$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa File: e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa (raw, json) Hash identifier: LYxNfN/xi8P7j8F9NYe9Mz/2Axcal1O7jNrLQkTSZGA= Subject key identifier: A4:C8:73:51:0F:AA:7E:25:A5:F9:84:03:90:7F:B6:54:4E:CF:60:15 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA314589109502C3AF89A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:31:45:89:10:95:02:c3:af:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=f1e7894a-3c13-4da3-96f3-034d7e6eb050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:d5:98:31:03:eb:3a:88:b0:f0:c1:e6:6b: 15:31:c1:fe:44:e8:89:6d:5a:6d:f5:44:97:59:37: 61:d9:f4:32:8b:e3:00:9f:83:a3:11:eb:6b:7a:85: 21:3b:b3:db:17:69:a9:1d:45:f3:19:ed:b9:f6:df: c6:a0:c0:5f:56:e8:76:63:3e:08:17:b5:60:7b:07: d2:0e:94:f5:fc:b3:80:67:4a:27:0c:9d:00:b9:f7: f4:ba:ee:dc:20:72:1a:0c:0a:12:fd:b1:3f:bf:61: f0:4d:80:29:a4:18:1a:01:72:2f:f0:49:73:f4:b0: 9d:4a:92:96:1a:d0:0d:68:24:f5:44:7d:77:1b:17: b8:44:ba:c7:4c:38:28:ab:fa:3a:2d:27:81:02:ce: 03:e8:4e:ad:e7:6b:50:a1:19:0d:63:7d:f0:a0:55: 8c:f4:6f:cc:13:69:ab:d1:41:7f:3e:20:0a:09:a7: ab:69:fa:fd:09:7c:97:b2:d9:13:25:51:33:83:d2: c5:46:a1:13:aa:3b:af:59:d0:11:40:7b:b8:fd:42: a9:3f:c3:2d:46:1c:8a:15:bf:77:27:82:6d:2d:45: 06:d4:d5:ed:01:55:e9:a5:b9:aa:d7:61:5a:45:f3: 90:db:ea:ae:06:77:2e:e5:47:7e:80:11:78:49:6b: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C8:73:51:0F:AA:7E:25:A5:F9:84:03:90:7F:B6:54:4E:CF:60:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:4e:8b:12:0f:5e:aa:4b:dc:62:20:9b:f1:e6:e2:fa:02:21: 08:6c:76:ac:09:b5:ae:ca:82:f2:22:68:79:d9:d3:02:77:3e: 48:ee:e5:3d:16:b9:f8:fd:6c:e2:02:51:71:f2:9b:86:1d:29: 6d:91:3d:98:ab:4f:b7:86:ac:00:ff:0e:9a:f8:9b:fc:b7:25: 79:05:3c:ff:ef:84:0f:81:6f:27:e5:4d:cb:f9:80:e9:b0:5d: d2:75:23:53:eb:4f:fe:f3:31:7c:02:15:b7:fa:9d:53:e6:6e: 2f:e8:17:ec:be:87:58:5e:31:89:89:7b:16:39:4a:79:c7:ee: 2e:ef:f8:03:3d:d3:25:d7:4a:7f:4d:ca:72:2d:6c:a8:25:0c: 45:57:b6:21:53:c6:87:b6:8b:95:e1:2e:63:39:19:19:d4:8c: d4:d3:91:c3:33:05:b0:40:b7:0b:62:49:e9:49:2c:84:2b:6b: 0a:06:1a:1f:52:10:60:5d:d4:27:a9:dd:20:ec:00:01:26:6b: 43:96:d2:3f:0c:1e:95:28:6b:77:39:b1:c6:9e:22:a3:2f:4f: 4d:83:d3:4b:32:8e:7c:b5:71:42:65:2d:e7:f0:48:44:ac:b2: 18:8e:25:cb:ba:ba:60:8e:a9:3a:bd:e9:56:89:98:4c:c7:48: b1:1f:6f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jFFiRCVAsOviaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZjFlNzg5NGEtM2MxMy00ZGEzLTk2ZjMtMDM0ZDdlNmViMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp7VmDED6zqIsPDB5msVMcH+ROiJbVpt9USX WTdh2fQyi+MAn4OjEetreoUhO7PbF2mpHUXzGe259t/GoMBfVuh2Yz4IF7VgewfS DpT1/LOAZ0onDJ0Auff0uu7cIHIaDAoS/bE/v2HwTYAppBgaAXIv8Elz9LCdSpKW GtANaCT1RH13Gxe4RLrHTDgoq/o6LSeBAs4D6E6t52tQoRkNY33woFWM9G/ME2mr 0UF/PiAKCaerafr9CXyXstkTJVEzg9LFRqETqjuvWdARQHu4/UKpP8MtRhyKFb93 J4JtLUUG1NXtAVXppbmq12FaRfOQ2+quBncu5Ud+gBF4SWv80wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTIc1EPqn4lpfmEA5B/tlROz2AVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTUzYzNmNzItMGE3Mi0z NmQ2LWJmNzgtYzY3ZTk0YjgxZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNOixIPXqpL3GIgm/Hm4voCIQhsdqwJta7KgvIiaHnZ0wJ3Pkju5T0W ufj9bOICUXHym4YdKW2RPZirT7eGrAD/Dpr4m/y3JXkFPP/vhA+BbyflTcv5gOmw XdJ1I1PrT/7zMXwCFbf6nVPmbi/oF+y+h1heMYmJexY5SnnH7i7v+AM90yXXSn9N ynItbKglDEVXtiFTxoe2i5XhLmM5GRnUjNTTkcMzBbBAtwtiSelJLIQrawoGGh9S EGBd1Cep3SDsAAEma0OW0j8MHpUoa3c5scaeIqMvT02D00syjny1cUJlLefwSESs shiOJcu6umCOqTq96VaJmEzHSLEfb1Y= -----END CERTIFICATE-----Generated at Mon Jun 16 04:28:08 2025 by rpki-client