$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa File: 1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa (raw, json) Hash identifier: 3Ok4tw9hTvKzAJGPr/iccjk0n62c7ue7YelTvltztJQ= Subject key identifier: D5:52:55:B5:63:ED:6A:DC:DB:00:7B:2F:BE:F9:17:A4:C3:2C:6B:EE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58179EED666F25CEC36C470 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:79:ee:d6:66:f2:5c:ec:36:c4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=89c02f2b-c91b-4b4b-b1a5-44224d5ce8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:41:48:88:c2:bb:9a:53:bc:e3:2f:55:4f: 36:4e:79:eb:3f:a6:86:b0:86:29:e1:8f:f4:d6:d7: 94:bc:e3:d2:1d:22:4d:b2:35:2b:c7:36:d7:27:03: fe:8a:e3:c5:a3:d9:dc:69:9b:64:22:9f:43:ea:44: a2:1b:2d:fe:d9:11:bc:ec:e3:a1:8f:83:22:bf:eb: 98:e2:7f:48:a8:04:d9:dd:96:4e:f1:70:b1:3c:b5: f9:94:fb:e2:4e:f5:db:17:60:ec:47:17:20:0d:0b: da:fd:dd:86:7a:74:65:40:8f:c0:15:ac:45:e2:6f: cf:7f:cc:2c:10:16:02:a5:00:44:bd:6e:ca:c3:6f: a2:09:08:df:21:22:01:da:3c:89:8c:80:c9:76:26: 30:54:1f:43:6d:d6:bc:41:5d:a5:c1:d4:b6:51:4b: 3a:b3:ea:56:3c:58:69:fd:d4:03:68:0a:48:90:c5: 59:13:f6:8b:3c:43:03:00:cd:eb:ef:33:7f:d3:aa: e3:4c:aa:53:8f:6e:20:d9:42:5b:f7:58:45:de:1f: 3b:d3:07:00:d0:da:c1:3b:73:72:db:40:5b:50:ca: aa:81:28:1a:3f:f5:8b:9a:8f:a4:7a:76:25:b6:5f: 27:99:dd:16:aa:3d:5d:d6:b6:48:62:f8:61:50:de: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:52:55:B5:63:ED:6A:DC:DB:00:7B:2F:BE:F9:17:A4:C3:2C:6B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1facaa9c-6414-38ef-bb2f-3dbaae846fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:0d:1c:cb:69:cc:44:1c:16:6c:79:ef:a3:15:b5:c9:6e:9b: 27:c1:56:3a:49:fd:da:98:ce:9f:ec:89:69:e5:e1:a4:91:37: 6d:2a:d9:80:62:6e:20:c5:2a:77:e3:5d:78:fa:d5:cc:cc:6c: 29:08:50:e8:9a:bf:ec:b2:b8:25:bc:32:6a:f3:2f:ea:c2:55: ab:f5:88:eb:51:f5:6a:96:b3:60:38:4a:dd:5a:d1:15:58:ea: 89:55:f9:8a:dd:6e:e9:93:a6:e2:ac:a3:08:58:f0:18:69:03: 34:61:bf:36:43:c8:f5:59:1c:06:ec:4c:8a:c4:bd:f9:1e:52: 8d:16:ed:a5:c3:e6:61:d6:2b:a0:3b:61:1f:2e:70:73:1f:4b: cf:a0:69:d5:ed:11:4b:ed:1a:b0:93:f5:6a:c7:38:c9:b9:57: 7f:89:6b:12:c7:aa:02:b2:82:48:bc:22:fd:fb:3a:57:27:2c: 7d:74:43:5c:6b:f2:fb:c8:7d:9f:ce:4a:62:36:e4:96:74:0b: e0:3b:53:4e:ae:13:87:6d:e2:16:54:9b:09:ac:e0:ad:50:a1: 6d:2e:f1:39:85:3b:c5:67:af:ce:6a:aa:a3:fa:41:51:cb:a0: 29:d8:80:26:ae:37:03:ec:2b:48:e0:49:f1:30:76:68:e1:63: f0:b6:56:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXnu1mbyXOw2xHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODljMDJmMmItYzkxYi00YjRiLWIxYTUtNDQyMjRkNWNlOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhpBSIjCu5pTvOMvVU82TnnrP6aGsIYp4Y/0 1teUvOPSHSJNsjUrxzbXJwP+iuPFo9ncaZtkIp9D6kSiGy3+2RG87OOhj4Miv+uY 4n9IqATZ3ZZO8XCxPLX5lPviTvXbF2DsRxcgDQva/d2GenRlQI/AFaxF4m/Pf8ws EBYCpQBEvW7Kw2+iCQjfISIB2jyJjIDJdiYwVB9Dbda8QV2lwdS2UUs6s+pWPFhp /dQDaApIkMVZE/aLPEMDAM3r7zN/06rjTKpTj24g2UJb91hF3h870wcA0NrBO3Ny 20BbUMqqgSgaP/WLmo+kenYltl8nmd0Wqj1d1rZIYvhhUN73eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVSVbVj7Wrc2wB7L775F6TDLGvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZhY2FhOWMtNjQxNC0z OGVmLWJiMmYtM2RiYWFlODQ2ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcNHMtpzEQcFmx576MVtclumyfBVjpJ/dqYzp/siWnl4aSRN20q2YBi biDFKnfjXXj61czMbCkIUOiav+yyuCW8MmrzL+rCVav1iOtR9WqWs2A4St1a0RVY 6olV+YrdbumTpuKsowhY8BhpAzRhvzZDyPVZHAbsTIrEvfkeUo0W7aXD5mHWK6A7 YR8ucHMfS8+gadXtEUvtGrCT9WrHOMm5V3+JaxLHqgKygki8Iv37OlcnLH10Q1xr 8vvIfZ/OSmI25JZ0C+A7U06uE4dt4hZUmwms4K1QoW0u8TmFO8Vnr85qqqP6QVHL oCnYgCauNwPsK0jgSfEwdmjhY/C2Vo0= -----END CERTIFICATE-----Generated at Fri Apr 4 08:28:29 2025 by rpki-client