$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa File: 52ab951c-a52a-33ca-832a-3433fe906f80.roa (raw, json) Hash identifier: xl0KNwc1J3y/baXkUT5cBn+9tbY4GRZZKMIb9hMA6ig= Subject key identifier: 08:C8:0C:35:0A:60:9C:FF:BA:81:D5:85:82:A1:10:38:6C:6F:23:AB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848B35B5D940666BADBFC092880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 15169 IP address blocks: 172.217.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:5d:94:06:66:ba:db:fc:09:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=bc61ef9e-94c9-4d7f-9f7f-e7b55011c62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9e:0d:11:3f:b8:0f:74:cc:74:a0:e7:6d:24: 6c:02:f3:c4:99:3f:6d:a9:77:8c:f3:7e:85:76:ab: 0b:8c:08:30:37:82:50:64:bc:0b:f9:a7:bc:8b:54: f9:31:1d:c2:5b:20:4b:11:e7:f0:e7:b9:4b:41:81: 2f:29:3d:dc:67:e6:23:70:2f:be:02:a3:98:e0:06: 00:fb:b5:67:7d:9f:13:fe:a0:78:d5:60:71:2d:a8: 0d:ca:b3:9c:ab:42:a0:b9:ae:01:bb:c7:cf:91:be: 71:4f:5a:2a:4c:a2:1b:12:63:7b:3d:e9:c3:7f:f8: e7:be:af:b0:ac:19:26:a1:47:22:ce:3d:f5:6e:c1: 0a:01:54:b2:9b:5f:22:2b:65:77:77:87:54:e4:e7: 64:06:a5:71:1b:5f:7f:94:c7:d9:c0:07:77:1b:2a: 1a:d3:a6:cf:e5:d9:b9:0d:dd:7e:60:db:47:fe:02: bc:dd:3b:04:25:a9:ff:3d:4d:fd:af:77:e0:57:fa: 80:12:f0:fa:e7:48:5a:80:3b:32:76:a1:e6:46:a9: 74:4b:40:82:99:36:24:8f:c7:39:b2:8d:b9:c4:5a: 6f:d5:ca:12:e9:6c:3b:27:6b:db:2f:57:ab:63:b9: de:10:4e:10:b2:5a:11:31:0f:c7:d0:8d:4f:68:25: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C8:0C:35:0A:60:9C:FF:BA:81:D5:85:82:A1:10:38:6C:6F:23:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:64:5b:70:84:ef:5f:14:df:26:27:22:51:c9:2a:ee:86:db: 9c:df:96:7c:61:38:ab:be:fc:8c:94:7e:ed:c3:5a:d5:56:92: af:9e:32:a8:ca:ed:c6:6a:d7:13:dd:74:d3:e8:c4:1e:a9:1a: fd:c9:64:33:30:f3:fb:21:3f:9d:28:f1:2d:43:e2:0b:a1:ba: 5c:4e:43:05:9f:d8:5d:8b:c9:0e:fa:75:af:e6:1b:f7:13:f2: df:bd:08:b3:70:75:f7:3d:1c:9a:81:6a:82:7e:e5:95:b9:6a: 42:d0:6e:37:25:24:2b:ec:53:7e:35:64:f1:66:c8:76:de:63: e4:14:75:df:36:7d:4c:ad:f1:fe:fd:3b:fa:11:cd:37:a4:fa: 10:cb:d2:bd:a9:c2:aa:b3:c4:8a:c1:7c:b0:cd:12:8f:bf:1b: d9:f9:45:52:05:d1:1d:64:53:fe:1d:16:74:3d:62:b2:2b:b7: cc:63:23:80:7c:8a:f4:d8:b3:9b:16:48:99:a0:6b:9e:23:3f: 19:ae:bb:9f:28:5a:34:98:1d:19:b8:3d:16:5b:5a:90:3e:e8: 36:bc:ea:a1:94:1a:57:c3:f8:b6:69:fa:ad:d4:e5:c3:6d:e2: cb:ea:47:38:53:3e:fc:d4:f8:e8:3f:ff:b2:2e:c4:43:2a:3d: 97:ba:2a:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW12UBma62/wJKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YmM2MWVmOWUtOTRjOS00ZDdmLTlmN2YtZTdiNTUwMTFjNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop4NET+4D3TMdKDnbSRsAvPEmT9tqXeM836F dqsLjAgwN4JQZLwL+ae8i1T5MR3CWyBLEefw57lLQYEvKT3cZ+YjcC++AqOY4AYA +7VnfZ8T/qB41WBxLagNyrOcq0Kgua4Bu8fPkb5xT1oqTKIbEmN7PenDf/jnvq+w rBkmoUcizj31bsEKAVSym18iK2V3d4dU5OdkBqVxG19/lMfZwAd3Gyoa06bP5dm5 Dd1+YNtH/gK83TsEJan/PU39r3fgV/qAEvD650hagDsydqHmRql0S0CCmTYkj8c5 so25xFpv1coS6Ww7J2vbL1erY7neEE4QsloRMQ/H0I1PaCX+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjIDDUKYJz/uoHVhYKhEDhsbyOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTJhYjk1MWMtYTUyYS0z M2NhLTgzMmEtMzQzM2ZlOTA2ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxkW3CE718U3yYnIlHJKu6G25zflnxhOKu+/IyUfu3DWtVWkq+eMqjK 7cZq1xPddNPoxB6pGv3JZDMw8/shP50o8S1D4guhulxOQwWf2F2LyQ76da/mG/cT 8t+9CLNwdfc9HJqBaoJ+5ZW5akLQbjclJCvsU341ZPFmyHbeY+QUdd82fUyt8f79 O/oRzTek+hDL0r2pwqqzxIrBfLDNEo+/G9n5RVIF0R1kU/4dFnQ9YrIrt8xjI4B8 ivTYs5sWSJmga54jPxmuu58oWjSYHRm4PRZbWpA+6Da86qGUGlfD+LZp+q3U5cNt 4svqRzhTPvzU+Og//7IuxEMqPZe6Kpw= -----END CERTIFICATE-----Generated at Fri Mar 14 11:28:57 2025 by rpki-client