$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa File: 63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa (raw, json) Hash identifier: 4ziSDUoaG7FAvRIIT/hXvBUr9O+pY+UhMJBc82Nrb7Q= Subject key identifier: 39:A4:59:03:AF:BC:26:6C:42:28:73:02:6A:E0:D6:E5:B5:0D:B9:C1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B359464ABF6106C727B40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.217.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:35:94:64:ab:f6:10:6c:72:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=d98286a4-e403-4266-b378-0e4007ee35d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:63:82:68:e1:5d:30:09:ea:2b:53:e3:24: 7a:d1:89:5e:05:7c:e8:3a:69:67:68:07:e3:fc:85: ae:56:05:7d:c2:8d:3d:ff:81:ac:7d:23:20:c9:6e: 35:7c:dd:7b:f6:32:32:d2:6e:f3:01:e1:4d:3e:d0: ef:ad:ea:b7:31:09:b9:d5:f1:ef:6c:89:e6:92:ed: 3f:6f:ef:82:2f:f1:ed:ac:7f:92:5c:24:09:62:77: e0:4e:3e:3d:c0:f8:4a:cf:85:d4:e4:07:16:c7:89: 72:66:5c:1b:fd:80:9e:6f:7d:83:94:61:57:f8:10: 48:b1:98:a8:c5:fa:90:1b:d9:32:5c:f6:f4:fe:41: be:fa:5b:a2:6c:54:f2:4f:ad:6c:b1:60:c1:c4:5a: b7:20:67:2c:63:34:57:71:76:a0:63:ab:a9:f9:44: 66:6c:79:e0:a7:bf:f5:a2:d2:7f:78:7c:29:ee:16: 5d:7d:84:da:66:c7:2b:3c:fb:e2:70:59:c1:74:73: d6:c1:b5:57:1e:4b:b8:05:10:d6:a4:8a:e4:46:dc: ca:fc:ce:1c:16:12:5c:85:dd:5e:11:af:b9:f7:68: 2f:28:c1:59:67:71:3b:d3:cf:9d:3b:98:0f:dc:ad: fa:43:d7:eb:c5:95:26:08:24:14:1c:e3:e5:3e:77: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A4:59:03:AF:BC:26:6C:42:28:73:02:6A:E0:D6:E5:B5:0D:B9:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:42:54:3c:57:8d:19:c1:74:c8:75:f8:f1:f6:81:e9:41:f6: 17:7b:3b:b1:3e:b9:78:7a:f4:fd:70:4b:b1:78:23:20:91:4e: d9:d5:c7:f6:4a:ec:af:b2:dd:71:34:b8:cd:a1:d2:eb:10:58: c3:5b:8c:e1:78:1f:ef:ba:c8:22:97:c8:d0:4a:95:29:83:e0: ea:ad:c7:00:67:f1:74:d6:ee:a1:78:5b:be:a9:5f:4b:5f:73: 05:55:9d:13:b5:07:3d:7b:2b:e5:a9:85:c4:93:e1:3c:53:96: 08:36:d9:bc:4f:6b:72:73:0f:fa:70:4e:8c:6e:47:5a:90:07: 4f:8d:b6:e4:b2:d8:65:59:1e:05:66:fd:bf:21:ca:27:bc:ee: 9d:f9:3d:e3:e6:fa:0a:bf:9b:51:57:ba:19:01:1d:8e:f2:38: 5b:b5:4e:87:00:48:35:99:08:2e:c5:fc:d2:62:2a:50:74:bb: 87:03:01:7c:60:32:f5:b8:c0:07:40:b8:72:c8:00:bf:ae:b5: fe:b9:83:c3:f1:6b:f0:a6:85:b7:9e:2c:32:20:87:17:ed:c0: 21:93:d4:2c:21:d3:59:0a:93:43:55:8a:8b:7e:df:a6:25:54: 50:9e:f5:79:6f:96:c4:0a:c4:2a:b7:f4:99:c2:14:69:53:fb: 88:2e:9b:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzWUZKv2EGxye0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDk4Mjg2YTQtZTQwMy00MjY2LWIzNzgtMGU0MDA3ZWUzNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwFjgmjhXTAJ6itT4yR60YleBXzoOmlnaAfj /IWuVgV9wo09/4GsfSMgyW41fN179jIy0m7zAeFNPtDvreq3MQm51fHvbInmku0/ b++CL/HtrH+SXCQJYnfgTj49wPhKz4XU5AcWx4lyZlwb/YCeb32DlGFX+BBIsZio xfqQG9kyXPb0/kG++luibFTyT61ssWDBxFq3IGcsYzRXcXagY6up+URmbHngp7/1 otJ/eHwp7hZdfYTaZscrPPvicFnBdHPWwbVXHku4BRDWpIrkRtzK/M4cFhJchd1e Ea+592gvKMFZZ3E708+dO5gP3K36Q9frxZUmCCQUHOPlPnd7qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmkWQOvvCZsQihzAmrg1uW1DbnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjNlNWM1YzktOTNmZS0z NzY1LTlhY2QtOGZlMGI3NjdiNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpCVDxXjRnBdMh1+PH2gelB9hd7O7E+uXh69P1wS7F4IyCRTtnVx/ZK 7K+y3XE0uM2h0usQWMNbjOF4H++6yCKXyNBKlSmD4OqtxwBn8XTW7qF4W76pX0tf cwVVnRO1Bz17K+WphcST4TxTlgg22bxPa3JzD/pwToxuR1qQB0+NtuSy2GVZHgVm /b8hyie87p35PePm+gq/m1FXuhkBHY7yOFu1TocASDWZCC7F/NJiKlB0u4cDAXxg MvW4wAdAuHLIAL+utf65g8Pxa/CmhbeeLDIghxftwCGT1Cwh01kKk0NViot+36Yl VFCe9XlvlsQKxCq39JnCFGlT+4gum78= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:13 2024 by rpki-client on console-fra.rpki-client.org