$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2e6255a8-38f5-302d-9082-237e58ecb46c.roa File: 2e6255a8-38f5-302d-9082-237e58ecb46c.roa (raw, json) Hash identifier: 9lubB+WJ1rsfgqo37o/4ge8FzHWSMEeUF1i3kJ3z/gY= Subject key identifier: 83:5C:61:87:BE:63:93:AC:7C:6F:17:11:BB:4A:D4:80:D1:A6:B8:5D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858489E6B5E7A0B8535E97E23AF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2e6255a8-38f5-302d-9082-237e58ecb46c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 15169 IP address blocks: 172.217.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:5e:7a:0b:85:35:e9:7e:23:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=1c2cf032-01b7-408e-a938-3b3cf7eb43cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:eb:40:12:28:33:a5:06:b3:0c:66:e0:bb: 8d:06:58:ad:00:d4:3b:b2:cf:e3:c5:a1:e9:b0:b1: 3c:ec:f3:f5:f6:5b:5e:58:bd:99:39:f7:4e:79:57: af:c7:40:17:17:8c:07:3b:ed:75:f8:1c:d7:10:7f: 24:63:9a:f0:8e:1f:64:99:05:c8:6d:51:6a:78:55: fd:35:9a:2a:ea:94:b2:f9:e1:be:54:9c:3e:23:bf: 2e:79:5d:36:8d:cd:df:60:c9:cd:8c:03:4e:08:fe: 27:2a:6e:1f:43:e9:ee:bd:50:38:ea:1c:17:d7:48: ed:a1:ea:be:99:68:ba:f5:2a:0e:96:75:88:08:92: 88:da:0d:17:70:f1:ec:e5:e6:61:b5:31:bf:df:64: 17:65:92:4e:d1:1b:21:40:3f:fc:87:09:76:37:a1: 66:05:3c:06:06:78:0c:8c:dc:1f:c5:fd:7f:e2:3b: a5:23:b4:cc:d4:34:17:2b:c6:d6:41:e8:56:98:44: e9:2a:64:f0:72:28:36:66:80:c5:2c:25:5c:6c:32: c4:10:1e:03:26:77:b4:3d:d0:d2:a5:10:6b:27:62: d6:02:a2:54:8a:a8:59:21:2e:46:46:2c:33:b1:27: 72:c2:76:f0:65:08:98:60:0e:9e:ca:c4:8c:15:b1: b1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5C:61:87:BE:63:93:AC:7C:6F:17:11:BB:4A:D4:80:D1:A6:B8:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2e6255a8-38f5-302d-9082-237e58ecb46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e0:50:70:3f:9f:4d:3b:49:d7:52:6d:3e:79:12:01:2f:58: f4:5a:37:2f:e5:dc:8c:fb:c7:7c:0c:44:d0:c7:73:e7:a6:86: 6a:21:fb:bb:07:25:7d:a5:c4:87:66:d2:70:6c:93:a7:c9:be: 9b:e1:71:8d:bb:3d:64:5e:a4:b7:4a:ff:e1:7f:e1:29:ab:97: 1d:69:7f:ba:aa:21:b8:ce:47:06:20:81:da:17:70:49:97:10: b3:05:7d:77:4d:0b:af:3a:09:0d:e3:e7:20:d0:86:fd:47:b0: e2:04:d3:77:e7:7f:6f:77:b6:62:2e:78:b9:88:19:1b:b4:43: 07:1a:29:60:b4:8f:2f:42:7c:ef:97:f5:e7:91:09:b6:10:39: c5:ff:80:a9:4b:d5:21:19:a5:9a:04:6e:66:6d:aa:9b:fd:57: b3:ed:20:a0:75:2e:5d:da:00:61:0e:07:ef:c5:95:4b:05:49: a8:8a:b1:7d:11:99:a8:61:05:78:20:6b:49:17:39:34:92:25: 77:70:f7:19:61:f5:a0:2a:20:87:35:d0:79:cc:92:d6:bc:86: 33:c4:e3:43:f9:55:9d:43:3b:08:e1:ba:30:f6:5f:82:c3:e2: 92:2d:68:84:5e:3f:2b:c9:a8:72:7c:30:1d:11:6f:d9:bf:6e: 67:b0:1b:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea156C4U16X4jrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MWMyY2YwMzItMDFiNy00MDhlLWE5MzgtM2IzY2Y3ZWI0M2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuojrQBIoM6UGswxm4LuNBlitANQ7ss/jxaHp sLE87PP19lteWL2ZOfdOeVevx0AXF4wHO+11+BzXEH8kY5rwjh9kmQXIbVFqeFX9 NZoq6pSy+eG+VJw+I78ueV02jc3fYMnNjANOCP4nKm4fQ+nuvVA46hwX10jtoeq+ mWi69SoOlnWICJKI2g0XcPHs5eZhtTG/32QXZZJO0RshQD/8hwl2N6FmBTwGBngM jNwfxf1/4julI7TM1DQXK8bWQehWmETpKmTwcig2ZoDFLCVcbDLEEB4DJne0PdDS pRBrJ2LWAqJUiqhZIS5GRiwzsSdywnbwZQiYYA6eysSMFbGxTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINcYYe+Y5OsfG8XEbtK1IDRprhdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmU2MjU1YTgtMzhmNS0z MDJkLTkwODItMjM3ZTU4ZWNiNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbgUHA/n007SddSbT55EgEvWPRaNy/l3Iz7x3wMRNDHc+emhmoh+7sH JX2lxIdm0nBsk6fJvpvhcY27PWRepLdK/+F/4Smrlx1pf7qqIbjORwYggdoXcEmX ELMFfXdNC686CQ3j5yDQhv1HsOIE03fnf293tmIueLmIGRu0QwcaKWC0jy9CfO+X 9eeRCbYQOcX/gKlL1SEZpZoEbmZtqpv9V7PtIKB1Ll3aAGEOB+/FlUsFSaiKsX0R mahhBXgga0kXOTSSJXdw9xlh9aAqIIc10HnMkta8hjPE40P5VZ1DOwjhujD2X4LD 4pItaIRePyvJqHJ8MB0Rb9m/bmewGzM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:31:50 2025 by rpki-client