$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa File: 640ab488-921d-3ed3-a072-3005686e58b7.roa (raw, json) Hash identifier: qmnYDLBx3nJ2gw24I9pg5ATyVCDdwphB1MoYyzBIjMo= Subject key identifier: 4C:4F:AF:B2:14:9E:BF:7E:62:95:A6:20:36:34:CD:15:80:23:CF:B3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858454628DC7FF5520261ECA47A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa Signing time: Wed 20 Mar 2024 20:54:59 +0000 ROA not before: Wed 20 Mar 2024 20:54:59 +0000 ROA not after: Tue 18 Jun 2024 20:54:59 +0000 asID: 15169 IP address blocks: 172.217.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:28:dc:7f:f5:52:02:61:ec:a4:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:54:59 2024 GMT Not After : Jun 18 20:54:59 2024 GMT Subject: CN=c12059e4-7160-41a1-aca7-999b0566fae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6c:23:eb:81:5f:4e:00:bf:7d:3a:60:fe:f5: 23:f0:fa:ac:fe:a7:0f:c4:9a:38:e9:bf:0e:b4:cb: e1:88:68:47:72:71:9f:aa:41:16:89:76:b0:d7:02: c1:36:65:13:9a:45:7f:c2:93:8e:2b:25:24:31:21: c5:c2:39:03:43:c7:ea:fe:da:32:d9:20:2d:9d:b5: f9:2b:1f:ee:b5:1c:f9:5c:67:4c:f8:2d:4e:96:3d: e3:5a:74:93:e4:c6:84:76:14:e1:7f:76:c8:31:89: 49:a5:8a:87:3a:53:31:fb:b0:15:6c:c1:46:d8:db: bc:c5:53:1d:b4:a5:23:3b:c2:b8:b8:0f:c8:75:da: 92:86:dd:35:fe:6c:5f:8c:9c:d2:aa:a9:31:53:6d: 79:84:6f:88:88:21:1b:60:97:9d:ce:cc:3b:8c:84: 36:64:c7:f2:f5:08:0c:22:1c:94:95:7f:dd:36:29: 36:97:61:28:75:a8:c8:84:72:32:74:f3:bd:17:99: 5a:75:5a:d7:00:96:66:85:5b:da:86:02:4a:8a:f3: c1:1e:bf:11:09:86:a4:bb:d9:ec:99:8a:3e:1c:0d: cf:99:b5:eb:f2:63:00:37:3a:74:6b:97:6a:44:2e: ea:ad:70:b0:07:81:15:69:55:ff:7f:ee:6b:87:97: 4f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4F:AF:B2:14:9E:BF:7E:62:95:A6:20:36:34:CD:15:80:23:CF:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:05:76:8b:47:e7:fe:cb:db:a3:56:47:55:f0:08:be:b0:fe: 13:1e:78:80:4e:f7:78:2f:3f:39:25:6b:01:7b:b6:22:78:c2: c8:b9:a1:41:e2:fa:eb:fe:d7:d1:b9:3a:fe:3a:86:3f:3f:81: a5:28:49:c5:49:38:29:42:e8:97:79:49:96:b4:d8:5a:9e:ad: 8b:e7:31:91:71:80:65:4d:63:6f:59:71:85:10:02:18:8b:94: e1:ce:69:f7:2d:4d:95:6a:32:56:ff:6b:f6:d9:5f:51:05:ac: e4:a8:cf:50:09:0f:06:d0:8f:4d:b3:b6:75:3d:a5:77:37:0a: f3:fd:29:3c:29:31:e0:bb:ee:f5:1a:ca:eb:4c:6c:f2:5f:5a: 51:07:4d:ff:a1:e8:0c:5d:c3:21:d8:3b:fa:62:ea:a3:66:36: 84:61:77:54:93:22:89:51:fb:eb:da:66:17:3d:dd:11:4a:7e: 29:3a:6d:49:ed:7e:e2:b3:5d:04:aa:be:f8:69:ae:44:b1:79: 0e:5e:9d:fe:78:69:25:f4:ae:6b:c2:2b:f2:3a:2b:88:e0:e8: 5e:68:83:1d:f7:d7:ee:f3:17:07:0b:35:96:55:c8:80:11:98: 9b:df:f5:a1:44:76:ee:95:c4:c4:d5:90:29:d9:e5:1e:a3:91: 43:f7:3a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKNx/9VICYeykeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTQ1OVoXDTI0MDYxODIwNTQ1OVowLzEtMCsGA1UEAxMk YzEyMDU5ZTQtNzE2MC00MWExLWFjYTctOTk5YjA1NjZmYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWwj64FfTgC/fTpg/vUj8Pqs/qcPxJo46b8O tMvhiGhHcnGfqkEWiXaw1wLBNmUTmkV/wpOOKyUkMSHFwjkDQ8fq/toy2SAtnbX5 Kx/utRz5XGdM+C1Olj3jWnST5MaEdhThf3bIMYlJpYqHOlMx+7AVbMFG2Nu8xVMd tKUjO8K4uA/IddqSht01/mxfjJzSqqkxU215hG+IiCEbYJedzsw7jIQ2ZMfy9QgM IhyUlX/dNik2l2EodajIhHIydPO9F5ladVrXAJZmhVvahgJKivPBHr8RCYaku9ns mYo+HA3PmbXr8mMANzp0a5dqRC7qrXCwB4EVaVX/f+5rh5dPOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExPr7IUnr9+YpWmIDY0zRWAI8+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQwYWI0ODgtOTIxZC0z ZWQzLWEwNzItMzAwNTY4NmU1OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoFdotH5/7L26NWR1XwCL6w/hMeeIBO93gvPzklawF7tiJ4wsi5oUHi +uv+19G5Ov46hj8/gaUoScVJOClC6Jd5SZa02FqerYvnMZFxgGVNY29ZcYUQAhiL lOHOafctTZVqMlb/a/bZX1EFrOSoz1AJDwbQj02ztnU9pXc3CvP9KTwpMeC77vUa yutMbPJfWlEHTf+h6AxdwyHYO/pi6qNmNoRhd1STIolR++vaZhc93RFKfik6bUnt fuKzXQSqvvhprkSxeQ5enf54aSX0rmvCK/I6K4jg6F5ogx331+7zFwcLNZZVyIAR mJvf9aFEdu6VxMTVkCnZ5R6jkUP3Oj8= -----END CERTIFICATE-----Generated at Fri May 17 15:36:49 2024 by rpki-client on console-ams.rpki-client.org