$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa File: 452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa (raw, json) Hash identifier: /iSKq41ZmJxCXVLZKVUpfc2nrU+3ZJ6oVjMN3ezQ2fQ= Subject key identifier: 91:F0:C5:8E:BB:56:37:C1:A3:A0:6F:39:DF:76:83:02:DD:85:55:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582044D593343C41DBD08F0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:04:4d:59:33:43:c4:1d:bd:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2330a139-1ff2-4fe3-8e42-e250d295d6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:70:a0:60:e3:06:e9:a2:44:2a:6a:c2:45:8b: 2f:69:7d:9b:0d:84:cb:7a:f0:9c:37:9f:75:50:36: 8c:fe:2d:ea:97:cf:fc:82:dc:0b:85:1d:2f:9f:0e: ad:70:32:82:6d:4e:7d:bb:bb:23:1f:38:f9:4e:d8: ce:55:a3:74:a1:ee:91:ad:c0:ec:b0:04:c7:42:a0: de:d3:98:83:a2:dc:a2:a3:78:07:b1:ac:ca:4f:36: d3:41:2d:28:53:0c:a7:5f:1d:2c:28:fc:cf:fb:4c: d5:b2:1f:1f:3e:62:19:ab:98:f7:a8:c7:54:79:a9: f7:93:4d:39:de:1d:7e:53:c7:43:59:a5:1b:3e:3b: 01:0b:9a:6a:68:33:19:18:29:b7:8a:ce:ce:d3:d4: 6b:9a:c3:39:03:78:8a:4b:ef:10:21:47:b4:04:9b: 0d:2d:5e:4d:f0:a6:49:1b:cd:0b:c6:4c:07:7b:2d: 73:9d:49:79:99:9d:88:18:d3:89:12:d3:5d:a8:d8: f4:d7:39:8e:d6:46:26:50:fe:ab:62:3f:9f:bd:6f: 00:de:13:dd:a4:d8:e8:fb:23:ba:d5:dd:d8:f0:b7: a0:06:5b:71:3b:41:eb:5f:e0:fb:81:ee:a3:78:28: f7:44:38:e6:8f:ae:45:6e:1b:1e:6c:04:c8:7b:c9: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F0:C5:8E:BB:56:37:C1:A3:A0:6F:39:DF:76:83:02:DD:85:55:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:49:49:8c:01:65:ee:40:a1:f9:c3:11:ac:1f:3b:4e:03:e6: 06:78:84:a5:46:94:e4:b7:6d:08:dc:2b:32:2b:ee:c0:dc:72: 1a:df:e9:73:04:e1:a2:6a:5e:8a:37:af:84:6a:ee:03:d1:c7: e2:41:0b:46:b4:d7:95:38:78:61:95:c0:92:14:ce:52:27:e0: af:89:1d:a5:e3:5d:2b:40:c4:e6:e9:78:34:46:ce:b0:80:5e: 2d:65:1e:6d:67:f8:98:c5:f0:c4:b0:fa:f3:4e:75:4c:c5:12: e7:f7:0c:51:74:f9:3c:07:43:3f:05:8e:ca:db:97:2c:01:e6: 24:b8:5b:96:3b:e2:41:d0:84:16:be:56:1e:03:7e:e3:3e:1d: 63:12:86:77:55:7b:99:d2:c6:62:7a:47:65:94:e3:4e:14:9b: 74:e9:c3:81:2a:b6:e8:aa:f0:25:39:38:0b:1e:40:97:e1:6e: d3:03:c8:2c:f9:48:2a:a9:0d:e2:c0:17:aa:95:ed:7b:63:6e: ac:7d:12:df:d5:94:cb:f5:2b:04:34:f6:14:13:98:98:16:51: 02:be:11:78:dc:4d:d2:52:4b:d5:72:62:4d:b1:00:ef:10:68: 1b:ab:1e:7f:80:6e:e3:68:63:95:17:63:51:2c:b4:92:1c:d1: 67:45:7a:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggRNWTNDxB29CPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjMzMGExMzktMWZmMi00ZmUzLThlNDItZTI1MGQyOTVkNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnCgYOMG6aJEKmrCRYsvaX2bDYTLevCcN591 UDaM/i3ql8/8gtwLhR0vnw6tcDKCbU59u7sjHzj5TtjOVaN0oe6RrcDssATHQqDe 05iDotyio3gHsazKTzbTQS0oUwynXx0sKPzP+0zVsh8fPmIZq5j3qMdUean3k005 3h1+U8dDWaUbPjsBC5pqaDMZGCm3is7O09RrmsM5A3iKS+8QIUe0BJsNLV5N8KZJ G80LxkwHey1znUl5mZ2IGNOJEtNdqNj01zmO1kYmUP6rYj+fvW8A3hPdpNjo+yO6 1d3Y8LegBltxO0HrX+D7ge6jeCj3RDjmj65FbhsebATIe8k9UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHwxY67VjfBo6BvOd92gwLdhVVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDUyMDg1YjgtZGRmZS0z MzE2LWFjMmUtZjcyOWQ2ZTNmMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVJSYwBZe5AofnDEawfO04D5gZ4hKVGlOS3bQjcKzIr7sDcchrf6XME 4aJqXoo3r4Rq7gPRx+JBC0a015U4eGGVwJIUzlIn4K+JHaXjXStAxObpeDRGzrCA Xi1lHm1n+JjF8MSw+vNOdUzFEuf3DFF0+TwHQz8FjsrblywB5iS4W5Y74kHQhBa+ Vh4DfuM+HWMShndVe5nSxmJ6R2WU404Um3Tpw4Eqtuiq8CU5OAseQJfhbtMDyCz5 SCqpDeLAF6qV7Xtjbqx9Et/VlMv1KwQ09hQTmJgWUQK+EXjcTdJSS9VyYk2xAO8Q aBurHn+AbuNoY5UXY1EstJIc0WdFejo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:44 2025 by rpki-client