$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef569e35-124a-375e-9b52-74342d4393a2.roa File: ef569e35-124a-375e-9b52-74342d4393a2.roa (raw, json) Hash identifier: GKEGYZtnqxudSLWAzf10B/KOksg5RqbxIieZ50a/+As= Subject key identifier: 1E:BB:88:A5:84:47:79:D9:7D:95:17:D3:B8:3D:6F:10:DD:7B:7D:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD57EA79843A846A86520 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef569e35-124a-375e-9b52-74342d4393a2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.217.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d5:7e:a7:98:43:a8:46:a8:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7c1954d2-5bbd-4111-83a3-c87d3fb500ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:52:14:c3:46:a5:0b:8d:2a:90:0e:24:2f:9e: 6a:76:fc:e2:b8:0d:f5:7d:77:e5:60:3f:17:c2:f9: 3a:7e:c7:9e:dc:fe:32:28:72:1f:75:59:5e:5f:24: 34:b6:ac:20:ab:ee:36:fa:57:db:2b:a4:ba:9a:f2: 47:2c:84:21:25:20:e9:a7:c6:d7:3b:2c:22:56:ec: 8f:a7:d7:07:82:18:06:fe:6d:4d:c0:f9:6e:a3:2d: 98:5c:30:21:bb:44:89:c7:60:69:a7:f1:69:0f:9d: bc:55:ff:4f:cd:0e:b5:24:a1:54:a7:48:42:3d:de: cb:5f:bd:9c:75:9e:09:ff:98:4e:c6:0e:33:13:97: f5:46:76:b4:4d:e1:b0:8d:85:39:e1:16:02:fb:6c: 08:60:51:c9:58:28:ad:87:8c:49:16:ef:f8:d1:ac: 6c:03:b9:12:fe:15:ea:e5:7e:27:5c:1d:51:43:53: ff:a6:e8:5a:23:60:63:88:d5:88:f1:7c:0f:26:57: 58:7d:5a:5a:72:46:10:85:04:e3:b8:50:f2:09:28: 01:bf:87:2e:f4:9c:fd:9f:7b:27:3c:9a:2f:92:0a: 43:d2:71:4c:70:cc:cf:f3:ab:4b:23:e3:2c:f4:a1: 47:c6:2c:94:c8:66:dc:6e:54:b9:67:eb:18:bf:bf: a5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BB:88:A5:84:47:79:D9:7D:95:17:D3:B8:3D:6F:10:DD:7B:7D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef569e35-124a-375e-9b52-74342d4393a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7b:be:b6:d3:6b:d2:ac:de:28:6f:2c:52:a4:70:45:e6:c7: 54:5c:ed:00:4a:f4:61:11:4f:8e:2c:64:02:7f:fd:76:7d:d4: 38:f9:e4:82:62:74:ab:79:e2:c8:9e:81:6a:89:d3:9e:db:39: 07:29:49:9c:2c:54:05:b7:14:57:ec:c0:76:cd:09:15:47:ce: ff:ac:74:6c:12:ae:14:51:bd:d8:68:14:ae:71:09:ee:1f:fb: 96:87:c9:c3:16:ef:05:24:f9:e8:1d:ff:79:97:fe:77:bd:77: a5:bc:97:da:a6:9d:2d:91:8b:52:1a:ae:11:af:ee:17:d1:19: 7c:e8:31:84:d6:14:4a:58:a5:d9:e5:de:2b:46:07:15:61:e2: 02:dd:da:9c:ac:1b:c3:69:65:62:de:80:78:59:5e:9d:a0:97: 5c:8d:0a:c5:df:5b:f1:18:21:50:c8:de:23:e6:5b:2d:f3:8d: 25:2b:a6:ab:bd:a9:43:07:cc:bf:ee:9a:96:bc:02:91:e4:49: 22:36:dc:47:1c:43:66:9d:7b:9b:99:be:48:61:a8:79:b6:1e: 4e:d5:a7:73:6f:9d:8e:eb:26:ef:17:2b:1a:b7:4a:cd:c0:54: a0:b3:ec:99:d6:b0:7b:4c:03:37:9c:62:e1:67:d3:e9:df:1f: c6:c5:09:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutV+p5hDqEaoZSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2MxOTU0ZDItNWJiZC00MTExLTgzYTMtYzg3ZDNmYjUwMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglIUw0alC40qkA4kL55qdvziuA31fXflYD8X wvk6fsee3P4yKHIfdVleXyQ0tqwgq+42+lfbK6S6mvJHLIQhJSDpp8bXOywiVuyP p9cHghgG/m1NwPluoy2YXDAhu0SJx2Bpp/FpD528Vf9PzQ61JKFUp0hCPd7LX72c dZ4J/5hOxg4zE5f1Rna0TeGwjYU54RYC+2wIYFHJWCith4xJFu/40axsA7kS/hXq 5X4nXB1RQ1P/puhaI2BjiNWI8XwPJldYfVpackYQhQTjuFDyCSgBv4cu9Jz9n3sn PJovkgpD0nFMcMzP86tLI+Ms9KFHxiyUyGbcblS5Z+sYv7+l1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB67iKWER3nZfZUX07g9bxDde30/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWY1NjllMzUtMTI0YS0z NzVlLTliNTItNzQzNDJkNDM5M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ7vrbTa9Ks3ihvLFKkcEXmx1Rc7QBK9GERT44sZAJ//XZ91Dj55IJi dKt54siegWqJ057bOQcpSZwsVAW3FFfswHbNCRVHzv+sdGwSrhRRvdhoFK5xCe4f +5aHycMW7wUk+egd/3mX/ne9d6W8l9qmnS2Ri1IarhGv7hfRGXzoMYTWFEpYpdnl 3itGBxVh4gLd2pysG8NpZWLegHhZXp2gl1yNCsXfW/EYIVDI3iPmWy3zjSUrpqu9 qUMHzL/umpa8ApHkSSI23EccQ2ade5uZvkhhqHm2Hk7Vp3NvnY7rJu8XKxq3Ss3A VKCz7JnWsHtMAzecYuFn0+nfH8bFCXg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:25 2025 by rpki-client