$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa File: 353aa361-816d-338e-89e8-88e5fd85eccc.roa (raw, json) Hash identifier: Zc0fkkUpv57Vs/4nABkn3iqWVj759m1GCF1QezHGDc0= Subject key identifier: C0:66:DD:8C:27:1D:6B:60:94:AC:56:49:19:EC:D2:15:63:30:48:85 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5821B590DD9583951D0B000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:1b:59:0d:d9:58:39:51:d0:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=900349af-9029-4e2d-84f9-96415ff046cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:1e:69:af:21:7e:4d:9a:2c:f0:29:44:08: 3d:4b:a6:6d:c2:b5:67:a8:bc:af:7c:82:4b:83:7f: 10:96:79:bf:49:c3:c9:e8:1f:e4:36:a3:64:64:8c: 62:c5:14:d8:f8:22:3a:4e:ba:ba:7e:1d:72:ea:07: 3c:6a:79:96:a7:20:50:60:2e:de:e9:2c:41:d0:aa: 8c:d1:0b:c0:c4:00:a1:84:de:4e:0b:ee:f1:b7:b3: 15:9a:ff:16:76:af:f4:cf:58:6b:89:56:2c:31:2e: bb:0a:ac:a1:19:58:a5:c0:8b:e1:0c:77:61:55:ab: 76:ef:f1:8a:99:44:58:f5:66:be:9c:b1:62:5b:e5: 90:99:5e:53:74:a4:b7:fa:9a:d1:ea:77:e8:f1:d6: 44:2e:e2:6c:1f:8d:b4:68:17:84:5a:49:f5:4b:9d: eb:f7:04:07:28:1b:c6:10:e2:25:6d:88:ae:7c:e8: 2e:5d:53:7f:ab:27:13:6a:fe:e6:65:3f:7d:61:dc: e2:e6:a3:9c:32:e1:a7:f0:f6:5f:5a:1f:96:0a:48: 73:64:76:b0:c9:78:cd:38:5e:18:06:51:e6:32:80: c5:37:df:ed:9d:a8:52:85:04:9c:32:16:8b:5c:23: f0:83:51:00:4b:ad:69:f6:9e:ad:1f:8f:1b:b5:0c: 93:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:66:DD:8C:27:1D:6B:60:94:AC:56:49:19:EC:D2:15:63:30:48:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0a:1e:55:78:c5:f8:fc:20:82:d3:28:ae:3a:f0:c2:db:4c: 0f:7f:33:5a:74:b2:77:68:13:11:8f:eb:3d:98:85:86:e3:8a: 8b:6b:d4:d3:69:d4:e4:71:5c:de:ec:fc:ef:76:1e:23:ef:2e: d8:9e:5c:77:4e:b3:57:df:8f:b3:07:c1:54:61:8d:05:a5:b0: 11:1c:7b:43:99:6b:2d:42:eb:d4:f7:f9:52:1f:22:86:8d:be: 05:9d:af:3c:24:6f:67:f7:24:cd:04:e9:17:0e:03:cb:95:7e: 37:56:2a:c1:b7:52:7b:b6:48:17:e8:d9:b9:26:8f:03:f9:eb: d8:a9:f1:68:c9:c1:bc:95:fc:88:b4:c0:7c:2d:85:3e:29:fe: 3b:0b:16:1f:f7:6f:cd:31:c5:3b:94:17:37:ec:b4:34:3c:a2: ac:3c:8e:eb:67:82:88:80:ab:a1:4a:80:5a:60:41:26:87:d7: e7:00:5e:f1:cc:91:29:91:09:38:d8:4e:0e:d4:fb:27:63:0f: 1b:46:d4:04:6b:52:bf:12:94:e9:84:44:4b:09:18:21:ae:3d: 3f:97:26:d2:b7:49:bb:b0:4b:85:fb:83:a8:54:80:19:0e:e2: 93:fc:4c:83:39:96:f1:68:85:96:21:51:29:f7:7a:51:06:f6: e0:f4:54:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghtZDdlYOVHQsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTAwMzQ5YWYtOTAyOS00ZTJkLTg0ZjktOTY0MTVmZjA0NmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUoeaa8hfk2aLPApRAg9S6ZtwrVnqLyvfIJL g38Qlnm/ScPJ6B/kNqNkZIxixRTY+CI6Trq6fh1y6gc8anmWpyBQYC7e6SxB0KqM 0QvAxAChhN5OC+7xt7MVmv8Wdq/0z1hriVYsMS67CqyhGVilwIvhDHdhVat27/GK mURY9Wa+nLFiW+WQmV5TdKS3+prR6nfo8dZELuJsH420aBeEWkn1S53r9wQHKBvG EOIlbYiufOguXVN/qycTav7mZT99Ydzi5qOcMuGn8PZfWh+WCkhzZHawyXjNOF4Y BlHmMoDFN9/tnahShQScMhaLXCPwg1EAS61p9p6tH48btQyTJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBm3YwnHWtglKxWSRns0hVjMEiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzUzYWEzNjEtODE2ZC0z MzhlLTg5ZTgtODhlNWZkODVlY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUKHlV4xfj8IILTKK468MLbTA9/M1p0sndoExGP6z2YhYbjiotr1NNp 1ORxXN7s/O92HiPvLtieXHdOs1ffj7MHwVRhjQWlsBEce0OZay1C69T3+VIfIoaN vgWdrzwkb2f3JM0E6RcOA8uVfjdWKsG3Unu2SBfo2bkmjwP569ip8WjJwbyV/Ii0 wHwthT4p/jsLFh/3b80xxTuUFzfstDQ8oqw8jutngoiAq6FKgFpgQSaH1+cAXvHM kSmRCTjYTg7U+ydjDxtG1ARrUr8SlOmEREsJGCGuPT+XJtK3SbuwS4X7g6hUgBkO 4pP8TIM5lvFohZYhUSn3elEG9uD0VLQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:02:42 2025 by rpki-client