$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa File: 3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa (raw, json) Hash identifier: tdFTU1qqQ5Rn/p3f8SFnNYa2qBTFw0aOLrdrQ/M5qyY= Subject key identifier: 7D:AC:0C:E2:36:4A:13:D3:7F:D4:25:D6:78:8D:54:38:2C:C8:46:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581738790BD234416BACB00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:73:87:90:bd:23:44:16:ba:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=113fea55-def5-451b-8cc1-b6877937b04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:e7:13:7f:bc:c1:61:67:3b:14:19:a3:61: 57:a6:8a:3c:13:24:d7:b1:56:86:30:48:e7:00:91: 2a:48:f0:59:b8:33:38:42:8c:65:8f:59:84:9a:35: 27:06:a9:4b:80:19:7c:b0:ea:36:fc:30:ca:fb:df: 1e:4f:6d:67:c4:ba:79:40:83:24:c1:4d:9b:a0:81: 03:ce:fc:bb:45:87:f1:76:9f:e1:d6:0b:81:fc:1b: 90:6c:5e:4c:cf:dc:80:9e:2b:c1:4a:1f:ce:ef:ac: 9a:26:00:10:ce:29:2b:0e:a1:ed:82:11:54:07:b5: 90:5c:37:e6:3d:c5:6e:40:f5:4e:27:1a:39:14:63: e3:c0:68:be:d3:e7:5c:75:78:db:3c:e3:4c:02:3f: cb:e4:ca:3e:b5:f2:fb:02:50:c4:2d:4b:4a:76:ce: f3:44:32:cb:50:da:07:8d:16:12:18:f8:6f:f7:89: ec:98:80:68:31:6f:39:ee:bb:18:86:96:d4:7e:79: fd:9a:c5:ba:33:f7:de:63:a5:fc:a2:63:77:1e:44: 22:60:ee:23:d5:31:94:4d:47:8c:6f:1f:69:b5:cf: 84:a4:c3:74:9c:69:de:43:90:40:41:64:62:56:bf: 2d:09:ad:e9:e7:80:25:6a:02:32:74:a5:8c:af:fe: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AC:0C:E2:36:4A:13:D3:7F:D4:25:D6:78:8D:54:38:2C:C8:46:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:fa:5f:97:1d:3a:f4:b2:55:c2:d8:4a:8d:e4:87:04:14:00: 27:14:7e:a0:4f:03:28:a4:be:99:ef:96:09:7d:d6:57:95:61: 2a:56:1a:d8:01:7a:6a:9c:f8:b3:d8:b7:79:f6:33:da:9c:9f: 6c:d0:2e:c0:bf:20:ea:4c:4f:cd:aa:67:f3:73:3e:06:82:1c: 2f:c2:25:c8:49:4e:79:f9:61:00:7e:0e:2f:b7:6f:0c:e2:63: fd:52:ce:9d:e0:a0:59:13:54:24:f0:39:e0:4f:7d:fe:0b:9f: 13:ac:67:69:18:2e:d1:2a:67:3c:be:c6:66:77:71:31:ea:03: 5e:fb:7b:9f:a9:19:f8:4c:44:dc:04:a2:3f:9e:f0:9f:45:16: e8:ce:e1:e8:74:c2:9d:64:31:67:d0:15:2d:f6:e4:03:98:d7: e3:12:75:46:da:de:8c:78:08:93:42:f6:5d:f1:2b:f2:7c:e6: ba:0b:cf:2d:f7:cf:d5:08:8a:e2:aa:6d:3b:f7:da:a5:bb:bf: 3e:a4:f7:d9:4b:88:be:de:a5:df:6b:44:d8:d8:29:6e:60:34: 19:67:37:8b:98:f1:b9:b6:ee:6d:22:3a:5d:8b:7c:d8:7d:d1: e1:b6:8c:87:e2:a9:cb:0e:9f:dd:50:90:31:7e:40:0f:d2:c3: e5:34:d8:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXOHkL0jRBa6ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTEzZmVhNTUtZGVmNS00NTFiLThjYzEtYjY4Nzc5MzdiMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul/nE3+8wWFnOxQZo2FXpoo8EyTXsVaGMEjn AJEqSPBZuDM4Qoxlj1mEmjUnBqlLgBl8sOo2/DDK+98eT21nxLp5QIMkwU2boIED zvy7RYfxdp/h1guB/BuQbF5Mz9yAnivBSh/O76yaJgAQzikrDqHtghFUB7WQXDfm PcVuQPVOJxo5FGPjwGi+0+dcdXjbPONMAj/L5Mo+tfL7AlDELUtKds7zRDLLUNoH jRYSGPhv94nsmIBoMW857rsYhpbUfnn9msW6M/feY6X8omN3HkQiYO4j1TGUTUeM bx9ptc+EpMN0nGneQ5BAQWRiVr8tCa3p54AlagIydKWMr/7NxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2sDOI2ShPTf9Ql1niNVDgsyEaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzY2MmZhNTEtNzUxZi0z ZGMxLWIxYzEtYjlmZGFiOGYyNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH6X5cdOvSyVcLYSo3khwQUACcUfqBPAyikvpnvlgl91leVYSpWGtgB emqc+LPYt3n2M9qcn2zQLsC/IOpMT82qZ/NzPgaCHC/CJchJTnn5YQB+Di+3bwzi Y/1Szp3goFkTVCTwOeBPff4LnxOsZ2kYLtEqZzy+xmZ3cTHqA177e5+pGfhMRNwE oj+e8J9FFujO4eh0wp1kMWfQFS325AOY1+MSdUba3ox4CJNC9l3xK/J85roLzy33 z9UIiuKqbTv32qW7vz6k99lLiL7epd9rRNjYKW5gNBlnN4uY8bm27m0iOl2LfNh9 0eG2jIfiqcsOn91QkDF+QA/Sw+U02Gc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:19 2025 by rpki-client