$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/35fce67e-1ca8-39f2-8e85-058c8423c83a.roa File: 35fce67e-1ca8-39f2-8e85-058c8423c83a.roa (raw, json) Hash identifier: NVHfWV3gvTuZJ9phjkWlccwkI+hXzh3d1f1cU7obR/8= Subject key identifier: 2B:F9:DE:8B:D5:E9:F9:7C:EB:77:BA:EC:0B:DC:FD:CB:0D:68:9A:3E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12BE31A34DEEA7733A780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/35fce67e-1ca8-39f2-8e85-058c8423c83a.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.217.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2b:e3:1a:34:de:ea:77:33:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=49e41fef-a9ab-4814-bbc8-2886bd0edfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:f9:12:ac:06:72:97:73:a8:69:35:b3:b5: 01:43:37:33:90:0c:23:4c:e3:03:44:b2:62:60:36: 60:02:93:82:2c:0c:1c:4b:e1:72:9f:5e:01:c7:8d: c5:c5:60:b4:73:37:79:79:20:48:99:93:fd:5f:fd: 28:de:c0:56:63:9f:ab:49:3b:2d:00:3c:dd:10:b8: 8f:79:48:bc:b7:2b:c1:1e:b7:56:f2:58:e1:08:da: 3b:9e:c0:d5:f4:83:63:3c:a3:46:16:b2:8f:57:63: 30:b4:94:41:87:b0:0e:02:ab:6f:9e:b2:83:98:27: 06:af:70:bd:28:9e:ae:33:5b:bc:02:bf:42:84:ea: e5:00:81:cc:12:bf:5b:bf:2f:fd:9a:87:e6:51:30: 3d:eb:5c:9d:dc:5a:41:a1:2d:e8:71:21:86:7c:75: be:b1:28:f6:1e:f5:43:8c:ea:ab:c3:a6:18:f9:49: fb:1a:11:e9:53:59:b3:08:2f:a3:82:07:5b:45:fb: 66:cd:9d:fb:33:6a:9b:8d:01:16:7c:f1:75:f1:00: 98:46:e8:69:e1:65:e7:ea:fb:6a:4a:80:ee:a0:28: f2:55:d5:bf:2f:42:28:84:07:da:ea:e8:ca:49:78: a7:9a:2e:6b:ae:30:5d:1c:26:40:4f:c0:26:bd:d2: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F9:DE:8B:D5:E9:F9:7C:EB:77:BA:EC:0B:DC:FD:CB:0D:68:9A:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/35fce67e-1ca8-39f2-8e85-058c8423c83a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f7:61:c9:55:a1:3b:d8:5a:40:e2:d3:ba:86:a4:ff:69:88: 19:c6:77:ec:97:75:9a:ff:17:6b:d0:53:6a:bb:7c:49:01:04: 69:b3:c9:e4:55:9b:39:7a:3c:21:75:06:33:eb:91:c0:7b:31: ab:63:b6:ad:d0:33:70:c5:6f:fb:7f:0f:38:a5:f2:2a:6c:4c: 44:60:d7:96:f1:b8:6f:5f:34:d7:f1:cc:11:16:59:65:b5:ac: 76:37:c2:c5:16:4b:50:ec:52:9b:85:4d:2d:09:33:1a:d6:3a: 49:ea:58:d4:53:7d:6a:1c:03:6a:56:4a:48:fe:2d:f8:1a:c8: 61:4e:21:9e:13:c3:02:69:ca:3b:cb:50:e1:b6:9d:08:6d:5f: 4a:2c:eb:5c:df:0f:82:c5:11:23:01:e0:85:54:97:3b:bd:0a: 02:65:92:fa:4b:37:f3:7d:8a:f3:0c:ab:41:f5:f7:c8:c1:b3: 42:93:a4:4c:98:5d:52:d1:1a:a0:3f:22:d2:0f:96:9f:a6:76: 14:2b:c1:04:00:a9:e0:21:ac:87:f8:82:40:8d:95:4b:c3:96: 65:e8:87:2f:0f:62:02:06:1e:73:c9:e6:af:a5:22:16:77:59: 8d:c6:34:57:43:20:53:aa:d4:4a:f5:79:09:c8:ba:57:1b:54: c2:d7:ef:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSvjGjTe6nczp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NDllNDFmZWYtYTlhYi00ODE0LWJiYzgtMjg4NmJkMGVkZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ35EqwGcpdzqGk1s7UBQzczkAwjTOMDRLJi YDZgApOCLAwcS+Fyn14Bx43FxWC0czd5eSBImZP9X/0o3sBWY5+rSTstADzdELiP eUi8tyvBHrdW8ljhCNo7nsDV9INjPKNGFrKPV2MwtJRBh7AOAqtvnrKDmCcGr3C9 KJ6uM1u8Ar9ChOrlAIHMEr9bvy/9mofmUTA961yd3FpBoS3ocSGGfHW+sSj2HvVD jOqrw6YY+Un7GhHpU1mzCC+jggdbRftmzZ37M2qbjQEWfPF18QCYRuhp4WXn6vtq SoDuoCjyVdW/L0IohAfa6ujKSXinmi5rrjBdHCZAT8AmvdIZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv53ovV6fl863e67Avc/csNaJo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzVmY2U2N2UtMWNhOC0z OWYyLThlODUtMDU4Yzg0MjNjODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX3YclVoTvYWkDi07qGpP9piBnGd+yXdZr/F2vQU2q7fEkBBGmzyeRV mzl6PCF1BjPrkcB7Matjtq3QM3DFb/t/Dzil8ipsTERg15bxuG9fNNfxzBEWWWW1 rHY3wsUWS1DsUpuFTS0JMxrWOknqWNRTfWocA2pWSkj+LfgayGFOIZ4TwwJpyjvL UOG2nQhtX0os61zfD4LFESMB4IVUlzu9CgJlkvpLN/N9ivMMq0H198jBs0KTpEyY XVLRGqA/ItIPlp+mdhQrwQQAqeAhrIf4gkCNlUvDlmXohy8PYgIGHnPJ5q+lIhZ3 WY3GNFdDIFOq1Er1eQnIulcbVMLX75s= -----END CERTIFICATE-----Generated at Fri Apr 4 08:26:14 2025 by rpki-client