$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa File: a67282dc-ef4b-3424-b14a-d7cc85f54925.roa (raw, json) Hash identifier: sVIVhYUdN6b2w+wbdY/ng/YLCugMaq64bTSZtR5tI7I= Subject key identifier: 3F:49:44:2C:57:BC:82:F7:3D:7A:EE:69:0C:40:6E:C5:C6:A0:32:F8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845462A5E9D035B2816682DC200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa Signing time: Wed 20 Mar 2024 20:58:02 +0000 ROA not before: Wed 20 Mar 2024 20:58:02 +0000 ROA not after: Tue 18 Jun 2024 20:58:02 +0000 asID: 15169 IP address blocks: 172.217.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:2a:5e:9d:03:5b:28:16:68:2d:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:58:02 2024 GMT Not After : Jun 18 20:58:02 2024 GMT Subject: CN=b2323fc4-5836-4c93-a718-ab63520026d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:74:32:c1:4f:f4:62:ed:a8:6f:06:80:9b:79: d2:54:e1:31:c5:ae:80:29:d6:c8:c1:77:a0:c2:a8: e1:a0:8f:66:7b:54:2a:2a:3f:1d:2e:c3:89:1b:6a: 57:87:ab:57:8f:65:0b:a8:8e:f1:3a:b0:c3:39:72: 0c:0f:37:f5:bb:ce:e4:b7:0f:86:0d:89:bf:ac:98: 9a:d5:b7:26:06:8f:bc:fa:7d:6e:3a:a5:cd:6d:ea: 6e:17:68:6c:b9:b7:27:a4:76:5c:d3:28:de:e8:58: c0:76:ca:be:fe:11:97:90:fc:72:bb:16:af:d3:95: 37:fc:91:a5:d2:d9:74:e7:a8:a1:ea:43:5e:13:83: a6:1c:9f:54:57:b6:77:d1:9a:33:c7:58:f8:0e:3d: 5c:15:7a:7f:a4:e5:1f:14:4e:7f:15:30:fa:6e:ba: 69:8f:5d:a9:91:25:43:5c:08:8b:a3:0b:d6:62:f8: 60:9d:6b:de:0b:42:04:3b:13:87:b1:3c:e7:b1:a8: 9d:13:04:d5:70:96:e4:80:d3:7d:19:10:d6:7d:ae: ce:7b:68:18:c7:83:3f:df:20:ec:e1:85:9c:fd:e9: f1:d5:7e:fa:a1:30:19:05:af:f0:10:bb:31:53:e7: 23:61:78:c0:f8:ec:0f:49:30:87:fc:01:7d:d8:dd: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:49:44:2C:57:BC:82:F7:3D:7A:EE:69:0C:40:6E:C5:C6:A0:32:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:46:da:2c:fd:7f:5f:b1:be:42:82:93:38:db:00:0c:c3:3c: 66:fc:71:a3:28:49:48:a1:b2:2d:2a:4a:14:09:98:3a:39:a8: e1:97:93:da:d2:e0:8c:93:37:b1:6e:97:c6:da:87:d0:c4:32: 1d:54:5e:31:3a:a9:6b:d2:80:e1:b2:c9:37:3b:a6:da:4f:b4: 30:a8:f5:ec:3f:f9:5d:3e:8a:7b:60:50:b9:40:fc:f0:01:30: bc:ec:74:93:01:f9:d9:1f:2f:30:f6:0a:f7:b7:5b:5d:21:0c: d5:a3:22:43:99:6a:3a:63:d2:37:5f:9b:a5:77:f7:d0:bd:d2: 86:8b:80:5c:0b:9a:53:c2:91:26:d9:30:90:fd:11:d5:28:d7: 5f:7f:58:6e:ea:f0:3f:aa:2a:12:1b:95:09:b4:f9:34:91:51: 02:f0:65:df:88:f8:dd:53:9e:b6:a7:59:ab:2b:a0:ed:bd:7c: fb:48:bd:f6:ba:e2:ec:d5:52:d5:da:c6:23:f8:78:a3:1b:c3: ee:d7:11:e3:94:9a:6c:e8:08:f7:c2:bb:37:85:ea:3c:0d:9b: e4:cc:04:fb:9d:1c:53:9e:be:4e:c5:50:ae:f7:d3:e6:15:76: d8:bb:2f:97:2d:5e:bc:eb:63:42:2a:4f:ec:5b:7a:96:6e:4d: 15:90:7e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKl6dA1soFmgtwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTgwMloXDTI0MDYxODIwNTgwMlowLzEtMCsGA1UEAxMk YjIzMjNmYzQtNTgzNi00YzkzLWE3MTgtYWI2MzUyMDAyNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnQywU/0Yu2obwaAm3nSVOExxa6AKdbIwXeg wqjhoI9me1QqKj8dLsOJG2pXh6tXj2ULqI7xOrDDOXIMDzf1u87ktw+GDYm/rJia 1bcmBo+8+n1uOqXNbepuF2hsubcnpHZc0yje6FjAdsq+/hGXkPxyuxav05U3/JGl 0tl056ih6kNeE4OmHJ9UV7Z30Zozx1j4Dj1cFXp/pOUfFE5/FTD6brppj12pkSVD XAiLowvWYvhgnWveC0IEOxOHsTznsaidEwTVcJbkgNN9GRDWfa7Oe2gYx4M/3yDs 4YWc/enx1X76oTAZBa/wELsxU+cjYXjA+OwPSTCH/AF92N3DTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9JRCxXvIL3PXruaQxAbsXGoDL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTY3MjgyZGMtZWY0Yi0z NDI0LWIxNGEtZDdjYzg1ZjU0OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxG2iz9f1+xvkKCkzjbAAzDPGb8caMoSUihsi0qShQJmDo5qOGXk9rS 4IyTN7Ful8bah9DEMh1UXjE6qWvSgOGyyTc7ptpPtDCo9ew/+V0+intgULlA/PAB MLzsdJMB+dkfLzD2Cve3W10hDNWjIkOZajpj0jdfm6V399C90oaLgFwLmlPCkSbZ MJD9EdUo119/WG7q8D+qKhIblQm0+TSRUQLwZd+I+N1TnranWasroO29fPtIvfa6 4uzVUtXaxiP4eKMbw+7XEeOUmmzoCPfCuzeF6jwNm+TMBPudHFOevk7FUK730+YV dti7L5ctXrzrY0IqT+xbepZuTRWQft0= -----END CERTIFICATE-----Generated at Fri May 17 15:36:52 2024 by rpki-client on console-ams.rpki-client.org