$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa File: 42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa (raw, json) Hash identifier: 9NPdmCAsLBIfASkRUiGulcRCsDHzLFrGL7vG3R40wBE= Subject key identifier: 6A:51:49:EF:86:02:FB:94:DA:95:40:6F:3A:5E:51:75:96:D0:CA:B3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858455F06314DE26B5BE75912D560 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa Signing time: Fri 29 Mar 2024 18:40:21 +0000 ROA not before: Fri 29 Mar 2024 18:40:21 +0000 ROA not after: Thu 27 Jun 2024 18:40:21 +0000 asID: 15169 IP address blocks: 172.217.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:06:31:4d:e2:6b:5b:e7:59:12:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 29 18:40:21 2024 GMT Not After : Jun 27 18:40:21 2024 GMT Subject: CN=45a64e04-fa5c-4e96-b3a8-841f30382b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:10:92:60:5a:3b:77:06:e9:88:f6:60:36: 12:04:70:93:55:fe:39:6c:8c:6a:0b:5f:56:12:04: 20:26:f7:36:67:7a:17:d1:d1:1b:ea:a9:9f:27:72: 11:2a:98:3b:ea:56:ba:61:f7:f3:c0:98:43:99:ab: be:9c:e0:5b:da:cf:df:6c:29:fb:61:5c:08:ed:56: 29:4b:c0:41:51:14:02:0c:66:bd:3d:70:e4:b5:c2: 9f:fc:19:ca:77:43:0c:59:48:32:cc:5d:60:74:ba: e5:dd:fc:8e:c8:81:a1:86:45:f4:98:6c:fe:79:21: ec:78:a2:cd:42:50:2a:c3:6e:ab:a8:fc:20:92:88: c7:1f:d3:7c:c3:55:d3:59:28:b6:7c:a2:80:78:a2: e5:0d:6b:a1:4a:d0:50:bf:4b:f1:1e:05:90:57:32: a7:25:32:2c:44:7b:72:90:ae:54:8d:00:1f:1f:4e: b5:e2:db:13:8b:96:6b:c7:2e:ed:a8:07:98:9e:a7: dd:db:b3:ee:ad:16:18:34:48:8c:e6:53:f3:30:73: 95:da:20:2e:9a:a6:b7:76:ee:c5:c5:01:1c:6e:76: 3f:de:39:2d:3e:7d:23:5e:27:5a:d9:fc:86:c1:9a: 93:2c:d8:e5:e0:13:96:64:19:42:00:cb:03:d6:41: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:51:49:EF:86:02:FB:94:DA:95:40:6F:3A:5E:51:75:96:D0:CA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42afcebb-15dc-38a9-a60a-276a9ebf1d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:19:c4:e6:df:a6:6b:b3:07:d3:bb:ee:75:bb:6e:ac:22:eb: 9a:c6:d9:3e:af:c7:8e:ad:0c:4b:62:41:ff:89:47:a8:4c:1b: 48:52:95:1c:d2:bd:e0:ab:39:43:a8:6a:35:33:4d:09:f8:67: 83:10:3c:5c:56:9f:5b:11:de:1d:be:ce:2c:77:c5:7c:bd:21: 0f:ec:a0:2a:de:17:ad:a8:90:c6:e2:99:b5:19:e8:22:52:7c: 76:df:98:9a:4f:79:5c:05:f8:58:b3:6d:3c:43:70:62:37:c5: 45:72:66:69:4e:6c:6c:e5:c6:23:08:21:19:38:53:08:ba:67: 98:13:95:b2:f4:6a:18:9a:e0:bb:3e:3a:d0:06:c4:5f:65:61: f6:a1:be:e9:1b:9c:b2:89:30:b0:03:21:a0:85:2d:1a:4c:4c: 7c:d6:3e:be:63:f6:52:b0:4c:fa:2a:f0:47:ee:70:24:0f:c9: ff:34:22:00:08:e1:05:c0:96:d8:61:22:d4:13:03:af:24:1e: 75:b2:60:36:bb:b1:ad:e9:90:5e:64:6a:54:98:7b:39:2e:ba: 38:c2:33:2e:f6:10:a4:30:91:0a:30:b2:32:2b:19:59:7f:27: d7:19:5d:86:e9:40:46:23:03:1c:ab:92:0f:54:82:65:ed:42: d0:cf:ed:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfBjFN4mtb51kS1WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyOTE4NDAyMVoXDTI0MDYyNzE4NDAyMVowLzEtMCsGA1UEAxMk NDVhNjRlMDQtZmE1Yy00ZTk2LWIzYTgtODQxZjMwMzgyYjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QkQkmBaO3cG6Yj2YDYSBHCTVf45bIxqC19W EgQgJvc2Z3oX0dEb6qmfJ3IRKpg76la6YffzwJhDmau+nOBb2s/fbCn7YVwI7VYp S8BBURQCDGa9PXDktcKf/BnKd0MMWUgyzF1gdLrl3fyOyIGhhkX0mGz+eSHseKLN QlAqw26rqPwgkojHH9N8w1XTWSi2fKKAeKLlDWuhStBQv0vxHgWQVzKnJTIsRHty kK5UjQAfH0614tsTi5Zrxy7tqAeYnqfd27PurRYYNEiM5lPzMHOV2iAumqa3du7F xQEcbnY/3jktPn0jXida2fyGwZqTLNjl4BOWZBlCAMsD1kFqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpRSe+GAvuU2pVAbzpeUXWW0MqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDJhZmNlYmItMTVkYy0z OGE5LWE2MGEtMjc2YTllYmYxZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwZxObfpmuzB9O77nW7bqwi65rG2T6vx46tDEtiQf+JR6hMG0hSlRzS veCrOUOoajUzTQn4Z4MQPFxWn1sR3h2+zix3xXy9IQ/soCreF62okMbimbUZ6CJS fHbfmJpPeVwF+FizbTxDcGI3xUVyZmlObGzlxiMIIRk4Uwi6Z5gTlbL0ahia4Ls+ OtAGxF9lYfahvukbnLKJMLADIaCFLRpMTHzWPr5j9lKwTPoq8EfucCQPyf80IgAI 4QXAlthhItQTA68kHnWyYDa7sa3pkF5kalSYezkuujjCMy72EKQwkQowsjIrGVl/ J9cZXYbpQEYjAxyrkg9UgmXtQtDP7R0= -----END CERTIFICATE-----Generated at Fri May 17 15:36:48 2024 by rpki-client on console-ams.rpki-client.org