$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa File: 1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa (raw, json) Hash identifier: O6qwIlZI2DBR9N86eu1u2Yk+GlyDqLVOzSSJUxKKas0= Subject key identifier: 80:0F:5A:3C:AA:43:19:39:C9:FC:04:36:D1:E5:27:AD:2D:40:55:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858470550C4D4B1218010529C5360 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa Signing time: Wed 28 Aug 2024 01:00:31 +0000 ROA not before: Wed 28 Aug 2024 01:00:31 +0000 ROA not after: Tue 26 Nov 2024 02:00:31 +0000 asID: 15169 IP address blocks: 172.217.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:05:50:c4:d4:b1:21:80:10:52:9c:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 28 01:00:31 2024 GMT Not After : Nov 26 02:00:31 2024 GMT Subject: CN=b7d93bdf-c2b1-4f74-b7f4-25f26689f95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:65:c3:8b:4e:ff:73:fe:3b:a2:da:50:ec:87: 05:d9:11:90:fb:91:16:a0:97:0b:42:7f:64:02:47: e6:2e:a4:f8:b7:69:67:ae:70:86:33:40:50:71:f7: 55:f0:fb:b9:6b:7d:4c:b6:c6:8c:68:b8:99:14:e8: cc:a2:aa:d2:e1:3c:c2:ba:ef:e0:02:27:dc:64:58: 50:3a:41:09:95:c5:85:7a:b9:7d:86:b8:0d:24:a4: 99:7d:4c:03:09:03:20:d0:d9:c1:7e:79:af:1d:77: 55:91:a8:95:1f:39:93:c4:0f:c2:80:8e:b0:75:ff: c2:b2:88:80:ab:ba:fa:7d:74:a1:4e:e0:90:73:61: 47:9e:9b:8b:c3:0a:0f:a9:d7:76:01:a9:be:e3:dc: f0:42:8b:e8:e5:d3:fc:9c:ce:d3:b9:88:2e:e1:3f: c7:20:37:65:7c:de:4b:f1:dc:5e:a5:96:ae:84:e9: 3c:d7:7f:1d:56:ff:19:0f:a5:e3:67:8b:bf:55:0b: 4e:bd:2c:28:64:4c:a9:da:b5:e5:9c:2c:26:39:b6: 74:d5:5a:43:36:cb:88:7c:d6:3f:a6:1e:ba:09:de: 00:e4:00:4c:91:77:1c:6d:47:a6:1c:f1:e9:57:df: fe:cd:12:08:57:e5:85:cb:ba:7e:c0:d4:bd:44:9f: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0F:5A:3C:AA:43:19:39:C9:FC:04:36:D1:E5:27:AD:2D:40:55:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:03:d4:a8:03:a5:59:86:e8:54:6f:d8:2a:ab:d5:a5:24:1b: 46:f8:b1:55:ce:8f:bf:34:12:6e:df:7c:f4:51:58:fe:b9:f8: c6:bd:52:72:52:f4:78:0d:f1:4e:c3:3a:f8:f0:3b:d1:ee:2b: 40:91:ab:49:93:3c:73:7f:bc:6a:6c:f4:40:ca:7f:db:f1:03: 2f:2c:76:03:03:1f:9b:51:6a:a2:fb:21:ea:82:0e:ee:01:0a: 13:d7:19:20:e4:d7:20:31:b2:dd:4b:c6:23:50:ee:0b:8b:5c: 33:50:c9:d2:83:0f:f6:a2:61:8d:0d:eb:d3:71:24:41:eb:0c: e7:d2:ad:bd:ec:fb:33:0d:9d:74:06:36:5b:7e:2c:60:aa:67: e8:11:e2:70:36:45:e5:58:71:35:18:7b:6c:8e:52:94:17:90: f2:7a:de:21:92:a7:ae:1f:92:6a:61:f3:4b:25:5d:b2:bb:8a: e9:b4:be:4a:c8:5f:89:08:25:da:2a:20:0e:da:d8:5f:5d:68: 54:c5:0f:28:12:3a:c0:b5:1e:17:20:49:d7:21:bc:8f:fe:66: 8d:7e:e3:71:0a:86:4a:04:10:02:64:16:02:ce:30:3b:af:21: 9b:cd:ee:cc:e0:72:2e:f1:82:94:4c:79:cb:ca:a9:d4:44:06: 1f:9d:52:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcFUMTUsSGAEFKcU2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDgyODAxMDAzMVoXDTI0MTEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YjdkOTNiZGYtYzJiMS00Zjc0LWI3ZjQtMjVmMjY2ODlmOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2XDi07/c/47otpQ7IcF2RGQ+5EWoJcLQn9k AkfmLqT4t2lnrnCGM0BQcfdV8Pu5a31MtsaMaLiZFOjMoqrS4TzCuu/gAifcZFhQ OkEJlcWFerl9hrgNJKSZfUwDCQMg0NnBfnmvHXdVkaiVHzmTxA/CgI6wdf/CsoiA q7r6fXShTuCQc2FHnpuLwwoPqdd2Aam+49zwQovo5dP8nM7TuYgu4T/HIDdlfN5L 8dxepZauhOk8138dVv8ZD6XjZ4u/VQtOvSwoZEyp2rXlnCwmObZ01VpDNsuIfNY/ ph66Cd4A5ABMkXccbUemHPHpV9/+zRIIV+WFy7p+wNS9RJ8N0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAPWjyqQxk5yfwENtHlJ60tQFVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZhY2FhOWMtNjQxNC0z OGVmLWJiMmYtM2RiYWFlODQ2ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsD1KgDpVmG6FRv2Cqr1aUkG0b4sVXOj780Em7ffPRRWP65+Ma9UnJS 9HgN8U7DOvjwO9HuK0CRq0mTPHN/vGps9EDKf9vxAy8sdgMDH5tRaqL7IeqCDu4B ChPXGSDk1yAxst1LxiNQ7guLXDNQydKDD/aiYY0N69NxJEHrDOfSrb3s+zMNnXQG Nlt+LGCqZ+gR4nA2ReVYcTUYe2yOUpQXkPJ63iGSp64fkmph80slXbK7ium0vkrI X4kIJdoqIA7a2F9daFTFDygSOsC1HhcgSdchvI/+Zo1+43EKhkoEEAJkFgLOMDuv IZvN7szgci7xgpRMecvKqdREBh+dUkA= -----END CERTIFICATE-----Generated at Sat Sep 7 22:44:58 2024 by rpki-client on console-ams.rpki-client.org