr5xaCmRqhM2SndNdHP6UIq8NAyZNncQivK5v+goZcybnuU14BKkEfNECvhhZI jtreE+FPakDFtrzJ4sNgfkAz6KKwsNUMxgluiJnld3cWVjyltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHDn2joOlXoAiBt2y5Vz63T4BpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDgxZGI1ZjktZGFjYS0z ODU0LTg5NGItMDZmMTVkY2FiYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExWBxnUEUR87FKhsDaAzoLOeLaTlXKqa9WUEqJkpdRl/CDZt6c5EkBp EQUHyZ/Ee+FelijLg9+JqvRLej2U/plX4XU8mVtYpgguEOmKSeebbRaWiq9uTCIG L5vMp93hB34SBwnzkbWq6bIB205pCtxuQRqkEIi94OPpFVp5tJYOeGraJT7q7q0a B6E6MRjMeVlSGue2eVHbXO67+LYE8NOmS5TsZTdOXqWzQxwsX9BMdvWyEeuir1Hb aZI+eVYGxdfDhYBjEjKxEFs9DEEMnpac/7LqpH9q6WAzuuUG9DjvJ9TWVKdt8Uuc OTR9hpNK/BoA0uJpHxiKDQi/c8DkuIw= -----END CERTIFICATE-----Generated at Sun Jun 15 19:16:04 2025 by rpki-client