$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa File: 21512194-aac9-3b75-b614-eb08260f717b.roa (raw, json) Hash identifier: 69tpOHsmDTllPJJWOajcZyFQp/QF7MqQ7i4knnDf9AY= Subject key identifier: 88:FF:1D:A9:23:B5:C0:76:69:D6:5C:45:F6:32:88:1F:4D:8A:EB:95 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584546232B077516C44484B2C7D0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa Signing time: Wed 20 Mar 2024 20:43:31 +0000 ROA not before: Wed 20 Mar 2024 20:43:31 +0000 ROA not after: Tue 18 Jun 2024 20:43:31 +0000 asID: 15169 IP address blocks: 172.217.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:23:2b:07:75:16:c4:44:84:b2:c7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:43:31 2024 GMT Not After : Jun 18 20:43:31 2024 GMT Subject: CN=1cecc323-52e3-4ea1-a150-a8dc6f3be496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:46:a4:d0:a2:e2:50:c5:43:98:f2:f8:82: a4:18:82:72:6b:6f:97:36:06:28:2c:55:2f:cc:fd: c7:be:89:3b:1f:0f:25:23:7e:f3:47:01:c6:ea:ac: f9:97:17:7e:e2:a6:88:e7:92:e6:ca:ab:61:5b:92: 55:d5:07:ef:88:e8:66:1c:3c:37:94:2f:18:53:4b: 0f:51:f5:4b:32:47:70:60:22:e1:63:61:29:9a:bc: ab:99:a2:15:33:e1:1f:e5:d3:25:3e:e3:bd:83:19: d3:a5:4b:38:cb:80:af:dd:17:b9:13:c1:b4:6a:81: e1:18:a3:cb:4a:3c:bc:b1:79:d0:02:fe:ca:f9:32: fc:45:11:d6:bb:d0:45:3d:fa:ed:00:d2:9f:36:32: 75:74:50:65:48:08:d7:be:3a:86:35:57:3f:61:77: af:85:88:e9:5c:9e:d7:50:23:5e:7a:b7:1f:67:b8: 1a:1c:e2:b7:c2:6e:57:19:5d:10:9d:95:29:82:c2: 99:fa:6c:51:db:26:fe:b1:24:38:0e:45:e0:db:24: f3:d6:fe:12:33:5b:ab:27:6a:f7:b5:fd:df:17:ef: d6:d7:52:2b:77:e9:e1:2c:b1:c4:f4:20:75:27:ef: 22:df:14:4f:eb:67:7b:50:a1:97:fe:4d:ae:63:8a: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FF:1D:A9:23:B5:C0:76:69:D6:5C:45:F6:32:88:1F:4D:8A:EB:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d3:3d:bd:46:be:c6:da:01:ad:ba:17:d2:2e:af:08:bf:eb: fd:ae:46:48:8f:46:89:d5:c0:a8:b5:26:67:ab:56:10:d9:0b: ec:c9:9b:e2:ea:69:d9:83:09:5b:5b:26:f5:48:0d:10:37:f7: e6:78:e6:d4:e0:4d:af:46:43:b6:04:c8:46:65:69:c1:65:93: cd:7d:dc:4c:e0:73:a6:93:a3:23:6e:e2:4f:81:6f:55:13:9e: b0:cd:3c:83:42:d7:e1:c4:23:bd:d2:9d:3e:24:7c:1f:14:c2: f0:44:40:02:30:6e:c4:33:de:e5:b1:7c:d7:e0:72:76:2c:f4: 41:6c:9e:e2:8e:f1:9b:12:df:37:c0:49:f9:6b:f5:9b:7c:2e: 11:ae:19:b2:e0:59:61:63:68:1d:70:69:cf:fa:d8:79:49:39: 9c:5d:ba:1b:be:35:f9:ea:84:55:1f:97:a4:88:eb:04:62:b1: e8:39:94:40:3c:2f:9f:8b:f4:85:50:d9:5f:b1:ec:a5:95:cc: 9b:35:63:a1:b3:80:01:85:02:51:5f:57:d6:16:28:1d:9e:8f: 9a:ce:5a:b7:a7:92:c0:e5:7c:f1:a7:23:9e:73:57:08:22:cb: 11:bf:18:8d:d5:8b:f5:eb:22:92:90:89:50:0d:56:79:51:66: 5a:79:5b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGIysHdRbERISyx9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNDMzMVoXDTI0MDYxODIwNDMzMVowLzEtMCsGA1UEAxMk MWNlY2MzMjMtNTJlMy00ZWExLWExNTAtYThkYzZmM2JlNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeFGpNCi4lDFQ5jy+IKkGIJya2+XNgYoLFUv zP3Hvok7Hw8lI37zRwHG6qz5lxd+4qaI55LmyqthW5JV1QfviOhmHDw3lC8YU0sP UfVLMkdwYCLhY2EpmryrmaIVM+Ef5dMlPuO9gxnTpUs4y4Cv3Re5E8G0aoHhGKPL Sjy8sXnQAv7K+TL8RRHWu9BFPfrtANKfNjJ1dFBlSAjXvjqGNVc/YXevhYjpXJ7X UCNeercfZ7gaHOK3wm5XGV0QnZUpgsKZ+mxR2yb+sSQ4DkXg2yTz1v4SM1urJ2r3 tf3fF+/W11Ird+nhLLHE9CB1J+8i3xRP62d7UKGX/k2uY4oCPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj/HakjtcB2adZcRfYyiB9NiuuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjE1MTIxOTQtYWFjOS0z Yjc1LWI2MTQtZWIwODI2MGY3MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjTPb1GvsbaAa26F9Iurwi/6/2uRkiPRonVwKi1JmerVhDZC+zJm+Lq admDCVtbJvVIDRA39+Z45tTgTa9GQ7YEyEZlacFlk8193Ezgc6aToyNu4k+Bb1UT nrDNPINC1+HEI73SnT4kfB8UwvBEQAIwbsQz3uWxfNfgcnYs9EFsnuKO8ZsS3zfA Sflr9Zt8LhGuGbLgWWFjaB1wac/62HlJOZxduhu+NfnqhFUfl6SI6wRiseg5lEA8 L5+L9IVQ2V+x7KWVzJs1Y6GzgAGFAlFfV9YWKB2ej5rOWrenksDlfPGnI55zVwgi yxG/GI3Vi/XrIpKQiVANVnlRZlp5W48= -----END CERTIFICATE-----Generated at Fri May 17 22:52:18 2024 by rpki-client on console-ams.rpki-client.org