$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa File: 2363796e-1a6a-3118-a421-6fa84d42857f.roa (raw, json) Hash identifier: LEvJqbciyN6Fmw9DDTLOA+2wNL/oPBGlp/wWJUf5z8U= Subject key identifier: 84:19:9B:5C:AB:68:33:5E:72:D9:CB:FB:A8:F0:32:C3:27:90:2D:59 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA130BD9541BB00141E7500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.217.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:30:bd:95:41:bb:00:14:1e:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=1deb788a-1a2c-4ad9-a483-6d52a54aaa57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a6:51:d7:81:b9:7d:d1:a3:24:06:70:69:64: cf:59:4f:d7:e9:78:cb:b9:46:8c:f1:02:0f:f1:28: 65:5e:d6:e7:c4:7f:7c:ba:7c:c5:90:5c:79:84:b8: 77:3f:85:d2:7d:3a:b0:59:25:a9:66:4e:e9:4e:b9: 4d:b9:25:dc:53:8a:42:18:ef:62:19:44:91:f6:1c: 5e:cf:35:54:76:45:38:58:5f:50:64:ab:b6:17:bf: 60:c7:e3:4c:0f:3b:26:61:12:18:2f:8c:47:58:ff: e4:ee:e5:65:eb:28:10:24:b0:4a:d0:9d:11:9c:b7: cb:03:a6:71:4d:25:1d:ff:2a:d4:1b:fc:64:50:8e: 8c:6a:65:dc:f8:0e:58:07:0b:5b:57:10:11:30:24: 4b:a7:33:f5:9b:11:a3:2c:c8:61:6d:14:e0:23:4c: cf:43:86:21:2f:25:85:ee:c7:5b:cb:1e:c7:b9:69: 48:37:3c:8e:e3:85:3e:07:b5:87:55:73:47:45:6a: 17:0b:0e:1b:ab:8a:3c:db:2d:26:53:40:ed:7a:29: 8c:fa:3f:60:a2:be:da:b6:78:a5:49:0e:2e:d9:ee: b2:60:44:90:24:dd:69:44:0e:7e:5b:0d:35:76:3b: b6:68:3b:5a:31:35:60:c4:ef:08:bb:f7:13:3e:c3: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:19:9B:5C:AB:68:33:5E:72:D9:CB:FB:A8:F0:32:C3:27:90:2D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1a:c3:90:0e:7a:fc:74:c7:6b:47:60:a1:ff:77:37:b5:e6: 14:e5:a6:c8:c7:a7:58:29:1c:0c:34:a0:8a:fe:43:2f:3d:5b: a2:06:1a:ae:0f:1c:f8:e7:29:d5:9d:c4:f8:3e:0c:63:58:71: 6b:5f:a9:92:65:f9:c3:44:52:ce:a3:42:d6:76:da:69:d3:93: ab:29:68:72:5c:c3:2f:5a:36:57:54:e3:6b:9d:e5:8f:b4:6b: 38:2a:f3:dd:d9:5c:97:f1:6c:4b:b3:a9:22:1a:77:ba:04:17: 2e:8a:95:c2:7c:61:e0:5f:8c:26:c3:c9:d9:b8:cc:10:7e:39: 80:c5:10:2e:f5:ca:ed:94:c5:73:c4:e9:22:f2:d2:78:3a:8b: df:1c:ed:6a:48:c3:bc:12:e7:1b:bb:42:a4:66:63:83:89:da: 47:e1:f0:48:2e:3f:46:f0:28:15:69:c8:a5:9f:06:62:7b:bd: 12:9d:9f:56:77:6c:29:f4:92:d5:c9:20:83:a5:c8:ca:78:a7: f1:d2:08:b2:06:22:6d:13:c3:4d:23:d0:46:9e:f5:04:a4:21: fa:5c:9b:c8:2f:c8:81:67:54:6c:f7:c1:dc:8b:36:7f:eb:03: 7b:52:c5:b4:df:f6:8f:80:ef:14:09:7c:53:7e:0f:cf:e4:54: 5c:5b:f6:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoTC9lUG7ABQedQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MWRlYjc4OGEtMWEyYy00YWQ5LWE0ODMtNmQ1MmE1NGFhYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKZR14G5fdGjJAZwaWTPWU/X6XjLuUaM8QIP 8ShlXtbnxH98unzFkFx5hLh3P4XSfTqwWSWpZk7pTrlNuSXcU4pCGO9iGUSR9hxe zzVUdkU4WF9QZKu2F79gx+NMDzsmYRIYL4xHWP/k7uVl6ygQJLBK0J0RnLfLA6Zx TSUd/yrUG/xkUI6MamXc+A5YBwtbVxARMCRLpzP1mxGjLMhhbRTgI0zPQ4YhLyWF 7sdbyx7HuWlINzyO44U+B7WHVXNHRWoXCw4bq4o82y0mU0DteimM+j9gor7atnil SQ4u2e6yYESQJN1pRA5+Ww01dju2aDtaMTVgxO8Iu/cTPsO/9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQZm1yraDNectnL+6jwMsMnkC1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjM2Mzc5NmUtMWE2YS0z MTE4LWE0MjEtNmZhODRkNDI4NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEaw5AOevx0x2tHYKH/dze15hTlpsjHp1gpHAw0oIr+Qy89W6IGGq4P HPjnKdWdxPg+DGNYcWtfqZJl+cNEUs6jQtZ22mnTk6spaHJcwy9aNldU42ud5Y+0 azgq893ZXJfxbEuzqSIad7oEFy6KlcJ8YeBfjCbDydm4zBB+OYDFEC71yu2UxXPE 6SLy0ng6i98c7WpIw7wS5xu7QqRmY4OJ2kfh8EguP0bwKBVpyKWfBmJ7vRKdn1Z3 bCn0ktXJIIOlyMp4p/HSCLIGIm0Tw00j0Eae9QSkIfpcm8gvyIFnVGz3wdyLNn/r A3tSxbTf9o+A7xQJfFN+D8/kVFxb9kk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:18 2025 by rpki-client