$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa File: 7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa (raw, json) Hash identifier: CU+p0Ck5h3kk9XNHT3m2KG7fV0/1BQ2d8Z8p9EYbpX4= Subject key identifier: C1:6F:62:BD:71:2B:4C:A4:B1:A8:7C:0A:95:51:1A:50:FA:22:3A:B7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5816E8B6B7FE6F2DBEC9E50 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6e:8b:6b:7f:e6:f2:db:ec:9e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8b7307da-69fb-4f75-897e-62629a5fde4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:d9:cc:51:0a:41:f0:2e:42:e3:a1:9b:b9: 6d:39:b4:c4:61:8c:84:e6:35:a6:93:31:90:7d:08: 48:3f:97:e3:2c:a7:d0:76:71:74:8c:44:5d:ee:1a: ec:1a:b3:00:44:24:47:ae:92:b6:2f:2c:ca:fc:49: de:16:12:8a:f0:92:c2:8a:d1:39:4f:eb:c1:d4:d4: 16:12:e5:26:38:18:52:34:9b:b0:b4:95:66:40:23: ba:b6:c3:35:df:f6:16:e1:65:c0:de:d8:a0:22:6e: 7f:45:d4:d8:87:4d:c9:3d:f1:58:ff:88:b7:8b:6e: 8d:2a:6f:25:c6:fa:40:c4:db:89:95:2f:71:ae:0e: 7d:19:1a:f1:fc:a2:3e:93:ee:ff:b6:c0:c9:a1:73: 1e:68:83:3f:06:00:36:9f:90:ad:3e:d5:8e:2d:57: d9:30:76:e7:10:3f:1a:ef:3f:55:58:69:b6:28:70: 88:08:d3:f0:72:de:61:26:16:b0:87:4b:3b:81:85: 7b:87:ee:6d:db:a5:e2:2b:f6:63:5c:0c:fe:01:2e: 63:a9:19:20:45:ca:5a:2c:ac:64:b3:e9:c7:a7:b5: bf:f2:e3:6a:93:8b:48:50:9d:78:38:98:58:b8:60: 9f:a4:71:ff:fa:3c:1d:57:73:c6:31:c0:8a:79:3a: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6F:62:BD:71:2B:4C:A4:B1:A8:7C:0A:95:51:1A:50:FA:22:3A:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:26:f9:87:71:7a:1a:ae:e8:e8:33:eb:32:60:c9:e5:b5:15: 00:1e:5d:ad:56:cb:f0:18:96:96:82:cd:7c:a3:48:3d:fe:3e: e0:73:5f:c5:44:1f:b3:3a:d2:de:8f:5f:38:38:9c:7d:61:a5: c6:67:aa:a6:6d:6f:2f:a8:82:ca:b5:9b:2d:1d:a7:20:13:02: d1:ca:31:48:d2:2e:c9:ae:bd:e7:8e:12:1f:b2:ef:2b:fd:00: 6b:0e:95:fa:c0:45:ab:47:30:40:fe:27:b5:6a:71:0f:e0:bc: 9b:a3:1f:b4:b0:d6:31:55:8d:bc:93:bf:47:3d:96:34:20:25: 28:3b:1d:03:79:27:5a:85:e9:84:20:5a:ba:69:46:f1:50:fb: fe:fa:ef:bc:a9:8e:9c:71:d7:13:3b:80:13:35:c1:ac:3a:63: 8d:9c:32:78:77:2a:15:a1:5f:df:cd:17:9c:61:fe:61:32:ee: 4f:2b:23:24:67:8b:dd:d8:1b:14:12:63:7a:93:6c:3e:92:6c: 83:42:77:66:e8:1a:8f:44:ba:fe:91:2f:86:15:e9:ba:e4:f6: f2:39:f6:1d:cd:7b:bf:62:ac:fe:0f:40:4c:cf:09:05:aa:c6: d8:76:f3:92:99:6a:ae:88:f2:6d:9f:b3:44:fd:13:2e:11:4a: 8c:99:cf:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgW6La3/m8tvsnlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGI3MzA3ZGEtNjlmYi00Zjc1LTg5N2UtNjI2MjlhNWZkZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0bZzFEKQfAuQuOhm7ltObTEYYyE5jWmkzGQ fQhIP5fjLKfQdnF0jERd7hrsGrMARCRHrpK2LyzK/EneFhKK8JLCitE5T+vB1NQW EuUmOBhSNJuwtJVmQCO6tsM13/YW4WXA3tigIm5/RdTYh03JPfFY/4i3i26NKm8l xvpAxNuJlS9xrg59GRrx/KI+k+7/tsDJoXMeaIM/BgA2n5CtPtWOLVfZMHbnED8a 7z9VWGm2KHCICNPwct5hJhawh0s7gYV7h+5t26XiK/ZjXAz+AS5jqRkgRcpaLKxk s+nHp7W/8uNqk4tIUJ14OJhYuGCfpHH/+jwdV3PGMcCKeTpx8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFvYr1xK0yksah8CpVRGlD6Ijq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2E4Y2U0M2MtYTFlZi0z ZTYyLTk5MzEtYmI5NGEwYmE2M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGom+Ydxehqu6Ogz6zJgyeW1FQAeXa1Wy/AYlpaCzXyjSD3+PuBzX8VE H7M60t6PXzg4nH1hpcZnqqZtby+ogsq1my0dpyATAtHKMUjSLsmuveeOEh+y7yv9 AGsOlfrARatHMED+J7VqcQ/gvJujH7Sw1jFVjbyTv0c9ljQgJSg7HQN5J1qF6YQg WrppRvFQ+/7677ypjpxx1xM7gBM1waw6Y42cMnh3KhWhX9/NF5xh/mEy7k8rIyRn i93YGxQSY3qTbD6SbINCd2boGo9Euv6RL4YV6brk9vI59h3Ne79irP4PQEzPCQWq xth285KZaq6I8m2fs0T9Ey4RSoyZzz8= -----END CERTIFICATE-----Generated at Fri Apr 4 08:30:32 2025 by rpki-client