$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa File: 29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa (raw, json) Hash identifier: chcN8nBiqnfTkk/Mvgxj+RIEf6OyDNbfMFEoaYZYo6Y= Subject key identifier: 4E:D0:F0:38:38:A6:4F:02:D7:C8:36:B8:D9:56:F5:8A:25:9B:22:0D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58216CC9AED5FFF96309F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:16:cc:9a:ed:5f:ff:96:30:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2f552a82-fdaf-46fe-b82a-5dd5b4e41e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:de:4c:ea:27:05:b4:48:01:13:05:6e:92:a6: 49:4e:ee:a9:71:17:8a:88:07:37:c5:61:a7:2e:d6: 00:11:73:4d:36:64:4e:51:fe:69:ad:ae:af:06:90: c2:09:d5:b9:24:04:c7:11:a4:30:ce:c7:4c:f9:6f: aa:af:45:a0:e6:20:09:ec:e8:61:57:81:2c:17:56: 11:8f:fa:81:f4:d1:2c:4a:df:6a:cd:03:d7:f4:a3: 8f:70:54:61:76:71:1b:6a:1d:73:c8:00:72:f0:7e: e8:c7:ac:a5:ce:22:f0:a0:d2:70:ab:81:6f:7a:fb: df:55:f3:ac:f1:b4:2a:90:38:b8:14:7c:0e:b3:a2: 87:ce:81:da:d4:49:48:58:0c:09:06:23:f0:a0:9c: 93:6d:f8:cf:60:e0:64:e3:5d:7e:be:d9:d6:d3:e5: 03:35:19:eb:c5:cc:3b:46:1b:2e:0d:32:d4:b3:a4: 09:17:5f:20:5b:59:2e:e5:a1:c5:09:5d:8f:a3:2a: 87:10:c7:d2:f9:be:d1:35:58:88:7b:97:1c:c7:aa: 01:16:0f:3b:f7:06:4d:38:6e:38:e5:fc:c4:9f:cb: 59:42:64:3e:1c:f4:4a:d2:ab:4d:2b:c6:6b:1f:e0: 21:fb:52:f7:04:36:f2:69:8e:2f:29:f0:7d:2d:1c: 0f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D0:F0:38:38:A6:4F:02:D7:C8:36:B8:D9:56:F5:8A:25:9B:22:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ba:58:cb:9a:66:b6:f2:6e:ef:f1:1c:d0:9e:ea:c0:ff:e7: 45:d3:e4:c8:dc:12:41:a4:17:0a:34:11:bc:30:f4:cf:77:05: c8:61:e6:1f:7e:11:33:4f:d9:54:f9:23:4f:52:57:31:90:be: 12:01:9a:87:39:f0:5f:fb:bb:6e:26:68:8f:11:fe:67:bf:f2: 6d:60:52:ef:78:41:2d:e8:e3:7c:34:33:86:90:43:32:f3:43: 54:7e:91:23:2e:ed:3e:4a:33:95:78:82:73:3b:d3:58:77:cf: 0f:9d:12:1e:7c:8b:cb:34:d3:54:ee:2c:5a:91:db:7d:06:42: dc:24:07:a3:57:c6:2f:6e:e1:5e:2e:b4:91:2b:8f:5a:d0:73: d9:6f:93:6e:dd:c4:78:ee:e0:65:e1:9c:d2:84:c6:ed:f1:23: 54:02:38:60:08:bc:65:fb:a4:3c:73:de:a5:e8:4d:2a:ae:21: 16:20:cf:ed:35:c3:01:54:cd:98:be:a3:bc:dd:a6:4b:88:b1: 9b:8d:79:bb:26:47:f8:da:99:25:98:5f:3e:2b:bc:8b:8f:f2: d3:6f:3f:6b:71:e6:ca:5c:65:09:03:41:1c:20:23:c3:d0:7c: ca:cd:a2:89:bb:9e:e9:31:1e:74:c5:60:ca:62:80:d0:68:fa: 02:5d:9a:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghbMmu1f/5Ywn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmY1NTJhODItZmRhZi00NmZlLWI4MmEtNWRkNWI0ZTQxZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d5M6icFtEgBEwVukqZJTu6pcReKiAc3xWGn LtYAEXNNNmROUf5pra6vBpDCCdW5JATHEaQwzsdM+W+qr0Wg5iAJ7OhhV4EsF1YR j/qB9NEsSt9qzQPX9KOPcFRhdnEbah1zyABy8H7ox6ylziLwoNJwq4FvevvfVfOs 8bQqkDi4FHwOs6KHzoHa1ElIWAwJBiPwoJyTbfjPYOBk411+vtnW0+UDNRnrxcw7 RhsuDTLUs6QJF18gW1ku5aHFCV2PoyqHEMfS+b7RNViIe5ccx6oBFg879wZNOG44 5fzEn8tZQmQ+HPRK0qtNK8ZrH+Ah+1L3BDbyaY4vKfB9LRwPfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7Q8Dg4pk8C18g2uNlW9YolmyINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjliZTU3NTQtNjNjNS0z YzFlLTk3ZmYtN2YyZmU3OGIwMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi6WMuaZrbybu/xHNCe6sD/50XT5MjcEkGkFwo0Ebww9M93Bchh5h9+ ETNP2VT5I09SVzGQvhIBmoc58F/7u24maI8R/me/8m1gUu94QS3o43w0M4aQQzLz Q1R+kSMu7T5KM5V4gnM701h3zw+dEh58i8s001TuLFqR230GQtwkB6NXxi9u4V4u tJErj1rQc9lvk27dxHju4GXhnNKExu3xI1QCOGAIvGX7pDxz3qXoTSquIRYgz+01 wwFUzZi+o7zdpkuIsZuNebsmR/jamSWYXz4rvIuP8tNvP2tx5spcZQkDQRwgI8PQ fMrNoom7nukxHnTFYMpigNBo+gJdmqo= -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:15 2025 by rpki-client