$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa File: 7c4bfe71-a264-378d-8208-efb0eb90221e.roa (raw, json) Hash identifier: ubjkGzlEo7E8PsXTaYE+ZeBYZUkzgXQY0GvyNapUe5E= Subject key identifier: D5:B1:67:D1:D8:24:8D:3B:6E:3D:89:1C:22:33:DF:19:1B:C5:E5:3A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822299C5D1B1930CBA7480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:22:99:c5:d1:b1:93:0c:ba:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=64618061-4ae6-48a2-8f80-607f95d7535f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:fd:25:61:d8:7d:c0:6d:f7:2c:23:f2:f9: d9:2b:18:f0:6f:d2:80:30:a4:64:f6:52:20:d1:a7: 34:c0:58:d2:f7:04:05:03:e3:b8:ad:4f:cb:39:6e: 97:5f:18:bb:9f:e2:da:e8:2b:41:e9:ca:26:64:76: d1:1f:a4:e2:0a:6c:29:3c:5f:9b:66:fe:50:ec:41: 8d:92:d1:c8:72:89:b7:20:01:f0:e6:e4:30:42:ff: 39:75:61:75:62:82:77:0e:e0:03:05:e7:73:b9:13: 59:81:b6:9a:90:ae:0a:7f:83:38:86:34:4c:be:84: 4b:ef:51:5e:85:71:91:2a:fd:4b:8e:55:d9:b1:18: b3:a2:70:47:0e:9a:22:84:4b:b6:29:96:a6:f0:03: 4c:52:22:5a:62:e5:41:f5:6a:e9:51:59:d4:11:ac: ea:f4:5a:57:db:70:83:23:0f:25:a0:19:ef:a1:92: 3a:1f:de:51:be:10:e7:03:38:89:0a:31:fe:d5:fe: f1:7a:d5:31:4b:cc:09:95:fa:f8:42:d7:39:0a:0c: be:e9:81:30:0d:f7:bd:4d:6e:4d:a6:5b:6b:28:d3: 33:a2:48:0c:70:d3:12:22:cd:03:0d:69:8d:77:e9: 50:6f:05:9a:34:46:5a:e3:56:fe:ad:38:4d:c8:77: b1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:67:D1:D8:24:8D:3B:6E:3D:89:1C:22:33:DF:19:1B:C5:E5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c4bfe71-a264-378d-8208-efb0eb90221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d3:13:90:93:77:f8:59:ad:77:5a:b9:8e:47:02:6b:b4:bf: fb:ce:c0:81:3a:1c:1e:b0:11:45:1f:85:cf:80:9b:35:59:e2: 15:66:fa:8b:87:66:6e:2c:eb:93:6a:6f:d4:11:6b:81:c0:4a: 68:bc:40:e5:74:19:dd:94:51:d9:e2:85:3b:33:2f:cc:41:97: 42:bf:49:c9:ac:dc:cc:68:f0:b4:88:b9:3a:4b:84:37:ac:02: c5:00:02:2c:95:bf:63:05:38:05:a2:fe:f0:5b:65:e4:88:63: 3e:41:e5:b1:11:50:e9:40:a1:fe:d1:e4:42:1f:b4:70:fb:dd: 9e:13:d0:4c:77:d0:7b:20:45:82:fc:0d:e2:3a:81:fd:aa:81: bb:aa:90:8b:96:ab:51:81:41:df:c1:2b:79:a9:2b:b8:e2:22: 96:e7:25:10:eb:9e:d6:81:f0:20:a4:42:30:e5:cc:cf:b5:57: 25:2e:8b:66:ab:88:98:48:dc:d3:76:59:c2:fd:8a:98:fc:d4: 82:e5:5c:03:ae:c9:79:54:5e:76:03:bb:3d:2f:ea:70:1c:5f: dd:0d:61:f3:0e:db:71:b4:27:d2:33:62:3d:58:ef:70:cb:9d: 32:e9:2f:5e:f4:fd:9e:92:23:88:b9:ec:76:36:f3:1c:4c:d0: 49:69:cd:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiKZxdGxkwy6dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjQ2MTgwNjEtNGFlNi00OGEyLThmODAtNjA3Zjk1ZDc1MzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy979JWHYfcBt9ywj8vnZKxjwb9KAMKRk9lIg 0ac0wFjS9wQFA+O4rU/LOW6XXxi7n+La6CtB6comZHbRH6TiCmwpPF+bZv5Q7EGN ktHIcom3IAHw5uQwQv85dWF1YoJ3DuADBedzuRNZgbaakK4Kf4M4hjRMvoRL71Fe hXGRKv1LjlXZsRizonBHDpoihEu2KZam8ANMUiJaYuVB9WrpUVnUEazq9FpX23CD Iw8loBnvoZI6H95RvhDnAziJCjH+1f7xetUxS8wJlfr4Qtc5Cgy+6YEwDfe9TW5N pltrKNMzokgMcNMSIs0DDWmNd+lQbwWaNEZa41b+rThNyHexSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWxZ9HYJI07bj2JHCIz3xkbxeU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2M0YmZlNzEtYTI2NC0z NzhkLTgyMDgtZWZiMGViOTAyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLTE5CTd/hZrXdauY5HAmu0v/vOwIE6HB6wEUUfhc+AmzVZ4hVm+ouH Zm4s65Nqb9QRa4HASmi8QOV0Gd2UUdnihTszL8xBl0K/Scms3Mxo8LSIuTpLhDes AsUAAiyVv2MFOAWi/vBbZeSIYz5B5bERUOlAof7R5EIftHD73Z4T0Ex30HsgRYL8 DeI6gf2qgbuqkIuWq1GBQd/BK3mpK7jiIpbnJRDrntaB8CCkQjDlzM+1VyUui2ar iJhI3NN2WcL9ipj81ILlXAOuyXlUXnYDuz0v6nAcX90NYfMO23G0J9IzYj1Y73DL nTLpL170/Z6SI4i57HY28xxM0ElpzT0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:02 2025 by rpki-client