$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a2bdc4-401d-3385-a004-a6db5099550f.roa File: 56a2bdc4-401d-3385-a004-a6db5099550f.roa (raw, json) Hash identifier: ScXzWp9y1JSG1aP2DUcJli0CdSqxDTeb+OKrQ0nCDFQ= Subject key identifier: 32:6D:EC:2A:7D:FF:9A:C0:D5:65:F3:2D:09:D7:70:A0:FC:C5:44:7C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58219E1E75C9568F3921080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a2bdc4-401d-3385-a004-a6db5099550f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:19:e1:e7:5c:95:68:f3:92:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=62f7b246-a2a6-40af-a799-5d98a9d5c4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:71:71:4a:8d:52:fb:16:b9:7c:1e:e2:2e:4b: 6c:46:b1:60:79:ea:19:31:00:68:5b:cf:d6:0a:6e: 24:2a:1a:94:76:2f:5c:10:54:3b:c3:59:25:99:ad: 64:1d:cd:91:1c:69:0e:4f:9c:7c:d8:8d:1f:aa:47: 9b:fc:d8:cb:f9:32:24:8e:d5:de:f8:b9:9a:54:eb: 0e:02:a7:e0:24:cf:ea:89:d3:d9:79:8e:87:37:c9: ef:e8:67:d2:54:66:c8:34:7e:52:66:9e:b7:88:e3: b3:ca:ba:df:0e:c1:3d:d1:be:47:79:45:e7:98:a9: 73:d3:01:47:78:26:ac:da:a9:89:c9:1f:c0:0b:e3: d8:1a:88:d2:a5:fb:d1:4c:67:67:95:6f:4c:3d:33: a5:8a:d0:2f:af:a8:52:55:56:d3:40:c5:f2:c2:0c: d9:88:9d:da:1a:f2:b9:4e:2e:ea:55:25:d1:4f:88: 21:d3:92:29:51:d8:35:79:dc:7f:0c:68:08:f2:37: 10:dc:50:a2:0c:ba:2e:f0:a3:13:0c:ba:65:9f:85: ba:96:90:b5:7a:15:52:97:ca:49:ce:e7:ef:f2:86: e2:f8:13:a5:11:33:b3:40:f1:db:c4:27:28:50:0f: ee:76:79:74:fe:48:55:ad:45:0a:d9:18:4f:12:c2: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6D:EC:2A:7D:FF:9A:C0:D5:65:F3:2D:09:D7:70:A0:FC:C5:44:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a2bdc4-401d-3385-a004-a6db5099550f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e9:e3:ef:05:58:09:e9:ad:2e:78:2c:2b:25:3b:4a:24:d4: 8c:d8:3b:c2:6c:83:9a:41:f8:a3:17:fd:74:2b:b5:7a:bd:f6: a0:06:39:4a:f2:71:75:80:56:d4:b7:15:ae:b3:f4:95:11:16: 6a:b6:34:89:c6:08:9a:63:07:99:7a:60:99:d3:27:c4:2b:b1: a4:31:31:82:84:ec:21:44:8d:48:be:f4:25:c0:90:eb:b1:99: 62:8d:ab:fc:ff:fb:b7:46:7f:ad:d1:1f:30:33:ac:6a:ff:a5: bd:7e:22:b6:58:03:91:00:82:a0:2d:a4:51:15:85:74:57:39: 02:9f:39:65:50:b5:6e:8f:0b:37:88:c7:e7:11:70:60:2e:0a: fd:b4:c7:13:de:3d:f8:dc:7d:b5:b1:c2:4b:f7:ce:bf:8a:03: 3b:d9:a8:76:a6:96:2f:bd:6c:e3:25:dd:89:c0:1b:1d:80:08: 21:93:f5:aa:f0:05:87:1a:1f:f7:92:c9:a0:5b:b9:a7:18:7b: 3a:76:77:b2:8b:5c:13:06:9d:82:e6:51:0f:17:a3:2b:cf:d0: 81:1a:34:01:76:3f:8c:84:c3:a2:db:a6:42:92:fa:eb:1e:d7: 2c:26:ca:5b:ab:5e:4b:5b:95:9e:47:6b:28:54:e9:07:b7:73: 5e:dc:20:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghnh51yVaPOSEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjJmN2IyNDYtYTJhNi00MGFmLWE3OTktNWQ5OGE5ZDVjNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3FxSo1S+xa5fB7iLktsRrFgeeoZMQBoW8/W Cm4kKhqUdi9cEFQ7w1klma1kHc2RHGkOT5x82I0fqkeb/NjL+TIkjtXe+LmaVOsO AqfgJM/qidPZeY6HN8nv6GfSVGbINH5SZp63iOOzyrrfDsE90b5HeUXnmKlz0wFH eCas2qmJyR/AC+PYGojSpfvRTGdnlW9MPTOlitAvr6hSVVbTQMXywgzZiJ3aGvK5 Ti7qVSXRT4gh05IpUdg1edx/DGgI8jcQ3FCiDLou8KMTDLpln4W6lpC1ehVSl8pJ zufv8obi+BOlETOzQPHbxCcoUA/udnl0/khVrUUK2RhPEsKSmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJt7Cp9/5rA1WXzLQnXcKD8xUR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTZhMmJkYzQtNDAxZC0z Mzg1LWEwMDQtYTZkYjUwOTk1NTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETp4+8FWAnprS54LCslO0ok1IzYO8Jsg5pB+KMX/XQrtXq99qAGOUry cXWAVtS3Fa6z9JURFmq2NInGCJpjB5l6YJnTJ8QrsaQxMYKE7CFEjUi+9CXAkOux mWKNq/z/+7dGf63RHzAzrGr/pb1+IrZYA5EAgqAtpFEVhXRXOQKfOWVQtW6PCzeI x+cRcGAuCv20xxPePfjcfbWxwkv3zr+KAzvZqHamli+9bOMl3YnAGx2ACCGT9arw BYcaH/eSyaBbuacYezp2d7KLXBMGnYLmUQ8XoyvP0IEaNAF2P4yEw6LbpkKS+use 1ywmylurXktblZ5HayhU6Qe3c17cIHw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:19 2025 by rpki-client