$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa File: 1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa (raw, json) Hash identifier: J8NjVK0iPIip8oxXMwVkSHIbP8RKcmIfBWJMABQOdRY= Subject key identifier: A2:B0:C1:F7:E8:1D:2B:E3:B5:BC:63:01:C9:BC:BA:D3:45:D1:BB:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58186179B957287FBE32A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:86:17:9b:95:72:87:fb:e3:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e92afd3f-c706-4457-bea0-9cac156ab83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:f9:39:f6:ee:17:c7:13:cb:7a:6f:c2:c5: ce:93:a2:cd:82:0c:37:59:35:04:59:e1:fc:0e:28: 9f:07:63:6c:4f:d8:ab:11:a3:6b:5a:b4:f4:6d:8b: 66:ad:0a:ac:d3:fc:a4:7b:3d:4c:10:60:03:e3:4a: c9:35:6b:21:34:03:18:87:1c:1a:01:15:d6:99:70: 7a:d1:2e:ec:04:91:9e:a2:b5:2e:b4:26:9e:db:4a: c9:02:51:c5:49:cb:69:4a:f9:a7:40:99:b4:57:6d: 24:bd:df:ee:84:e2:fd:d4:71:28:f0:1a:99:50:e0: f1:e8:b2:cc:f9:3b:35:57:b1:c2:25:6d:ec:7c:5a: 10:a4:95:3d:d4:a9:97:d0:b5:06:61:74:4f:ac:b4: 1f:a1:ca:4a:ce:b6:a2:ba:d5:70:56:90:91:fa:a5: 39:70:69:f7:39:6f:f9:99:75:79:98:69:6e:91:df: a1:67:96:6f:d9:ae:31:8e:c0:cc:77:e4:40:b0:23: e3:dc:a0:5b:23:6a:ff:6c:94:74:6a:21:32:4b:b2: 04:90:94:7a:ac:1b:a3:fd:8d:72:ba:9a:3d:ae:c1: d3:c6:77:b0:b8:4a:87:21:2c:f4:a2:23:19:11:cd: d5:2c:c8:71:cb:9e:df:93:c9:1f:cf:2d:1f:b5:03: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B0:C1:F7:E8:1D:2B:E3:B5:BC:63:01:C9:BC:BA:D3:45:D1:BB:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:67:f1:d2:ce:03:b8:29:d1:fb:6c:ee:85:7b:05:6f:73:e1: 2e:9b:2d:98:f6:d6:31:69:7c:5a:f8:4d:ea:fb:52:c3:f3:83: a8:6d:d2:97:e7:70:4e:c7:96:8f:ff:a0:99:c3:da:cd:1d:f5: 14:b2:85:2a:6d:55:0d:cd:11:1a:42:d7:a3:5c:1b:35:36:74: 31:74:03:d7:f7:44:d5:db:81:0d:16:c9:6f:1e:b1:f0:74:94: 4b:fe:1d:0d:d5:1b:bc:8e:64:33:a6:26:56:dd:52:4f:b2:4c: ba:09:37:ea:bc:ac:a3:ab:b3:62:38:3a:4b:4d:9c:86:51:27: e3:c9:91:e7:8d:76:6d:56:ed:90:75:52:24:f3:eb:f4:2d:6d: 43:6a:c0:c7:c7:fa:14:47:a9:74:13:1d:44:da:e8:25:be:fb: 52:4c:83:06:aa:a1:3a:b6:06:e8:38:5d:a7:cd:1d:02:78:8a: 2e:98:73:f5:df:00:a2:8a:b7:63:8a:fb:19:06:42:dc:65:48: 46:9a:25:1a:46:c3:8d:85:65:cc:e8:0f:44:64:d1:c1:f0:26: 9f:9e:49:85:1a:04:c3:4e:23:91:c1:7f:c8:d9:91:da:96:9d: 9d:c7:34:da:f3:ac:06:4f:69:db:a0:cd:85:65:d5:b1:2f:a2: 2c:ac:d0:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYYXm5Vyh/vjKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTkyYWZkM2YtYzcwNi00NDU3LWJlYTAtOWNhYzE1NmFiODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd35OfbuF8cTy3pvwsXOk6LNggw3WTUEWeH8 DiifB2NsT9irEaNrWrT0bYtmrQqs0/ykez1MEGAD40rJNWshNAMYhxwaARXWmXB6 0S7sBJGeorUutCae20rJAlHFSctpSvmnQJm0V20kvd/uhOL91HEo8BqZUODx6LLM +Ts1V7HCJW3sfFoQpJU91KmX0LUGYXRPrLQfocpKzraiutVwVpCR+qU5cGn3OW/5 mXV5mGlukd+hZ5Zv2a4xjsDMd+RAsCPj3KBbI2r/bJR0aiEyS7IEkJR6rBuj/Y1y upo9rsHTxnewuEqHISz0oiMZEc3VLMhxy57fk8kfzy0ftQNM5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKwwffoHSvjtbxjAcm8utNF0bvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTA5NWU0OGUtYWZhOC0z M2YyLWIwZTYtZmNhNmRmM2FjODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRn8dLOA7gp0fts7oV7BW9z4S6bLZj21jFpfFr4Ter7UsPzg6ht0pfn cE7Hlo//oJnD2s0d9RSyhSptVQ3NERpC16NcGzU2dDF0A9f3RNXbgQ0WyW8esfB0 lEv+HQ3VG7yOZDOmJlbdUk+yTLoJN+q8rKOrs2I4OktNnIZRJ+PJkeeNdm1W7ZB1 UiTz6/QtbUNqwMfH+hRHqXQTHUTa6CW++1JMgwaqoTq2Bug4XafNHQJ4ii6Yc/Xf AKKKt2OK+xkGQtxlSEaaJRpGw42FZczoD0Rk0cHwJp+eSYUaBMNOI5HBf8jZkdqW nZ3HNNrzrAZPadugzYVl1bEvoiys0Ew= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:01 2025 by rpki-client