$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5e2732f-5014-363b-829e-9372ca76347c.roa File: b5e2732f-5014-363b-829e-9372ca76347c.roa (raw, json) Hash identifier: EOFeG3c1KTuZCYTmOGEZMwpymlFHwWO4GCah2HyBt5o= Subject key identifier: 37:BB:57:4E:47:52:EC:0D:8D:7F:0C:32:E0:B3:95:C9:BF:22:7B:0B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858491ED6D000A6F41540350F0500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5e2732f-5014-363b-829e-9372ca76347c.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d0:00:a6:f4:15:40:35:0f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=9ba82b67-3607-4a41-b85c-3a7f2799c508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:ac:6b:4f:a4:83:ca:b6:3e:20:4d:84:72: 75:5f:fb:2f:d4:be:5e:84:a1:6c:75:d4:03:5b:5f: 19:83:77:04:30:8e:35:59:f5:9f:e9:4b:02:41:0e: 74:1f:ac:ac:a0:13:10:a7:7c:cf:db:ed:ed:8c:25: ef:79:ab:6e:f8:4c:83:6c:21:d7:1d:38:72:09:0e: 6a:00:b5:b4:e2:7e:14:3d:0c:ec:cc:42:65:3c:9f: f9:6b:c8:d5:08:b2:02:65:05:29:49:58:30:8b:82: 31:80:24:cc:18:4c:26:08:2a:1b:29:e8:55:7a:78: d4:ae:01:e8:d5:99:48:91:e4:83:ef:9c:b9:2f:23: a6:14:54:85:81:35:ee:d1:ce:69:d7:4f:45:0b:de: ca:81:ba:57:fe:1b:f0:c6:1e:f3:54:4a:54:f9:2d: d9:80:6e:ba:d3:62:b2:cc:c2:98:22:60:fa:0a:b5: 62:c7:12:e3:5c:ae:15:c0:dd:e8:9c:6d:18:05:e0: 10:75:b1:13:b6:07:93:3d:b8:21:2b:31:af:1a:53: f0:0e:d0:d7:3f:22:9c:e5:14:e2:a6:80:3d:11:9f: ef:c0:5d:9c:d1:e7:ea:3c:a4:62:ce:cd:c5:29:f4: 68:12:22:f8:8e:f8:d0:4d:21:34:44:31:7d:ad:c3: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BB:57:4E:47:52:EC:0D:8D:7F:0C:32:E0:B3:95:C9:BF:22:7B:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5e2732f-5014-363b-829e-9372ca76347c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:6c:b0:61:15:9d:f0:b2:e6:f1:b7:e0:d1:bb:b6:36:99:3d: 44:34:a8:c8:0f:b8:bb:78:33:f5:5a:37:67:df:0b:92:19:ef: 92:86:19:e0:e1:c8:9c:ae:5a:c5:c2:55:c2:32:c5:cd:ea:1f: 4d:35:ef:52:08:61:fd:1f:01:5a:03:bc:a8:89:c8:09:b1:b1: 09:20:9b:20:f2:59:07:24:78:4b:ac:52:2c:4f:03:0f:b8:e8: 63:dd:79:22:9e:82:29:c0:07:6a:5b:e4:aa:14:e3:28:cc:45: b1:be:c2:0f:75:93:b7:60:05:9b:5c:7d:90:26:a7:f5:b0:95: 85:ca:b3:9a:4e:be:69:d6:44:61:d3:3b:c5:b0:3a:7b:57:74: de:48:da:f3:30:2b:6a:13:82:57:af:60:a0:77:e9:e4:82:1f: 3d:f2:77:ec:52:2a:d1:48:94:45:89:74:87:11:12:49:eb:3d: 9d:f7:af:14:ca:12:36:4d:ae:a3:40:10:18:df:94:c6:33:53: 95:e2:11:ed:c4:8f:fb:87:02:e9:73:af:76:8d:57:0b:fd:17: 11:73:4a:2d:14:35:91:50:7a:25:eb:40:d5:13:41:24:98:dc: d4:22:0a:13:c3:72:ef:a1:98:ca:46:5f:71:c7:1c:e1:c1:1d: 8c:4d:81:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tAApvQVQDUPBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk OWJhODJiNjctMzYwNy00YTQxLWI4NWMtM2E3ZjI3OTljNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonisa0+kg8q2PiBNhHJ1X/sv1L5ehKFsddQD W18Zg3cEMI41WfWf6UsCQQ50H6ysoBMQp3zP2+3tjCXveatu+EyDbCHXHThyCQ5q ALW04n4UPQzszEJlPJ/5a8jVCLICZQUpSVgwi4IxgCTMGEwmCCobKehVenjUrgHo 1ZlIkeSD75y5LyOmFFSFgTXu0c5p109FC97KgbpX/hvwxh7zVEpU+S3ZgG6602Ky zMKYImD6CrVixxLjXK4VwN3onG0YBeAQdbETtgeTPbghKzGvGlPwDtDXPyKc5RTi poA9EZ/vwF2c0efqPKRizs3FKfRoEiL4jvjQTSE0RDF9rcONtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe7V05HUuwNjX8MMuCzlcm/InsLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjVlMjczMmYtNTAxNC0z NjNiLTgyOWUtOTM3MmNhNzYzNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRssGEVnfCy5vG34NG7tjaZPUQ0qMgPuLt4M/VaN2ffC5IZ75KGGeDh yJyuWsXCVcIyxc3qH00171IIYf0fAVoDvKiJyAmxsQkgmyDyWQckeEusUixPAw+4 6GPdeSKeginAB2pb5KoU4yjMRbG+wg91k7dgBZtcfZAmp/WwlYXKs5pOvmnWRGHT O8WwOntXdN5I2vMwK2oTglevYKB36eSCHz3yd+xSKtFIlEWJdIcREknrPZ33rxTK EjZNrqNAEBjflMYzU5XiEe3Ej/uHAulzr3aNVwv9FxFzSi0UNZFQeiXrQNUTQSSY 3NQiChPDcu+hmMpGX3HHHOHBHYxNgWs= -----END CERTIFICATE-----Generated at Fri Apr 4 08:29:30 2025 by rpki-client