$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa File: 21512194-aac9-3b75-b614-eb08260f717b.roa (raw, json) Hash identifier: 4SgSPquM6uSDKkSYAEAZTjP3y/2xMEAAUaWK4AkecV8= Subject key identifier: 94:BA:E2:47:5E:47:5E:BF:25:62:B9:03:38:62:5A:9D:D9:F1:DA:BF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62A9C3EE6AB443C96890100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.217.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:9c:3e:e6:ab:44:3c:96:89:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=c1faea1c-d1f4-43be-8208-e25cf35a9d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:29:72:5c:5f:ff:fa:36:b2:21:d1:76:37:72: 6e:0c:9e:61:d6:66:a1:5b:07:3f:e2:0c:cc:d3:3a: 4f:1e:33:6a:ee:e9:f9:09:33:45:91:14:63:25:c8: 93:21:47:ec:55:2a:66:c4:77:20:fc:b5:f7:a6:bb: 15:5d:e3:76:02:eb:79:82:06:3d:a5:56:92:b7:9f: 55:45:6b:4a:2c:91:63:31:00:34:ee:d8:92:19:79: 53:d2:cb:9f:d3:25:c1:94:e9:f3:8b:b0:f4:c4:d5: 59:db:7d:d2:5c:10:7c:99:44:7c:a7:64:39:52:cf: ff:b7:a6:01:82:13:15:d5:cd:fe:ee:04:6d:5e:12: a6:1a:ba:da:d0:e1:b8:ed:b4:e5:3e:83:88:84:fb: 8a:97:bc:7a:1c:30:dd:8f:a6:21:01:2a:a6:38:8f: 87:cd:a4:6e:4b:c7:e7:b6:7f:34:7d:d6:16:92:31: 22:39:09:a4:73:63:72:ab:5d:c6:9c:4b:68:49:ed: d6:75:ae:92:c8:25:21:9f:0f:9b:ab:a1:d0:4c:7a: c3:7a:cd:ab:ad:6c:22:aa:1a:3f:1c:b5:92:99:9b: 87:b8:7c:37:92:14:33:6d:42:bb:95:41:49:31:c5: cc:61:7f:56:0c:9b:cd:86:7a:13:f4:d1:dc:28:fa: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BA:E2:47:5E:47:5E:BF:25:62:B9:03:38:62:5A:9D:D9:F1:DA:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21512194-aac9-3b75-b614-eb08260f717b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:80:3c:b9:1a:3e:a9:7a:a5:15:7e:7a:ae:72:65:95:90:d1: 88:63:f8:d9:1e:fd:01:76:46:cc:37:46:7d:a6:0b:1c:4b:eb: 63:86:3f:de:75:b2:32:8f:0b:14:01:fe:e7:d4:2d:14:f7:ba: 01:32:3c:4d:ee:0c:97:af:4a:e4:14:43:d1:08:1f:06:5f:94: be:98:b3:f2:73:0e:4e:0b:a9:96:88:6a:9b:4a:b2:98:f8:94: 88:4b:5c:ee:ef:fd:2e:36:11:ba:6a:37:df:4d:4a:a9:0b:53: 4a:36:f1:fa:f3:de:80:19:ff:1e:ca:16:89:79:96:e8:89:04: 71:ee:92:6a:f5:38:d2:45:de:06:f5:99:72:28:4d:ed:05:a8: bf:69:1d:1c:9d:dc:09:8e:84:2e:a4:6b:24:66:73:9a:f4:5d: 99:2e:d6:b2:0d:ec:ba:c6:fc:e9:19:6c:88:2f:d9:5a:18:19: e0:ca:30:d9:42:6c:80:65:b4:b2:e7:71:a3:56:6c:2e:0e:fc: 3e:f1:a8:7b:36:c5:d1:c6:0c:de:44:59:45:c6:f3:03:7d:8a: da:66:12:a2:1a:54:a0:b2:b3:6a:d4:23:00:28:74:c3:a2:e5: 09:e1:32:a2:6d:52:63:9e:3e:2e:50:7c:14:9b:4e:1d:50:f3: 4e:f2:2f:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKpw+5qtEPJaJAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YzFmYWVhMWMtZDFmNC00M2JlLTgyMDgtZTI1Y2YzNWE5ZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SlyXF//+jayIdF2N3JuDJ5h1mahWwc/4gzM 0zpPHjNq7un5CTNFkRRjJciTIUfsVSpmxHcg/LX3prsVXeN2Aut5ggY9pVaSt59V RWtKLJFjMQA07tiSGXlT0suf0yXBlOnzi7D0xNVZ233SXBB8mUR8p2Q5Us//t6YB ghMV1c3+7gRtXhKmGrra0OG47bTlPoOIhPuKl7x6HDDdj6YhASqmOI+HzaRuS8fn tn80fdYWkjEiOQmkc2Nyq13GnEtoSe3Wda6SyCUhnw+bq6HQTHrDes2rrWwiqho/ HLWSmZuHuHw3khQzbUK7lUFJMcXMYX9WDJvNhnoT9NHcKPpgEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS64kdeR16/JWK5AzhiWp3Z8dq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjE1MTIxOTQtYWFjOS0z Yjc1LWI2MTQtZWIwODI2MGY3MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6APLkaPql6pRV+eq5yZZWQ0Yhj+Nke/QF2Rsw3Rn2mCxxL62OGP951 sjKPCxQB/ufULRT3ugEyPE3uDJevSuQUQ9EIHwZflL6Ys/JzDk4LqZaIaptKspj4 lIhLXO7v/S42EbpqN99NSqkLU0o28frz3oAZ/x7KFol5luiJBHHukmr1ONJF3gb1 mXIoTe0FqL9pHRyd3AmOhC6kayRmc5r0XZku1rIN7LrG/OkZbIgv2VoYGeDKMNlC bIBltLLncaNWbC4O/D7xqHs2xdHGDN5EWUXG8wN9itpmEqIaVKCys2rUIwAodMOi 5QnhMqJtUmOePi5QfBSbTh1Q807yLxw= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:11 2024 by rpki-client on console-fra.rpki-client.org