$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa File: 3abee81f-b508-3c4e-9dc5-859969e3d79e.roa (raw, json) Hash identifier: QiwAFMEilVwbO7I4YidN8ATNdrdmCBIXs3IczoIXbW8= Subject key identifier: 37:44:F0:31:C0:9B:67:63:A0:24:04:69:9E:F6:34:DC:4F:26:3C:8F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58188F84EE1AE3141AB7AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:88:f8:4e:e1:ae:31:41:ab:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d352b748-8a2a-492e-bcc7-a4063d3650bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c4:eb:5d:a1:9f:8e:d4:a5:67:3a:b3:c8:cd: 57:3a:85:62:19:bb:8c:48:d9:4a:7f:cb:da:85:7a: 91:f0:77:b3:f3:3e:23:fe:72:d3:e4:d5:5b:92:ac: ca:bb:b3:fb:40:e5:1d:b9:48:44:da:9d:fc:71:0d: 4e:44:1b:2e:fa:f5:43:96:c2:ad:b1:30:34:8b:95: 13:d8:83:b6:de:41:84:39:20:68:a7:2c:32:78:12: 88:25:b2:70:8f:d2:08:1b:94:c5:70:c8:5a:05:d7: a3:df:16:6d:00:f5:fc:f8:29:e8:25:e0:cf:ca:4b: 00:f0:8d:0b:7a:08:17:82:2d:3f:d7:7d:52:36:0d: 76:49:f3:ba:50:65:4e:83:d1:75:9e:10:5e:0d:8f: 58:32:bf:48:27:99:e4:44:53:bd:ae:21:67:38:58: c3:2a:62:52:39:c5:a8:75:54:7f:1f:fb:3b:82:b4: 66:b2:33:11:3b:f2:85:33:2e:8f:b6:6d:e7:b6:5d: 58:1a:4c:fa:47:75:cb:ab:b9:65:5a:42:58:53:2f: fa:1a:5f:34:fd:9d:19:1d:10:8e:15:c2:6c:4f:2d: 05:18:53:60:df:a6:5d:3d:7b:e5:90:bc:3f:90:46: 64:8f:a9:aa:f2:06:11:c1:00:59:ca:8e:d3:8d:ba: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:44:F0:31:C0:9B:67:63:A0:24:04:69:9E:F6:34:DC:4F:26:3C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:06:41:72:37:b9:22:55:2a:86:92:42:bb:64:c6:58:1d:78: e2:db:08:b6:cf:8e:79:a9:58:71:8d:18:b5:6f:69:94:ec:b6: 61:19:11:63:db:b9:17:c9:e9:24:73:ca:be:a4:6d:a1:4b:ff: 27:eb:94:43:b9:c0:ca:de:d5:8b:58:64:31:63:04:a3:34:1a: 4f:91:9d:88:c3:5b:fa:d0:01:12:a5:66:28:02:c9:a4:24:31: 3e:19:7e:21:ff:d8:a9:ff:49:da:07:27:b8:b4:79:c5:29:82: c7:8a:a8:ff:8c:20:27:02:8c:6b:97:a2:60:a0:7c:4e:5c:bc: 19:21:b2:df:5b:a2:fa:45:fb:20:b2:30:c8:f0:6a:eb:6e:ac: b0:ab:18:47:49:cb:f4:fe:4f:4c:96:db:e5:24:a4:70:aa:af: e9:1b:1e:e2:8e:f2:41:3d:01:1e:28:85:c8:73:e6:16:38:c5: e4:56:65:93:d6:29:47:86:c0:b2:32:0a:31:5e:c7:35:33:f0: 74:bd:37:19:31:1f:3a:49:f0:33:9a:db:00:af:86:07:a0:ab: 2d:4d:04:e6:2b:2e:9a:3f:b2:0d:89:67:92:b8:a1:a8:d8:86: b8:30:98:d4:c0:d4:65:a3:25:0e:84:d8:81:5a:39:55:78:6c: e7:4b:62:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYj4TuGuMUGresAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDM1MmI3NDgtOGEyYS00OTJlLWJjYzctYTQwNjNkMzY1MGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisTrXaGfjtSlZzqzyM1XOoViGbuMSNlKf8va hXqR8Hez8z4j/nLT5NVbkqzKu7P7QOUduUhE2p38cQ1ORBsu+vVDlsKtsTA0i5UT 2IO23kGEOSBopywyeBKIJbJwj9IIG5TFcMhaBdej3xZtAPX8+CnoJeDPyksA8I0L eggXgi0/131SNg12SfO6UGVOg9F1nhBeDY9YMr9IJ5nkRFO9riFnOFjDKmJSOcWo dVR/H/s7grRmsjMRO/KFMy6Ptm3ntl1YGkz6R3XLq7llWkJYUy/6Gl80/Z0ZHRCO FcJsTy0FGFNg36ZdPXvlkLw/kEZkj6mq8gYRwQBZyo7Tjbp+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdE8DHAm2djoCQEaZ72NNxPJjyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FiZWU4MWYtYjUwOC0z YzRlLTlkYzUtODU5OTY5ZTNkNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8GQXI3uSJVKoaSQrtkxlgdeOLbCLbPjnmpWHGNGLVvaZTstmEZEWPb uRfJ6SRzyr6kbaFL/yfrlEO5wMre1YtYZDFjBKM0Gk+RnYjDW/rQARKlZigCyaQk MT4ZfiH/2Kn/SdoHJ7i0ecUpgseKqP+MICcCjGuXomCgfE5cvBkhst9bovpF+yCy MMjwauturLCrGEdJy/T+T0yW2+UkpHCqr+kbHuKO8kE9AR4ohchz5hY4xeRWZZPW KUeGwLIyCjFexzUz8HS9NxkxHzpJ8DOa2wCvhgegqy1NBOYrLpo/sg2JZ5K4oajY hrgwmNTA1GWjJQ6E2IFaOVV4bOdLYgM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:40 2025 by rpki-client