$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa File: 3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa (raw, json) Hash identifier: Wb9skzoq2LZ9EHLtnHqHGm2uLK76602JRthriOe/jPU= Subject key identifier: 6A:75:D2:D2:1C:69:1A:12:BE:02:D2:DD:D8:3D:2E:2D:A8:FD:80:B7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA123E0DB4C149E4684A680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.217.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:23:e0:db:4c:14:9e:46:84:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=f1804109-d623-4431-b64c-ffb457af6f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:aa:1f:f6:53:ed:ee:df:e9:5c:42:e2:92: b2:a0:8e:39:82:3c:33:9e:9b:2f:3e:40:ab:0f:0c: d1:1a:1d:b6:17:88:80:80:fa:2f:2b:ba:04:93:a0: 27:ee:e7:2c:dd:ee:23:47:54:07:73:7b:be:e8:4f: c2:09:36:3f:5e:6c:14:97:5b:95:d4:f1:9e:42:0a: 50:a6:a6:c4:b9:36:86:e3:83:84:c0:05:b7:07:b9: 35:ae:e5:81:3f:9a:e9:31:43:50:ff:46:30:57:44: 78:a7:60:9f:bd:93:4e:7e:f4:f0:06:73:f0:88:1c: 84:9d:09:e5:96:e4:4a:e9:79:63:95:14:74:d7:d3: a9:7a:b9:79:e7:a4:b8:54:91:6b:6f:1e:73:ef:f9: 11:da:08:05:5a:36:5d:b8:3f:c3:75:fc:32:ee:79: fb:e3:31:29:12:3c:1a:30:fe:0c:fe:fb:71:69:34: c0:99:62:3f:68:d7:b0:d8:4f:36:9f:fa:c8:ca:e1: 3e:2a:b7:da:17:ec:c3:00:33:e0:ea:bd:96:35:2a: fd:2a:7a:2d:a3:75:40:54:55:ff:13:8e:a5:3d:cf: c0:1f:12:1c:93:28:4a:b2:6f:13:b3:0b:1a:52:94: aa:25:03:c4:99:6e:f7:49:3e:0e:f1:6e:e5:71:55: c2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:75:D2:D2:1C:69:1A:12:BE:02:D2:DD:D8:3D:2E:2D:A8:FD:80:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:79:d8:52:8f:93:e0:e2:b9:dc:7d:d4:50:46:be:9b:6c:94: 82:bb:1a:f8:ae:79:cc:e2:c7:43:53:e2:7e:4e:5f:f7:78:e4: db:f1:9c:af:80:e2:19:9d:a6:ff:3b:69:22:2e:8a:4d:1b:7e: 9e:76:13:a5:1a:44:b1:ef:78:99:cb:49:0a:44:f8:3d:54:ff: 20:51:54:df:f5:c1:cf:b4:6b:dc:9b:c7:2f:81:ac:0d:ba:2c: 5b:4b:71:b4:24:23:6a:b0:bb:ca:6c:7c:41:70:9b:a5:9e:15: 80:8f:15:79:39:74:f0:92:74:22:4e:a3:11:69:01:56:f4:3b: 23:df:2f:92:22:15:58:28:7b:5b:a1:20:2b:7a:43:41:c7:12: cb:1c:bc:e1:c0:c9:7e:ea:99:2d:d6:54:38:88:cc:05:f2:88: c8:5a:95:f2:83:9e:9c:74:4c:63:fd:c5:c5:70:b0:85:4c:c7: 69:2f:61:56:4d:29:11:74:91:3d:a0:69:07:75:b9:79:72:5f: 94:6d:ab:24:e9:0a:b8:24:ad:81:d4:b8:08:fa:36:94:a6:6e: 44:27:f7:61:9a:f9:70:b9:7e:72:7a:a4:c9:fd:16:98:56:e6: 2c:9f:67:70:05:d9:f6:80:4b:84:21:4b:f7:cf:77:18:33:de: bb:6b:98:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSPg20wUnkaEpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZjE4MDQxMDktZDYyMy00NDMxLWI2NGMtZmZiNDU3YWY2Zjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmCqH/ZT7e7f6VxC4pKyoI45gjwznpsvPkCr DwzRGh22F4iAgPovK7oEk6An7ucs3e4jR1QHc3u+6E/CCTY/XmwUl1uV1PGeQgpQ pqbEuTaG44OEwAW3B7k1ruWBP5rpMUNQ/0YwV0R4p2CfvZNOfvTwBnPwiByEnQnl luRK6XljlRR019Operl556S4VJFrbx5z7/kR2ggFWjZduD/Ddfwy7nn74zEpEjwa MP4M/vtxaTTAmWI/aNew2E82n/rIyuE+KrfaF+zDADPg6r2WNSr9Knoto3VAVFX/ E46lPc/AHxIckyhKsm8TswsaUpSqJQPEmW73ST4O8W7lcVXChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGp10tIcaRoSvgLS3dg9Li2o/YC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2RkYTlmYTgtYjY5Yi0z Y2I0LTliZjEtNTJhZGY5OGYxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB52FKPk+Diudx91FBGvptslIK7Gviueczix0NT4n5OX/d45NvxnK+A 4hmdpv87aSIuik0bfp52E6UaRLHveJnLSQpE+D1U/yBRVN/1wc+0a9ybxy+BrA26 LFtLcbQkI2qwu8psfEFwm6WeFYCPFXk5dPCSdCJOoxFpAVb0OyPfL5IiFVgoe1uh ICt6Q0HHEsscvOHAyX7qmS3WVDiIzAXyiMhalfKDnpx0TGP9xcVwsIVMx2kvYVZN KRF0kT2gaQd1uXlyX5RtqyTpCrgkrYHUuAj6NpSmbkQn92Ga+XC5fnJ6pMn9FphW 5iyfZ3AF2faAS4QhS/fPdxgz3rtrmI8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:50 2025 by rpki-client