$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa File: 00c8ed4f-37f4-323f-8afb-55168be0c0df.roa (raw, json) Hash identifier: Bd7Mx3d8IN3reXETjBVNpcFi2U1jcxp4FEYDZpTI0GA= Subject key identifier: 66:CA:A4:4C:51:E2:42:69:77:5D:95:0B:DC:EC:D1:B7:BA:11:C9:6B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AB84B8A7ECFCC377B66C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.217.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:b8:4b:8a:7e:cf:cc:37:7b:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=d5aa17bc-2745-49a2-b82e-791f755ac6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:10:5d:47:6b:ae:20:ad:7d:2a:1e:71:13: d8:37:4d:37:ad:b7:c6:5b:50:af:fa:89:81:3e:f1: bb:4e:12:c1:9b:ad:9f:c1:cd:cb:98:61:55:57:d2: 40:a0:0d:ff:7b:7b:41:46:3d:2a:c8:86:eb:6c:04: f2:84:a3:5c:e4:21:17:6a:da:d5:a7:ff:52:35:98: dc:62:99:a8:f8:fa:d7:4f:27:c4:c9:b7:af:b2:1c: 31:d2:ed:87:dc:be:65:ff:12:c6:a0:2e:fd:45:24: df:1d:c7:64:c9:9f:5f:cc:b5:15:24:85:8b:08:2a: 57:67:44:8e:8c:ce:fd:1c:e6:29:e1:51:18:c6:34: 83:b1:73:10:6a:20:cb:49:f1:60:24:eb:68:32:4e: 58:81:08:95:c3:a6:1e:05:29:6b:90:f0:47:17:0a: 08:46:ea:42:38:4d:c1:b7:2a:52:e9:2f:d8:03:4f: bc:f5:33:27:74:8c:d1:65:38:b3:9f:ae:e9:66:d9: fc:47:88:f0:b1:06:5b:3a:65:1a:c1:f5:5b:5c:67: 8f:1d:23:35:2d:f1:de:61:e2:1e:92:28:58:df:9d: 88:10:93:5d:b4:d8:50:a3:06:aa:8d:72:5b:d7:58: c5:a8:85:02:2c:9d:d3:4f:75:18:92:5d:88:55:63: 15:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CA:A4:4C:51:E2:42:69:77:5D:95:0B:DC:EC:D1:B7:BA:11:C9:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:36:49:2a:54:9c:66:af:d9:2a:ef:2b:6f:cc:bb:1d:ba:ce: a0:f5:e3:49:46:a8:d9:c7:57:bc:76:a4:53:94:76:8b:16:a6: 49:74:12:36:2b:71:58:83:95:77:20:29:f6:e6:b1:dd:8f:69: 66:8e:9b:8f:64:fc:13:4f:b1:9b:73:87:79:22:1d:92:bb:4a: 98:aa:cb:4e:0d:bf:32:4e:88:aa:86:b6:30:34:71:f8:57:72: d2:11:5e:ed:46:3c:a5:61:c3:67:8e:5b:3c:a4:e2:58:52:41: 93:fb:b8:55:d6:e4:eb:1a:32:eb:f6:49:66:02:68:04:e6:10: cd:c5:43:a5:e4:17:b2:ec:3a:0b:8d:d4:98:88:05:53:c7:32: 7c:dc:4f:b5:02:7d:ae:d0:d5:70:e0:77:fd:65:a0:db:7b:06: 78:61:fd:ea:19:45:aa:2d:16:6c:55:19:b2:3f:9d:f0:26:2d: 5c:ec:63:2a:0d:97:47:5b:2d:96:ae:e3:36:f9:43:4b:d2:a6: be:56:c1:16:c9:26:03:72:6b:11:1a:21:90:03:38:b0:31:a5: f1:fd:cb:df:06:1b:2b:28:7a:e9:ac:f5:5b:5f:0c:9f:68:5c: d0:b3:6e:43:61:5c:07:2b:63:ef:e0:9a:98:c3:65:8a:b2:47: 82:40:c6:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKrhLin7PzDd7ZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDVhYTE3YmMtMjc0NS00OWEyLWI4MmUtNzkxZjc1NWFjNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNoQXUdrriCtfSoecRPYN003rbfGW1Cv+omB PvG7ThLBm62fwc3LmGFVV9JAoA3/e3tBRj0qyIbrbATyhKNc5CEXatrVp/9SNZjc Ypmo+PrXTyfEybevshwx0u2H3L5l/xLGoC79RSTfHcdkyZ9fzLUVJIWLCCpXZ0SO jM79HOYp4VEYxjSDsXMQaiDLSfFgJOtoMk5YgQiVw6YeBSlrkPBHFwoIRupCOE3B typS6S/YA0+89TMndIzRZTizn67pZtn8R4jwsQZbOmUawfVbXGePHSM1LfHeYeIe kihY352IEJNdtNhQowaqjXJb11jFqIUCLJ3TT3UYkl2IVWMVcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbKpExR4kJpd12VC9zs0be6EclrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDBjOGVkNGYtMzdmNC0z MjNmLThhZmItNTUxNjhiZTBjMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ2SSpUnGav2SrvK2/Mux26zqD140lGqNnHV7x2pFOUdosWpkl0EjYr cViDlXcgKfbmsd2PaWaOm49k/BNPsZtzh3kiHZK7Spiqy04NvzJOiKqGtjA0cfhX ctIRXu1GPKVhw2eOWzyk4lhSQZP7uFXW5OsaMuv2SWYCaATmEM3FQ6XkF7LsOguN 1JiIBVPHMnzcT7UCfa7Q1XDgd/1loNt7Bnhh/eoZRaotFmxVGbI/nfAmLVzsYyoN l0dbLZau4zb5Q0vSpr5WwRbJJgNyaxEaIZADOLAxpfH9y98GGysoeums9VtfDJ9o XNCzbkNhXAcrY+/gmpjDZYqyR4JAxns= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:14 2024 by rpki-client on console-fra.rpki-client.org