$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa File: 20b50217-08d6-3245-abc2-d3c9c7b445a1.roa (raw, json) Hash identifier: vYOaVjRwwpzBiuXdrTXCotShSWsgkoZvuzvh22z0Lbg= Subject key identifier: 78:CF:5E:C8:B9:4A:66:0B:66:3E:6D:18:9C:54:89:04:82:C5:06:76 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62A9B68B9B0ED31182BF9F0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.217.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:9b:68:b9:b0:ed:31:18:2b:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=417666ea-c229-4fcc-b2e0-8c6cc7481645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:05:84:d3:b1:d3:18:4c:63:e0:0f:4a:40:e2: e7:48:3a:d1:f5:53:4f:3b:69:7b:0d:78:4a:22:d9: d9:68:d1:37:04:41:37:09:f3:be:ef:fb:af:e7:26: ae:39:3e:c6:1d:3c:12:4d:06:d5:e4:66:97:16:42: 9c:d8:d7:14:98:8c:79:97:e9:b5:05:37:c2:5d:a3: d1:09:e9:c0:b4:20:21:42:d0:15:9e:f7:dc:7a:d4: 86:19:56:46:7a:bb:8d:95:ac:25:b4:e4:aa:a7:99: 85:5f:66:17:ac:17:73:a5:e3:54:c5:1c:a2:7b:ce: db:9e:ae:04:e3:dc:dd:0a:31:9a:71:c2:a1:47:39: 53:24:5b:f1:03:b2:a4:4e:df:3d:95:52:2c:f1:b6: 71:84:d6:f3:29:e4:c6:d8:2d:bd:ee:63:47:a4:4d: fa:ed:11:61:ca:bf:49:4c:ac:66:fd:05:07:1d:f9: 77:91:25:77:24:bd:90:69:49:c3:fd:33:fe:95:81: a6:f4:2a:91:4c:05:c1:3d:b5:99:93:7a:7c:12:db: 1c:a4:32:b2:02:1c:fd:e5:7e:07:e2:61:27:66:8d: 5b:46:41:c9:81:bc:92:39:f4:8b:3e:7f:55:a6:c9: 9d:44:dc:8f:31:bf:0f:b2:09:83:5e:5b:3e:b5:cf: eb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CF:5E:C8:B9:4A:66:0B:66:3E:6D:18:9C:54:89:04:82:C5:06:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:78:25:db:c5:08:8b:76:58:c0:db:6b:30:cd:cc:3a:ae:49: f6:5e:0e:9a:e2:78:24:b6:b2:5d:55:57:d9:41:b2:d3:6f:02: e5:70:4d:95:87:9e:2b:4f:da:ef:8a:dd:33:ad:b6:72:9b:08: bc:16:2f:66:67:93:ba:5f:60:6e:5b:a9:97:a4:c6:5e:36:b7: 79:1c:e6:24:fb:04:a5:12:6a:0d:46:ef:7a:ae:9b:df:67:04: ce:22:30:34:ab:6b:10:9c:a9:b9:68:ce:79:e2:a7:a1:b8:10: 83:d0:80:b0:c1:48:a2:b4:b6:f4:d6:35:9f:4d:da:62:f1:62: 2f:ff:16:7f:a2:40:d2:45:3f:91:49:35:c0:9c:45:b8:f3:6c: 3c:09:e3:3f:b3:57:01:fa:bb:96:75:54:e0:a7:41:6a:52:94: 53:69:40:02:7d:55:01:2d:69:02:4b:4b:21:73:cf:4a:de:4a: 2d:d9:98:5c:be:bb:94:11:7c:2a:d1:1a:70:6e:a3:bb:2f:da: d9:6c:3d:e1:e4:66:71:3e:59:a5:c5:7a:f8:bf:60:ad:ec:b0: 5b:9d:c8:e3:99:3b:1d:53:a6:a3:ee:90:a1:b0:8d:79:b8:6f: 12:59:75:de:25:e5:55:87:27:f0:18:5d:a7:cc:ea:21:c8:84: 05:86:54:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKptoubDtMRgr+fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NDE3NjY2ZWEtYzIyOS00ZmNjLWIyZTAtOGM2Y2M3NDgxNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAWE07HTGExj4A9KQOLnSDrR9VNPO2l7DXhK ItnZaNE3BEE3CfO+7/uv5yauOT7GHTwSTQbV5GaXFkKc2NcUmIx5l+m1BTfCXaPR CenAtCAhQtAVnvfcetSGGVZGeruNlawltOSqp5mFX2YXrBdzpeNUxRyie87bnq4E 49zdCjGaccKhRzlTJFvxA7KkTt89lVIs8bZxhNbzKeTG2C297mNHpE367RFhyr9J TKxm/QUHHfl3kSV3JL2QaUnD/TP+lYGm9CqRTAXBPbWZk3p8EtscpDKyAhz95X4H 4mEnZo1bRkHJgbySOfSLPn9VpsmdRNyPMb8PsgmDXls+tc/rFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjPXsi5SmYLZj5tGJxUiQSCxQZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjBiNTAyMTctMDhkNi0z MjQ1LWFiYzItZDNjOWM3YjQ0NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl4JdvFCIt2WMDbazDNzDquSfZeDprieCS2sl1VV9lBstNvAuVwTZWH nitP2u+K3TOttnKbCLwWL2Znk7pfYG5bqZekxl42t3kc5iT7BKUSag1G73qum99n BM4iMDSraxCcqbloznnip6G4EIPQgLDBSKK0tvTWNZ9N2mLxYi//Fn+iQNJFP5FJ NcCcRbjzbDwJ4z+zVwH6u5Z1VOCnQWpSlFNpQAJ9VQEtaQJLSyFzz0reSi3ZmFy+ u5QRfCrRGnBuo7sv2tlsPeHkZnE+WaXFevi/YK3ssFudyOOZOx1TpqPukKGwjXm4 bxJZdd4l5VWHJ/AYXafM6iHIhAWGVB8= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:11 2024 by rpki-client on console-fra.rpki-client.org