$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa File: 4a004332-dbeb-38d1-8166-bb9de0e699b7.roa (raw, json) Hash identifier: m7EdGDszXZfwLA2P65TeN737SEc+O7ChfRtnA+D8iYU= Subject key identifier: DF:FF:A4:B7:FF:98:CA:20:98:D5:22:58:62:6B:AE:04:B8:D8:50:33 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E7085DA8BC3D52C61585600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 172.217.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:85:da:8b:c3:d5:2c:61:58:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=768c3fa2-e7c5-4c78-8c25-6023f1718a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:ce:3e:84:71:57:ac:34:21:ad:ff:98:f0: a3:68:bc:98:3c:49:95:18:d7:c4:c4:76:49:13:a7: f5:29:84:28:98:18:c4:2b:b0:90:6a:ba:ca:a1:06: 0d:9b:55:93:1e:62:7a:12:33:cc:0a:d4:10:af:71: ef:57:ea:d5:02:02:c1:fe:c4:b9:1f:46:f9:95:4f: 59:b3:b2:95:bc:45:8f:c4:e7:82:6e:a3:3c:0b:28: b2:19:39:4a:f2:22:ef:0e:6c:a1:03:a1:b9:f8:dc: d7:83:6a:16:91:96:e0:ed:02:6d:46:84:39:d1:14: 78:c3:3c:91:35:d9:9d:89:b2:40:37:c9:4f:a3:e5: bb:c3:ff:39:57:b6:94:15:1a:50:b5:ea:ed:7f:50: 8d:73:85:e2:64:18:76:c9:a1:63:f8:a7:a8:af:85: 39:88:85:f4:cd:35:03:d4:09:bc:2a:9b:72:07:12: 09:22:d7:99:db:da:04:23:73:58:f4:e9:f6:74:59: fb:b8:0d:5c:49:8f:76:87:60:4a:b6:1f:e0:70:d9: ba:74:e3:37:8d:16:fe:5e:a3:1d:4b:32:9e:b1:5c: 12:b1:46:52:45:5c:99:35:30:16:58:41:33:8c:cb: 8a:99:fb:d9:71:6c:5c:24:86:23:ee:0c:d2:86:76: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FF:A4:B7:FF:98:CA:20:98:D5:22:58:62:6B:AE:04:B8:D8:50:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:71:25:97:21:42:a7:09:29:5d:4d:4f:d5:8f:30:39:14:e4: 16:62:a5:8f:e6:0b:37:a1:98:f2:54:fb:43:7c:2d:bc:e5:db: 46:d4:e6:4c:0a:14:bf:d3:c0:8b:93:0d:d5:cc:3e:f6:5d:34: bc:95:c3:ba:37:34:7a:b9:12:10:8a:cd:09:b3:5d:f8:bb:42: f4:d2:ca:e7:3a:72:3a:c0:ea:36:70:1c:4b:ac:98:13:4b:d2: 02:24:c3:6d:4e:ce:89:ad:39:ae:00:d7:9e:16:2e:89:86:ef: 86:72:95:87:c1:f2:c5:cf:4e:7f:3e:c1:97:e8:44:ce:92:4e: 10:d5:0a:ba:1e:13:41:b7:93:61:3a:4a:cc:42:d7:f4:84:d1: f0:01:86:48:b8:c6:b6:03:7b:0b:43:79:1a:b8:54:fb:79:e9: 80:9a:8f:8a:37:58:70:f2:c9:cf:3a:c4:09:a8:b4:0e:b5:ed: a7:cf:ef:63:07:0f:db:d7:bd:c1:d4:3d:17:4a:a2:2f:4e:75: 0f:11:98:9a:f4:e5:fe:64:4d:a5:63:ed:b5:10:12:05:e3:cd: b2:53:c1:fc:3e:7d:c7:d7:2a:f6:2b:e4:cc:44:86:ae:05:7a: de:3b:f4:6b:21:f6:6e:d8:0f:cb:92:db:0d:50:7d:f1:1b:7a: 3a:ad:00:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecIXai8PVLGFYVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk NzY4YzNmYTItZTdjNS00Yzc4LThjMjUtNjAyM2YxNzE4YTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N3OPoRxV6w0Ia3/mPCjaLyYPEmVGNfExHZJ E6f1KYQomBjEK7CQarrKoQYNm1WTHmJ6EjPMCtQQr3HvV+rVAgLB/sS5H0b5lU9Z s7KVvEWPxOeCbqM8CyiyGTlK8iLvDmyhA6G5+NzXg2oWkZbg7QJtRoQ50RR4wzyR NdmdibJAN8lPo+W7w/85V7aUFRpQtertf1CNc4XiZBh2yaFj+Keor4U5iIX0zTUD 1Am8KptyBxIJIteZ29oEI3NY9On2dFn7uA1cSY92h2BKth/gcNm6dOM3jRb+XqMd SzKesVwSsUZSRVyZNTAWWEEzjMuKmfvZcWxcJIYj7gzShnaLPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN//pLf/mMogmNUiWGJrrgS42FAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGEwMDQzMzItZGJlYi0z OGQxLTgxNjYtYmI5ZGUwZTY5OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANxJZchQqcJKV1NT9WPMDkU5BZipY/mCzehmPJU+0N8Lbzl20bU5kwK FL/TwIuTDdXMPvZdNLyVw7o3NHq5EhCKzQmzXfi7QvTSyuc6cjrA6jZwHEusmBNL 0gIkw21OzomtOa4A154WLomG74ZylYfB8sXPTn8+wZfoRM6SThDVCroeE0G3k2E6 SsxC1/SE0fABhki4xrYDewtDeRq4VPt56YCaj4o3WHDyyc86xAmotA617afP72MH D9vXvcHUPRdKoi9OdQ8RmJr05f5kTaVj7bUQEgXjzbJTwfw+fcfXKvYr5MxEhq4F et479Gsh9m7YD8uS2w1QffEbejqtAPo= -----END CERTIFICATE-----Generated at Sat Sep 7 23:18:47 2024 by rpki-client on console-fra.rpki-client.org