$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1259bc77-3c13-370b-bc49-417ac4bc544b.roa File: 1259bc77-3c13-370b-bc49-417ac4bc544b.roa (raw, json) Hash identifier: e9HVWm7pOla0UC9HujXRpxpVgylFCz0ba6kFktD4BUo= Subject key identifier: 44:83:46:62:77:55:42:2E:E3:D8:1F:B5:CC:9C:CB:D2:BD:E7:71:E1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58225DC9598EA1D5F2E2DC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1259bc77-3c13-370b-bc49-417ac4bc544b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:25:dc:95:98:ea:1d:5f:2e:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1e1f0190-af24-4744-b49c-825c669ee1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:63:a4:b5:fa:02:d6:d6:28:ec:cc:bc:95: 14:09:34:81:51:75:34:5a:63:7c:a8:1f:02:3e:c0: c1:d8:d0:fc:67:9a:d4:a2:f8:a7:59:27:1e:6b:39: 19:37:d3:12:be:a3:ee:1d:bb:0a:3a:60:49:81:6f: 3f:01:be:53:82:66:33:0f:00:96:a9:b6:6e:f7:de: 80:8a:4c:de:4d:2b:53:4a:2f:98:1d:4a:ea:bb:54: b4:10:fe:35:f8:27:82:11:18:2a:9d:2b:bf:63:25: 29:34:fb:00:95:d9:d6:65:4a:a0:87:55:57:cb:dc: 07:73:79:d1:93:28:f4:5b:41:24:9d:73:d8:1b:a8: c1:5d:de:11:37:ef:bd:29:ea:c1:49:f1:eb:58:ba: c1:14:f1:2b:d8:21:ad:d4:99:16:33:24:73:b2:e4: 15:9e:da:66:f5:4a:bc:9c:03:61:40:30:14:c7:d0: ce:1c:4a:01:a1:ac:14:34:e1:9d:0b:76:d5:d5:5d: 2f:76:9f:7e:9c:2a:c6:32:19:d8:df:28:60:54:ce: 1f:8c:7b:48:18:d0:69:7c:ae:c2:66:6e:ae:14:42: 76:cd:87:9c:41:99:e5:05:1d:ce:5a:fc:5c:9b:81: 2c:d7:91:5e:53:d1:bb:64:ec:92:8f:20:25:1f:9a: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:83:46:62:77:55:42:2E:E3:D8:1F:B5:CC:9C:CB:D2:BD:E7:71:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1259bc77-3c13-370b-bc49-417ac4bc544b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2a:ca:54:b2:a7:c3:6d:a4:a9:9f:55:16:12:c8:f0:57:06: c8:b1:83:e5:44:52:a6:3b:8e:11:8e:1e:d3:ed:2c:60:4a:d8: 6c:04:41:c2:01:62:42:ee:31:1e:dd:32:40:20:8c:9b:99:d3: 00:40:92:24:03:0a:53:72:38:be:81:2b:1a:63:00:b2:a8:8e: 7f:fb:eb:22:3a:47:88:8e:41:3b:d9:52:cd:48:d4:07:05:ba: a6:1d:f3:66:9d:ee:c7:58:14:34:03:f5:29:8c:98:08:f8:a0: 85:96:f7:cf:68:38:bf:f4:09:95:8a:53:be:f3:07:95:dc:66: ed:6e:62:c3:15:14:d8:f1:7d:99:0d:b7:55:b2:5f:06:f5:09: b4:9c:1d:83:06:61:f1:d3:85:e9:53:c8:1f:a6:b2:c9:2b:c9: ae:7c:0b:9b:0e:ed:8c:c4:45:1d:0b:d0:2d:72:43:9a:cd:f5: f4:e7:ec:49:25:28:94:5d:dd:74:57:a6:53:2d:f7:76:30:13: 75:4d:39:c7:cd:32:67:6c:6e:59:7d:17:e4:51:27:e7:94:98: 63:4b:54:b9:19:74:1b:e7:3e:4b:31:b8:ee:e9:3a:8d:36:98: e0:89:9f:99:df:cd:f4:89:13:27:21:2b:df:0a:7d:62:51:53: d3:3c:cd:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiXclZjqHV8uLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWUxZjAxOTAtYWYyNC00NzQ0LWI0OWMtODI1YzY2OWVlMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uhjpLX6AtbWKOzMvJUUCTSBUXU0WmN8qB8C PsDB2ND8Z5rUovinWSceazkZN9MSvqPuHbsKOmBJgW8/Ab5TgmYzDwCWqbZu996A ikzeTStTSi+YHUrqu1S0EP41+CeCERgqnSu/YyUpNPsAldnWZUqgh1VXy9wHc3nR kyj0W0EknXPYG6jBXd4RN++9KerBSfHrWLrBFPEr2CGt1JkWMyRzsuQVntpm9Uq8 nANhQDAUx9DOHEoBoawUNOGdC3bV1V0vdp9+nCrGMhnY3yhgVM4fjHtIGNBpfK7C Zm6uFEJ2zYecQZnlBR3OWvxcm4Es15FeU9G7ZOySjyAlH5qHrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESDRmJ3VUIu49gftcycy9K953HhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTI1OWJjNzctM2MxMy0z NzBiLWJjNDktNDE3YWM0YmM1NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8qylSyp8NtpKmfVRYSyPBXBsixg+VEUqY7jhGOHtPtLGBK2GwEQcIB YkLuMR7dMkAgjJuZ0wBAkiQDClNyOL6BKxpjALKojn/76yI6R4iOQTvZUs1I1AcF uqYd82ad7sdYFDQD9SmMmAj4oIWW989oOL/0CZWKU77zB5XcZu1uYsMVFNjxfZkN t1WyXwb1CbScHYMGYfHThelTyB+msskrya58C5sO7YzERR0L0C1yQ5rN9fTn7Ekl KJRd3XRXplMt93YwE3VNOcfNMmdsbll9F+RRJ+eUmGNLVLkZdBvnPksxuO7pOo02 mOCJn5nfzfSJEychK98KfWJRU9M8zbw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:30 2025 by rpki-client