$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa File: e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa (raw, json) Hash identifier: vLBs2unKDBmZmWCFtgjRtyjxK+LGKPIeup4cYLpDA98= Subject key identifier: 1D:32:7B:0D:FE:A6:EC:FB:52:78:0A:DC:11:D7:0F:8A:DB:FD:F5:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818246BE51704D56CD7680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:82:46:be:51:70:4d:56:cd:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=16613dd5-9caf-424b-9d18-a664ac79b93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:95:2f:23:cc:a1:22:ba:84:05:24:9f:af: b2:62:23:8f:54:6a:0d:ef:93:fb:b0:b8:c2:91:69: ca:bc:4b:01:ce:a6:1e:5d:56:7c:b2:a4:27:4b:ad: f4:35:05:86:4b:5b:73:86:fc:8d:bf:d5:8f:cc:60: dd:fe:45:38:98:e9:5c:49:ad:d1:d5:a7:96:5f:8c: 82:1e:19:6a:bd:b5:d0:ca:5a:00:3e:44:e2:e1:4a: b8:31:49:e6:78:24:3f:f9:73:22:48:4a:3d:1f:d0: 0a:50:74:56:e7:8e:55:7e:21:0d:c9:f0:f2:41:8b: 59:5e:12:72:d6:a6:2d:ed:fd:06:08:fd:6f:df:e5: 00:4f:cf:be:6a:88:09:65:83:9f:8f:30:ff:a5:ef: d5:5e:76:54:2f:56:26:f0:fc:c4:ec:60:b5:fb:ca: 65:26:03:49:f0:bd:5e:fc:b5:b1:3b:fb:e5:95:36: 07:a8:d2:0d:a2:ee:a1:f8:67:47:f5:41:a7:73:d0: cb:e6:cc:2c:af:6a:88:f2:e5:d4:8d:41:db:70:6e: 4e:e6:ec:1b:5e:39:8c:35:7e:70:53:19:5b:9a:c2: 8f:70:cd:80:ff:4b:3c:fb:c5:d2:04:34:b4:1c:c9: 27:59:30:af:3d:7b:cd:cf:93:8f:9d:d4:84:89:50: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:32:7B:0D:FE:A6:EC:FB:52:78:0A:DC:11:D7:0F:8A:DB:FD:F5:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0f:15:38:36:42:e8:c3:0e:91:c8:47:ab:57:ee:ca:15:52: d4:95:ab:09:2c:80:cf:58:02:79:2e:57:7d:5b:11:56:d4:f8: 38:f9:45:47:25:a7:c4:c8:64:85:cb:ca:8c:1b:3b:9b:29:08: be:26:1c:72:45:a1:37:f1:2f:32:a5:90:bd:d4:52:a2:92:41: 6f:75:9b:d6:6c:5b:f3:88:36:af:11:48:54:d0:0a:9c:5a:5b: ef:f6:8e:cc:66:03:20:3e:39:e0:af:2f:75:11:fd:2f:a3:54: 9e:93:bb:2e:58:7e:ac:27:7d:47:65:55:d5:cd:b6:46:92:99: 04:46:cf:3a:23:86:0b:0a:f8:80:bc:c1:8d:84:14:4f:89:ab: ad:3b:09:67:41:50:46:06:10:f7:b4:4b:4c:d9:43:75:b0:54: b8:c2:b9:13:9a:21:02:00:19:a2:3c:49:40:de:ac:f0:4c:a2: e0:78:ba:9c:da:71:8e:65:d9:c8:8f:fc:6d:92:d4:4e:b8:7f: 9f:d7:eb:e6:27:64:75:6a:20:ad:2f:74:66:67:82:a8:88:31: 45:58:fe:cb:c8:c3:88:61:09:0a:1f:ec:ae:18:ad:f8:62:4a: 51:d3:d4:90:1d:59:d5:88:d9:d5:2f:a5:98:8e:c6:23:35:13: ec:17:b6:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYJGvlFwTVbNdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTY2MTNkZDUtOWNhZi00MjRiLTlkMTgtYTY2NGFjNzliOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH6VLyPMoSK6hAUkn6+yYiOPVGoN75P7sLjC kWnKvEsBzqYeXVZ8sqQnS630NQWGS1tzhvyNv9WPzGDd/kU4mOlcSa3R1aeWX4yC HhlqvbXQyloAPkTi4Uq4MUnmeCQ/+XMiSEo9H9AKUHRW545VfiENyfDyQYtZXhJy 1qYt7f0GCP1v3+UAT8++aogJZYOfjzD/pe/VXnZUL1Ym8PzE7GC1+8plJgNJ8L1e /LWxO/vllTYHqNINou6h+GdH9UGnc9DL5swsr2qI8uXUjUHbcG5O5uwbXjmMNX5w UxlbmsKPcM2A/0s8+8XSBDS0HMknWTCvPXvNz5OPndSEiVAECQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0yew3+puz7UngK3BHXD4rb/fVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTRjYWE0OGMtNWIxNi0z N2Q2LTgzNDItYTNiOGEzYjVkNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIPFTg2QujDDpHIR6tX7soVUtSVqwksgM9YAnkuV31bEVbU+Dj5RUcl p8TIZIXLyowbO5spCL4mHHJFoTfxLzKlkL3UUqKSQW91m9ZsW/OINq8RSFTQCpxa W+/2jsxmAyA+OeCvL3UR/S+jVJ6Tuy5YfqwnfUdlVdXNtkaSmQRGzzojhgsK+IC8 wY2EFE+Jq607CWdBUEYGEPe0S0zZQ3WwVLjCuROaIQIAGaI8SUDerPBMouB4upza cY5l2ciP/G2S1E64f5/X6+YnZHVqIK0vdGZngqiIMUVY/svIw4hhCQof7K4Yrfhi SlHT1JAdWdWI2dUvpZiOxiM1E+wXtlY= -----END CERTIFICATE-----Generated at Fri Apr 4 08:29:30 2025 by rpki-client