$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/410e946b-75d7-31af-aefe-d32233f8166b.roa File: 410e946b-75d7-31af-aefe-d32233f8166b.roa (raw, json) Hash identifier: l98dxptLVevPAFwzG2PwtQYlP0yWofQO0qX31Gtyxlw= Subject key identifier: 25:53:C9:79:CE:88:6E:CC:19:33:50:93:C7:C8:84:76:0D:D2:DE:41 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12F98484C9937C2340D58 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/410e946b-75d7-31af-aefe-d32233f8166b.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.217.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2f:98:48:4c:99:37:c2:34:0d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=eb0e8fcc-cc56-4de8-b871-2f8466b12b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:68:c3:2e:bf:47:3f:b7:a3:30:ec:24:93: eb:17:95:10:bb:5d:11:70:9e:6c:5d:08:7c:af:7f: dc:09:44:db:96:31:bc:d8:83:e3:28:82:89:e6:de: 9a:01:ce:19:d8:7f:e6:19:e5:98:7d:c3:e2:4b:ed: c4:ab:0c:e9:a3:11:7a:25:30:09:6e:30:2a:fb:de: 2f:78:eb:2e:a3:8c:4d:be:77:15:0a:31:7a:5f:fc: be:ae:45:6f:4b:1a:b0:aa:49:d9:79:da:7e:f0:9d: 01:32:be:bf:48:be:ac:f5:d7:c8:1a:dd:b3:43:d7: 8a:8e:22:08:3e:7a:01:44:0a:a2:c4:fb:25:55:e1: 39:7a:a6:ea:8c:1c:1c:06:30:96:98:f7:f5:99:cc: d7:88:ef:ca:d8:c5:4f:7f:be:8a:e3:60:91:ae:be: b8:af:86:6d:4e:2a:85:a7:9a:26:e5:92:96:8c:07: dc:86:45:a5:c8:b4:cf:08:ae:6c:61:81:ec:29:59: 49:e1:a2:dc:07:81:3d:80:e3:f2:3e:ab:da:a3:f7: fc:59:2e:ad:47:fd:2d:d0:85:96:2b:31:d5:e7:20: 56:c6:55:03:22:d7:12:e6:e1:a8:7c:a8:94:bb:25: 1d:d4:a0:82:b2:59:64:07:36:14:8a:16:1c:cf:67: 25:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:53:C9:79:CE:88:6E:CC:19:33:50:93:C7:C8:84:76:0D:D2:DE:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/410e946b-75d7-31af-aefe-d32233f8166b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:f7:f9:79:a3:a2:9b:1a:37:29:bf:a6:58:89:0d:92:c1:69: 24:7f:40:80:66:5c:71:55:1a:d3:fd:f0:4a:90:53:2d:b6:52: 57:57:cf:9a:5f:f7:f8:10:a2:5a:b9:48:dd:64:09:a1:38:57: f0:a4:cd:b7:4d:31:99:9f:93:f5:5c:93:39:12:37:1a:b7:da: af:3f:33:3f:a8:91:e5:15:f5:f2:02:dd:9b:eb:81:63:1a:80: c0:c8:73:db:7e:25:93:3f:3d:bc:4c:4f:4b:3a:de:cc:93:17: 9e:b0:49:bf:c6:ba:bc:91:f7:69:a1:aa:9e:c1:2e:04:18:33: 63:5e:5d:d8:f9:d2:7e:17:63:16:4c:a3:b6:97:10:59:ff:78: 69:e0:2c:04:fc:1b:0c:b7:39:ca:17:2a:5f:bd:08:e8:31:98: 3b:ae:1d:06:bc:b5:9e:d9:6f:fb:03:4b:67:0e:45:1e:c9:7d: 66:20:90:6e:bc:ca:9b:06:3b:2b:41:e7:47:45:e6:2c:22:5c: 91:2f:0f:9d:9f:48:da:20:5b:ee:d3:f5:1d:cb:bd:24:31:ed: ad:1b:5f:ce:02:7f:44:3f:74:84:35:a0:93:61:33:ea:e3:32: 4d:fb:ee:fa:21:ad:84:fe:45:4c:00:4d:d1:86:f2:74:69:db: 62:25:ae:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS+YSEyZN8I0DVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZWIwZThmY2MtY2M1Ni00ZGU4LWI4NzEtMmY4NDY2YjEyYjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSlowy6/Rz+3ozDsJJPrF5UQu10RcJ5sXQh8 r3/cCUTbljG82IPjKIKJ5t6aAc4Z2H/mGeWYfcPiS+3EqwzpoxF6JTAJbjAq+94v eOsuo4xNvncVCjF6X/y+rkVvSxqwqknZedp+8J0BMr6/SL6s9dfIGt2zQ9eKjiII PnoBRAqixPslVeE5eqbqjBwcBjCWmPf1mczXiO/K2MVPf76K42CRrr64r4ZtTiqF p5om5ZKWjAfchkWlyLTPCK5sYYHsKVlJ4aLcB4E9gOPyPqvao/f8WS6tR/0t0IWW KzHV5yBWxlUDItcS5uGofKiUuyUd1KCCsllkBzYUihYcz2clzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVTyXnOiG7MGTNQk8fIhHYN0t5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDEwZTk0NmItNzVkNy0z MWFmLWFlZmUtZDMyMjMzZjgxNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK73+XmjopsaNym/pliJDZLBaSR/QIBmXHFVGtP98EqQUy22UldXz5pf 9/gQolq5SN1kCaE4V/CkzbdNMZmfk/VckzkSNxq32q8/Mz+okeUV9fIC3ZvrgWMa gMDIc9t+JZM/PbxMT0s63syTF56wSb/GuryR92mhqp7BLgQYM2NeXdj50n4XYxZM o7aXEFn/eGngLAT8Gwy3OcoXKl+9COgxmDuuHQa8tZ7Zb/sDS2cORR7JfWYgkG68 ypsGOytB50dF5iwiXJEvD52fSNogW+7T9R3LvSQx7a0bX84Cf0Q/dIQ1oJNhM+rj Mk377vohrYT+RUwATdGG8nRp22Ilri4= -----END CERTIFICATE-----Generated at Fri Apr 4 08:43:51 2025 by rpki-client