$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa File: 1a1b3802-ea48-3d76-a847-7894a6c024c8.roa (raw, json) Hash identifier: fjx9uyjHyWN0awkLT1A03iB2cZKtQL7JiDwSxxbG/LY= Subject key identifier: 97:AD:0C:88:3C:72:DB:D1:ED:A5:D8:F7:99:24:5E:4C:08:BC:97:C3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58220549C46F0277C65D680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:20:54:9c:46:f0:27:7c:65:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7e8e0cc6-b26b-47e6-b6cb-65e5659e4a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:7d:9a:cf:2f:34:fe:16:e9:e2:21:ef:e4: 11:da:9f:3c:82:c0:2e:b0:2f:c5:5d:98:ed:91:47: 1e:2a:a8:b7:00:f1:ca:5e:6f:c0:83:83:38:b7:9f: d1:50:9b:8d:fc:f3:a4:fa:1c:45:af:87:31:f8:d8: c4:2a:fa:f9:ca:d7:74:60:cd:ee:cc:30:57:2a:b6: 83:c0:85:55:04:33:93:e2:b5:ac:40:c9:a6:a8:6b: 62:e7:97:76:83:c2:58:c0:fd:cb:e4:70:03:da:45: 39:6d:7a:97:51:0f:24:1b:35:67:96:8a:23:ba:e4: a3:ff:38:c4:8b:79:27:3a:e4:73:50:77:09:95:31: 74:6b:9a:0d:b9:8b:80:4c:1e:0c:87:1d:76:f0:cd: 10:0a:00:b1:d6:60:66:75:b0:c0:b8:76:f5:87:b9: ba:8a:57:18:0c:40:78:7e:3c:42:90:24:9c:84:ad: f6:6c:a2:cb:8e:82:d0:da:e6:2d:f0:d2:e7:41:49: c3:b0:61:89:ce:66:1f:ea:f5:80:13:c8:5b:c9:d5: bd:7b:57:4f:40:d4:4c:92:a8:2b:a1:8b:cc:29:26: 1b:38:41:48:e9:5c:99:88:93:00:e0:62:37:ca:b0: bf:de:74:b1:c4:b8:46:ee:80:8e:dc:2a:9a:ce:3c: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AD:0C:88:3C:72:DB:D1:ED:A5:D8:F7:99:24:5E:4C:08:BC:97:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:af:33:db:39:0c:bd:8b:f1:b7:92:e6:00:37:1f:06:e3:0b: 51:07:cb:35:0a:e4:80:19:8d:11:85:b6:a1:36:05:2f:6c:ec: ec:5e:d4:d2:a5:ea:14:d0:ab:a2:e0:7a:8e:d6:b3:ca:3e:92: 1d:3b:83:5e:f5:28:e1:c1:4c:e7:10:eb:57:b6:f5:0b:50:f8: 1f:d6:02:fd:2c:db:8f:ce:57:9a:a3:a9:f1:31:75:44:7c:43: 33:bc:f8:11:d0:c8:ff:5e:81:0e:ec:24:85:fe:ed:59:c6:b3: 60:96:b3:11:da:7f:03:63:7d:f6:a7:2a:6a:46:f6:3a:ae:c7: 98:cd:d7:46:5a:6f:9a:b5:3a:d1:bd:63:61:5f:98:89:90:f3: 1b:38:94:50:86:95:69:65:19:8f:a8:81:9b:75:fb:e7:5f:e1: e7:7a:bd:24:37:b6:44:05:d7:ef:15:0b:29:94:83:42:7e:99: 3e:07:bd:27:a5:84:88:41:5b:5c:cc:59:26:7f:a9:bf:f0:7d: e7:61:e3:9d:3e:0b:3e:5a:43:8e:3a:58:af:00:db:d5:41:b9: a0:7b:ea:d0:27:c7:15:af:72:6e:bc:1b:ef:f2:76:39:08:5c: 68:a1:7f:21:ed:77:56:f6:98:de:8b:11:57:9f:49:bf:36:76: cf:f5:26:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiBUnEbwJ3xl1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2U4ZTBjYzYtYjI2Yi00N2U2LWI2Y2ItNjVlNTY1OWU0YTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF19ms8vNP4W6eIh7+QR2p88gsAusC/FXZjt kUceKqi3APHKXm/Ag4M4t5/RUJuN/POk+hxFr4cx+NjEKvr5ytd0YM3uzDBXKraD wIVVBDOT4rWsQMmmqGti55d2g8JYwP3L5HAD2kU5bXqXUQ8kGzVnloojuuSj/zjE i3knOuRzUHcJlTF0a5oNuYuATB4Mhx128M0QCgCx1mBmdbDAuHb1h7m6ilcYDEB4 fjxCkCSchK32bKLLjoLQ2uYt8NLnQUnDsGGJzmYf6vWAE8hbydW9e1dPQNRMkqgr oYvMKSYbOEFI6VyZiJMA4GI3yrC/3nSxxLhG7oCO3CqazjzojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJetDIg8ctvR7aXY95kkXkwIvJfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWExYjM4MDItZWE0OC0z ZDc2LWE4NDctNzg5NGE2YzAyNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCvM9s5DL2L8beS5gA3HwbjC1EHyzUK5IAZjRGFtqE2BS9s7Oxe1NKl 6hTQq6Lgeo7Ws8o+kh07g171KOHBTOcQ61e29QtQ+B/WAv0s24/OV5qjqfExdUR8 QzO8+BHQyP9egQ7sJIX+7VnGs2CWsxHafwNjffanKmpG9jqux5jN10Zab5q1OtG9 Y2FfmImQ8xs4lFCGlWllGY+ogZt1++df4ed6vSQ3tkQF1+8VCymUg0J+mT4HvSel hIhBW1zMWSZ/qb/wfedh450+Cz5aQ446WK8A29VBuaB76tAnxxWvcm68G+/ydjkI XGihfyHtd1b2mN6LEVefSb82ds/1Jg4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:47 2025 by rpki-client