$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa File: 17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa (raw, json) Hash identifier: aOyGVfGKJ/IHW4uNLwAEj/OqwyedpqOisHGogoWuVUM= Subject key identifier: 88:22:E1:1D:10:B3:96:00:90:91:E8:62:0B:57:04:C3:34:AB:33:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848D6411E52CED516D4C5455680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:1e:52:ce:d5:16:d4:c5:45:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=70cc6573-f52a-4772-bfb8-3b751c11cca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:40:ed:d6:23:a8:28:5a:76:83:7f:d5:b9: 88:2a:dd:52:fa:9a:db:38:f3:f6:05:25:e8:23:ea: b6:31:00:ea:cd:11:58:59:f4:e4:27:11:76:41:8c: 3d:e3:8c:50:9e:64:7b:ef:23:7b:3d:1a:0a:6f:34: c6:d7:4b:a5:a7:2f:38:59:6a:b0:53:25:86:64:34: 47:fd:28:d3:37:e6:79:ab:80:f6:ed:b5:aa:48:ed: 4b:b5:0d:1a:db:c4:ce:35:46:e9:4c:8f:9f:3a:b5: 3f:2f:09:ce:23:30:71:60:a2:96:ca:36:f4:2a:5f: 89:d0:c7:07:3c:2e:aa:11:0e:c0:b5:e6:ad:6b:b9: ad:87:e9:7e:95:2c:a6:1b:f8:07:07:59:6a:ad:5e: be:a6:52:cb:3b:ab:c5:85:53:85:0c:4a:6a:f8:1a: 44:0b:f9:ff:1c:cc:45:2b:4e:d5:9c:49:db:5a:f4: 48:cc:ee:1f:b7:b7:f6:a6:9d:7c:e8:4c:81:be:f7: 7d:9f:9f:c6:c5:7e:88:5a:4d:ec:33:62:d6:64:b4: 31:33:ad:0d:68:c7:2a:85:6c:1b:48:21:2c:74:d0: 76:ff:18:85:cc:76:30:a9:9f:73:38:ce:0e:22:aa: da:96:5e:d4:d6:2e:d8:48:90:16:bf:65:68:83:dc: 8e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:22:E1:1D:10:B3:96:00:90:91:E8:62:0B:57:04:C3:34:AB:33:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b5:db:07:96:36:58:c7:19:f0:fb:e9:20:50:bd:09:c0:6c: 7c:9a:db:4c:9a:d6:d1:dd:6f:ea:9b:73:2b:fb:98:e9:f7:71: a2:2b:56:2e:4c:b5:0b:9d:3d:b2:f8:03:cb:91:2b:10:29:19: d4:d5:e9:ec:13:74:38:94:fe:2a:23:65:3f:c5:cc:20:71:6d: ac:93:99:c2:7e:67:25:2d:a6:5e:2b:1d:ee:a4:1b:ff:da:48: 7a:9e:94:f2:13:6a:b1:12:15:eb:89:3b:41:de:59:45:d3:d0: 6c:6a:ee:92:ea:ad:03:7f:cc:57:fa:69:93:aa:0e:19:31:f8: 1f:fd:1e:c1:b9:28:8d:52:e1:f6:03:1d:33:61:69:bb:72:8f: 40:1b:57:bc:43:f5:5b:b3:c4:2b:9e:ff:9e:a9:30:d7:a8:ae: f3:d1:b0:a5:7d:6d:06:2b:a0:ae:2d:a7:e4:66:33:9b:0e:2b: 68:60:18:36:d6:90:66:83:2c:18:a2:61:d6:d3:84:1c:23:f2: b0:ba:3c:26:d0:e2:96:8d:cb:02:35:f8:bb:65:45:9e:53:3b: c1:aa:00:7e:3e:de:4b:cd:c8:1b:a5:3f:3d:d4:ed:08:1e:dd: e4:92:98:e1:8a:f9:0e:5c:9c:98:15:a9:bd:53:8a:57:c9:5a: b0:50:a3:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQR5SztUW1MVFVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzBjYzY1NzMtZjUyYS00NzcyLWJmYjgtM2I3NTFjMTFjY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9pA7dYjqChadoN/1bmIKt1S+prbOPP2BSXo I+q2MQDqzRFYWfTkJxF2QYw944xQnmR77yN7PRoKbzTG10ulpy84WWqwUyWGZDRH /SjTN+Z5q4D27bWqSO1LtQ0a28TONUbpTI+fOrU/LwnOIzBxYKKWyjb0Kl+J0McH PC6qEQ7Ateata7mth+l+lSymG/gHB1lqrV6+plLLO6vFhVOFDEpq+BpEC/n/HMxF K07VnEnbWvRIzO4ft7f2pp186EyBvvd9n5/GxX6IWk3sM2LWZLQxM60NaMcqhWwb SCEsdNB2/xiFzHYwqZ9zOM4OIqrall7U1i7YSJAWv2Vog9yOxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgi4R0Qs5YAkJHoYgtXBMM0qzN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTdjZDA3MTEtM2JkNC0z ZTA3LThlNmEtYTVmMDRlYjUwZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF612weWNljHGfD76SBQvQnAbHya20ya1tHdb+qbcyv7mOn3caIrVi5M tQudPbL4A8uRKxApGdTV6ewTdDiU/iojZT/FzCBxbayTmcJ+ZyUtpl4rHe6kG//a SHqelPITarESFeuJO0HeWUXT0Gxq7pLqrQN/zFf6aZOqDhkx+B/9HsG5KI1S4fYD HTNhabtyj0AbV7xD9VuzxCue/56pMNeorvPRsKV9bQYroK4tp+RmM5sOK2hgGDbW kGaDLBiiYdbThBwj8rC6PCbQ4paNywI1+LtlRZ5TO8GqAH4+3kvNyBulPz3U7Qge 3eSSmOGK+Q5cnJgVqb1TilfJWrBQo1E= -----END CERTIFICATE-----Generated at Fri Apr 4 08:28:29 2025 by rpki-client