$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa File: 1feacc45-abc0-30a4-b522-017d85a47719.roa (raw, json) Hash identifier: aaxUP2ScpicYtXxUAyqVSJSUkqDw74XO06B3/YoBh2s= Subject key identifier: 0D:2A:70:64:66:D2:E3:DA:77:2F:5E:62:3C:20:99:64:E8:6F:53:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B355C0935D817679D2900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 396982 IP address blocks: 172.217.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:35:5c:09:35:d8:17:67:9d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=af272ed1-6a8f-4395-b4fe-fa8f117c32ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:a4:dd:a7:53:dc:7a:f2:01:d4:0e:9c:06: 32:53:e2:23:3b:5b:ae:77:2f:5f:89:13:96:05:32: 80:60:88:d7:89:84:42:f3:e6:d3:20:32:ef:f9:8b: 2a:6f:0d:4e:ec:cb:a3:4f:01:d6:c9:7e:e0:48:e6: 69:4f:37:76:0b:98:d1:e0:3e:1e:42:a8:42:fc:5b: 8a:02:3d:60:7e:0b:f9:82:2c:fe:25:0b:d7:d3:9e: 8b:c8:1b:04:31:47:4e:f3:51:b1:04:9b:92:67:3d: b5:b6:f8:e1:f2:0c:41:99:09:20:37:90:46:a3:02: 05:92:81:ed:79:a4:20:3d:0e:7b:e1:03:26:93:3e: 42:04:32:dd:f1:c6:fa:25:90:cd:ae:f6:52:5f:65: c7:c5:89:62:e7:a7:73:59:85:52:88:48:b6:06:72: e8:b3:c7:7d:a4:52:c4:f0:c5:9d:c2:27:52:62:a6: 06:52:a9:8d:19:98:99:48:7d:65:f1:7f:c3:e9:e2: a1:27:67:e5:3e:38:7e:50:40:e1:7b:24:82:da:26: 77:65:7a:a3:1b:8d:35:41:58:47:b5:2c:34:23:55: 27:10:f8:e9:22:3e:98:9d:a6:4b:61:f6:73:b0:d9: 79:b9:9e:2d:38:50:8e:93:b3:ae:23:b3:12:75:b4: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2A:70:64:66:D2:E3:DA:77:2F:5E:62:3C:20:99:64:E8:6F:53:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:1e:21:7f:d4:6f:28:43:3e:30:4c:7f:ff:28:47:bf:6a:e1: 9b:09:35:af:4e:92:98:42:5a:c1:7e:6e:be:20:f1:23:85:02: 47:6f:89:a5:12:58:b6:94:3f:d0:88:18:31:0a:88:7a:c9:f5: 12:98:5f:92:b7:fe:75:8a:96:85:10:77:df:d9:82:3d:72:4a: ff:2c:c8:81:63:84:ac:79:95:be:72:fc:c5:1f:33:ae:4a:09: d3:99:4d:39:b4:55:95:6b:ff:76:27:92:08:9e:93:cb:a1:2c: 16:ba:31:74:d8:26:3c:5b:cc:e8:63:9b:07:5f:56:87:26:6c: d2:85:62:1c:9f:70:10:f4:8e:b5:3e:80:5a:f8:06:9a:f7:39: 98:b9:e8:7a:c8:09:d5:5f:e6:03:2c:1f:02:24:b6:c8:16:60: de:ee:6f:0d:16:63:37:2b:57:ad:b0:51:af:00:b5:94:5d:20: 5b:fa:6b:0f:de:ba:c3:f4:c3:47:62:91:63:14:70:1c:e8:bc: 19:9f:ca:b5:55:eb:e0:89:4b:bf:86:a0:96:04:32:02:87:e5: 73:a9:8b:cf:6c:6b:3c:06:21:02:6d:bc:30:7d:87:dc:fa:43: 6c:a4:d3:98:61:49:95:b4:04:9f:f9:1d:0a:c4:fc:af:f5:34: 20:a7:3f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzVcCTXYF2edKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YWYyNzJlZDEtNmE4Zi00Mzk1LWI0ZmUtZmE4ZjExN2MzMmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vek3adT3HryAdQOnAYyU+IjO1uudy9fiROW BTKAYIjXiYRC8+bTIDLv+Ysqbw1O7MujTwHWyX7gSOZpTzd2C5jR4D4eQqhC/FuK Aj1gfgv5giz+JQvX056LyBsEMUdO81GxBJuSZz21tvjh8gxBmQkgN5BGowIFkoHt eaQgPQ574QMmkz5CBDLd8cb6JZDNrvZSX2XHxYli56dzWYVSiEi2BnLos8d9pFLE 8MWdwidSYqYGUqmNGZiZSH1l8X/D6eKhJ2flPjh+UEDheySC2iZ3ZXqjG401QVhH tSw0I1UnEPjpIj6YnaZLYfZzsNl5uZ4tOFCOk7OuI7MSdbTKQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0qcGRm0uPady9eYjwgmWTob1MMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZlYWNjNDUtYWJjMC0z MGE0LWI1MjItMDE3ZDg1YTQ3NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrNk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4eIX/UbyhDPjBMf/8oR79q4ZsJNa9OkphCWsF+br4g8SOFAkdviaUS WLaUP9CIGDEKiHrJ9RKYX5K3/nWKloUQd9/Zgj1ySv8syIFjhKx5lb5y/MUfM65K CdOZTTm0VZVr/3Ynkgiek8uhLBa6MXTYJjxbzOhjmwdfVocmbNKFYhyfcBD0jrU+ gFr4Bpr3OZi56HrICdVf5gMsHwIktsgWYN7ubw0WYzcrV62wUa8AtZRdIFv6aw/e usP0w0dikWMUcBzovBmfyrVV6+CJS7+GoJYEMgKH5XOpi89sazwGIQJtvDB9h9z6 Q2yk05hhSZW0BJ/5HQrE/K/1NCCnP/o= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:51 2024 by rpki-client on console-ams.rpki-client.org