$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa File: 1feacc45-abc0-30a4-b522-017d85a47719.roa (raw, json) Hash identifier: iMfUtgr+e4EcxfkOzy6bPmHMNxitx7D8T3cWpRGS2CA= Subject key identifier: 47:90:B6:E0:91:B4:42:29:FA:F0:B5:E3:3A:7E:B4:68:DD:5D:24:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58206C687CBF79556CA2620 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 172.217.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:06:c6:87:cb:f7:95:56:ca:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d6726ad2-774d-4fd1-b0df-16f201ecad80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:54:95:e4:53:51:97:ce:49:b1:e7:90:12:67: a1:a3:9a:25:36:d2:0e:da:6e:cb:95:b1:ac:ec:84: b9:7b:fc:71:58:c9:2f:bf:d8:3d:8f:fa:4d:19:8f: 6d:b6:55:e1:05:a7:cc:ca:42:3e:6b:56:9e:0f:34: 3b:d4:b0:a2:09:2b:9f:8a:90:37:89:b5:a1:03:84: 61:20:fb:76:fa:09:63:8f:67:49:b8:d7:03:3c:fc: 2b:fb:df:1b:83:0b:95:92:07:15:da:65:45:3a:e8: c1:ce:5c:61:14:a9:06:53:e7:6e:88:cf:df:d2:51: 5d:90:f1:b0:de:0a:9e:4d:ab:aa:bf:cc:dc:16:af: 26:17:2d:61:83:ce:53:ab:dc:f4:27:c5:9b:e0:d4: a2:44:27:a3:85:ec:ee:d2:b1:1e:34:6e:35:5d:10: 3f:b1:45:8a:c7:e2:2f:e4:3f:0e:4c:ec:54:c0:90: 17:24:10:d7:33:3e:8f:1d:d0:71:3c:5f:27:f8:39: 51:06:be:37:30:e7:42:f9:9f:aa:05:4e:ea:ef:a2: f9:f7:eb:9f:ef:84:d5:46:f7:e2:e4:fe:e8:4f:a6: ff:df:1a:dc:24:6f:32:c6:80:f6:92:9a:bc:2f:5f: a1:f5:b6:39:6e:c5:a9:e4:36:e5:46:30:69:61:b7: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:90:B6:E0:91:B4:42:29:FA:F0:B5:E3:3A:7E:B4:68:DD:5D:24:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f0:a2:11:31:67:c9:89:7c:d9:2b:d8:bf:2e:b5:07:42:db: c1:00:1f:a4:a5:a8:3f:c0:64:0c:1c:b5:dc:67:68:7b:f6:ae: 03:d6:79:7c:66:80:be:75:8b:d5:ee:7f:1e:fc:e0:2d:49:64: b1:57:54:99:d5:9c:02:41:45:f6:a1:a5:e5:0d:9a:35:66:ab: bb:ea:51:78:bb:2b:97:0e:e1:3d:33:3d:9e:91:8e:81:2e:12: 75:ac:88:1b:20:a5:4e:a6:df:59:34:c9:b7:9b:45:3d:29:85: 22:15:b8:c8:91:0f:7f:5c:0c:e0:01:5a:c8:5b:da:b2:8b:6b: ad:81:53:85:dc:b4:64:f2:e6:7c:0d:ba:20:a2:2d:73:d2:3c: 2b:3d:5b:45:35:5e:87:af:81:5c:7a:4c:cd:21:11:3b:22:ac: 3f:eb:1f:81:ac:cc:52:6d:91:83:16:a9:8c:08:dc:48:6e:ec: db:90:de:74:da:0b:f6:91:ba:d9:0c:d3:e6:03:5a:a2:6b:6c: f3:0b:1c:8f:39:34:b2:d0:cb:2f:e1:01:e3:c0:07:b5:34:bc: 0b:f2:13:6d:db:3c:5c:b6:d9:c4:e5:96:2b:8d:11:9b:e4:fb: ca:37:3b:f2:69:ad:7d:3e:30:c0:6c:d8:c9:06:18:92:51:67: 48:1a:a4:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggbGh8v3lVbKJiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDY3MjZhZDItNzc0ZC00ZmQxLWIwZGYtMTZmMjAxZWNhZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlSV5FNRl85JseeQEmeho5olNtIO2m7LlbGs 7IS5e/xxWMkvv9g9j/pNGY9ttlXhBafMykI+a1aeDzQ71LCiCSufipA3ibWhA4Rh IPt2+gljj2dJuNcDPPwr+98bgwuVkgcV2mVFOujBzlxhFKkGU+duiM/f0lFdkPGw 3gqeTauqv8zcFq8mFy1hg85Tq9z0J8Wb4NSiRCejhezu0rEeNG41XRA/sUWKx+Iv 5D8OTOxUwJAXJBDXMz6PHdBxPF8n+DlRBr43MOdC+Z+qBU7q76L59+uf74TVRvfi 5P7oT6b/3xrcJG8yxoD2kpq8L1+h9bY5bsWp5DblRjBpYbfg6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeQtuCRtEIp+vC14zp+tGjdXSRXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZlYWNjNDUtYWJjMC0z MGE0LWI1MjItMDE3ZDg1YTQ3NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrNk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnwohExZ8mJfNkr2L8utQdC28EAH6SlqD/AZAwctdxnaHv2rgPWeXxm gL51i9Xufx784C1JZLFXVJnVnAJBRfahpeUNmjVmq7vqUXi7K5cO4T0zPZ6RjoEu EnWsiBsgpU6m31k0ybebRT0phSIVuMiRD39cDOABWshb2rKLa62BU4XctGTy5nwN uiCiLXPSPCs9W0U1XoevgVx6TM0hETsirD/rH4GszFJtkYMWqYwI3Ehu7NuQ3nTa C/aRutkM0+YDWqJrbPMLHI85NLLQyy/hAePAB7U0vAvyE23bPFy22cTlliuNEZvk +8o3O/JprX0+MMBs2MkGGJJRZ0gapOc= -----END CERTIFICATE-----Generated at Fri Apr 4 10:06:02 2025 by rpki-client