$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa File: 311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa (raw, json) Hash identifier: ZhzddoEb8egl3xYww+ZbMX/yDTQ0NY4hkVojIk+JsXQ= Subject key identifier: B3:09:18:A6:4A:BA:DA:61:17:C7:8F:A1:86:04:F9:CE:01:06:3D:B9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820B633F9C691A4371C200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0b:63:3f:9c:69:1a:43:71:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=77344d6d-a375-4b31-8356-2b37d6e416d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dd:6b:cc:12:52:ad:47:71:c7:81:d2:24:36: 99:f2:c0:ce:98:e9:d4:b8:6d:7b:45:87:58:5b:ff: eb:e6:8a:52:0d:09:2e:9a:d9:33:6b:54:43:37:ad: 7d:a5:1a:47:41:ef:38:de:05:d0:a4:93:ae:57:7e: 9d:b8:c7:26:22:c0:7b:85:f9:b8:f2:bd:b9:6f:cf: 01:3f:19:9d:ef:f4:24:77:ad:47:53:9a:33:2f:59: d6:0a:f9:55:c4:37:ed:df:a4:44:a8:6e:1f:6d:24: 15:90:a2:47:3e:bb:2d:66:20:d9:a2:26:80:78:a3: 33:1c:aa:c1:ef:cf:bd:34:dc:1b:34:58:0d:bd:9b: ad:7e:e4:c1:9c:63:ce:74:73:f9:79:cc:7b:f4:a6: 2c:07:a8:03:8c:38:d6:ff:7f:b1:2b:03:3e:03:16: 37:97:eb:6f:b0:6c:b1:0d:33:5b:e3:58:01:4e:fc: 30:2f:a1:31:0d:46:a5:d2:58:3c:ed:e6:43:a5:dd: 96:b8:cc:d2:26:c7:29:56:e6:c4:e2:56:6a:37:1f: 68:34:0e:ba:95:0e:76:03:be:fa:e5:a3:f6:e5:b3: 37:d3:17:d7:dc:ee:f1:5d:15:3d:2e:91:94:96:aa: cd:78:86:b4:10:7d:f7:bc:c5:18:f3:32:5a:b3:a9: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:09:18:A6:4A:BA:DA:61:17:C7:8F:A1:86:04:F9:CE:01:06:3D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1a:cf:73:de:24:5d:7f:a2:c8:6c:3a:4a:21:c6:6c:b2:a9: 37:1e:e4:f7:ba:af:eb:2d:02:dd:36:e0:82:f1:ee:96:12:0d: a1:64:bc:ab:3f:90:37:d4:4e:38:ce:67:de:ff:25:c2:b2:10: 97:14:ac:7d:48:ce:e4:b7:08:a8:e8:5d:38:29:04:d9:55:c7: c9:4f:fb:28:99:d5:98:ee:ea:a3:67:a0:23:40:31:28:7d:e0: e5:18:6a:96:16:67:0b:42:80:b2:fb:c9:fe:ac:63:06:fb:99: eb:db:55:8c:1a:20:fd:43:1a:ac:54:f1:a3:15:33:5a:5b:2a: d3:40:83:5c:db:0e:29:a0:19:60:5a:5f:0e:1d:4e:7d:24:1a: 3c:c0:01:3a:36:b7:9a:33:41:2a:58:68:26:d0:46:c7:40:fa: 4c:1e:bc:66:eb:a0:76:f2:ee:38:7d:79:2a:58:f8:83:79:ca: 78:8c:45:e7:af:a3:58:be:87:23:bf:64:04:26:c2:5e:16:7e: c8:87:d0:2d:11:23:7e:2a:aa:26:4f:ad:a9:a4:e5:69:9f:2f: cc:fb:58:04:d5:1a:08:99:09:2e:0a:70:0d:ea:b9:9d:32:41: 95:15:72:5f:d3:6b:c9:df:a9:b9:43:6c:8e:a3:3f:bd:46:de: 08:d6:9a:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggtjP5xpGkNxwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzczNDRkNmQtYTM3NS00YjMxLTgzNTYtMmIzN2Q2ZTQxNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl91rzBJSrUdxx4HSJDaZ8sDOmOnUuG17RYdY W//r5opSDQkumtkza1RDN619pRpHQe843gXQpJOuV36duMcmIsB7hfm48r25b88B Pxmd7/Qkd61HU5ozL1nWCvlVxDft36REqG4fbSQVkKJHPrstZiDZoiaAeKMzHKrB 78+9NNwbNFgNvZutfuTBnGPOdHP5ecx79KYsB6gDjDjW/3+xKwM+AxY3l+tvsGyx DTNb41gBTvwwL6ExDUal0lg87eZDpd2WuMzSJscpVubE4lZqNx9oNA66lQ52A776 5aP25bM30xfX3O7xXRU9LpGUlqrNeIa0EH33vMUY8zJas6mCTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMJGKZKutphF8ePoYYE+c4BBj25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzExZWRkMzQtYzIxZS0z NmE3LWE2Y2ItMmZlNGNiNjNkNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAaz3PeJF1/oshsOkohxmyyqTce5Pe6r+stAt024ILx7pYSDaFkvKs/ kDfUTjjOZ97/JcKyEJcUrH1IzuS3CKjoXTgpBNlVx8lP+yiZ1Zju6qNnoCNAMSh9 4OUYapYWZwtCgLL7yf6sYwb7mevbVYwaIP1DGqxU8aMVM1pbKtNAg1zbDimgGWBa Xw4dTn0kGjzAATo2t5ozQSpYaCbQRsdA+kwevGbroHby7jh9eSpY+IN5yniMReev o1i+hyO/ZAQmwl4WfsiH0C0RI34qqiZPramk5WmfL8z7WATVGgiZCS4KcA3quZ0y QZUVcl/Ta8nfqblDbI6jP71G3gjWmpY= -----END CERTIFICATE-----Generated at Fri Apr 4 08:27:15 2025 by rpki-client