$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa File: 640ab488-921d-3ed3-a072-3005686e58b7.roa (raw, json) Hash identifier: qNajh14tYOXuagcw2y1/vv4KVjRS2Mg9TD+p/rmD2mU= Subject key identifier: 6E:E4:61:D8:03:BC:3E:69:62:22:AB:94:8C:99:4B:8A:3E:51:AC:50 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817EFF974707CA9CD88380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7e:ff:97:47:07:ca:9c:d8:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4dc8c36c-89f3-4e61-be5a-b898ff0fd25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:fc:1c:cb:cc:e8:f3:32:d8:a1:05:21:b8: 7e:8f:8b:60:f2:9e:3e:b4:2c:d6:e2:3b:7d:c3:19: 18:ea:2e:9b:04:31:2e:ab:92:ab:d5:53:35:d6:bd: f4:95:53:9b:f8:c2:75:90:61:90:a0:20:ba:90:f5: 3d:ec:7a:71:a7:2b:3c:4a:e1:a5:44:ef:eb:9d:4a: 82:a0:33:22:f5:25:3d:ea:c9:6b:2c:11:fd:69:bf: 49:25:b2:b4:6c:09:80:56:a9:95:64:9b:db:84:21: cf:be:86:b2:a1:8a:11:37:c0:d4:9b:e4:0b:2a:fa: 90:24:f0:43:ab:0f:0a:02:b4:b0:53:e3:52:0c:72: 09:7a:28:08:7a:26:60:43:29:fd:e0:ec:83:b6:24: 45:30:b1:38:80:aa:64:6c:fa:c1:c8:a6:4a:21:5c: 0d:8c:82:85:46:40:81:38:c6:01:f6:8a:9a:1a:85: fe:b3:f8:f3:c1:02:40:3b:3a:d1:42:99:3a:56:ac: 17:c3:e2:e0:7c:80:84:47:ab:42:99:cf:1c:ee:d7: 97:b8:15:71:cb:30:5f:d1:9b:45:70:21:fc:1a:6b: 65:92:be:82:69:13:b8:62:93:65:13:2d:88:5f:d8: ad:c1:6e:8d:8a:dc:2c:16:46:c3:40:9f:52:01:c8: ce:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E4:61:D8:03:BC:3E:69:62:22:AB:94:8C:99:4B:8A:3E:51:AC:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/640ab488-921d-3ed3-a072-3005686e58b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:02:18:2d:f8:90:23:15:70:c8:c6:f4:d7:c0:d9:e8:c1:42: b7:77:1a:61:e4:93:a2:d2:29:eb:12:1d:dc:db:71:87:c2:2d: 0e:d6:b6:06:12:e1:b2:5c:6c:ed:74:71:9b:09:b8:f1:6d:b7: 56:36:24:92:e6:33:e4:9e:fa:77:cc:b6:49:40:d3:7b:5f:cc: 6a:31:49:84:7b:02:39:ef:74:e9:9c:47:ff:3d:22:b5:fe:de: 1a:4e:a2:36:f2:66:ac:0c:04:b0:25:ae:3e:08:d4:35:a4:50: fe:8a:51:2d:3c:cf:eb:f4:f7:0a:ef:00:50:04:84:09:e4:ba: e0:80:c9:4f:da:3c:5f:94:f8:dd:bd:2d:73:5d:48:ff:74:24: fa:73:89:00:0e:e1:31:fa:43:30:e5:cd:fe:9c:60:18:e3:e8: 19:aa:b8:92:11:cb:98:de:45:ee:db:d2:54:87:41:b5:bf:07: 6b:e3:8c:e3:e5:53:f2:f9:08:7a:53:9e:b0:16:43:9c:fc:b0: 95:27:79:5f:3d:b9:f3:97:bb:6c:33:2d:97:a1:e1:bf:df:0e: 88:21:d5:06:be:48:68:1e:d1:f4:4b:c4:e6:6a:04:f4:7a:b3: 20:ac:23:9e:c4:e1:a3:5e:6c:ad:31:69:a8:be:92:10:97:e5: 40:4f:16:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX7/l0cHypzYg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NGRjOGMzNmMtODlmMy00ZTYxLWJlNWEtYjg5OGZmMGZkMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/P8HMvM6PMy2KEFIbh+j4tg8p4+tCzW4jt9 wxkY6i6bBDEuq5Kr1VM11r30lVOb+MJ1kGGQoCC6kPU97Hpxpys8SuGlRO/rnUqC oDMi9SU96slrLBH9ab9JJbK0bAmAVqmVZJvbhCHPvoayoYoRN8DUm+QLKvqQJPBD qw8KArSwU+NSDHIJeigIeiZgQyn94OyDtiRFMLE4gKpkbPrByKZKIVwNjIKFRkCB OMYB9oqaGoX+s/jzwQJAOzrRQpk6VqwXw+LgfICER6tCmc8c7teXuBVxyzBf0ZtF cCH8Gmtlkr6CaRO4YpNlEy2IX9itwW6NitwsFkbDQJ9SAcjOAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7kYdgDvD5pYiKrlIyZS4o+UaxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQwYWI0ODgtOTIxZC0z ZWQzLWEwNzItMzAwNTY4NmU1OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8CGC34kCMVcMjG9NfA2ejBQrd3GmHkk6LSKesSHdzbcYfCLQ7WtgYS 4bJcbO10cZsJuPFtt1Y2JJLmM+Se+nfMtklA03tfzGoxSYR7AjnvdOmcR/89IrX+ 3hpOojbyZqwMBLAlrj4I1DWkUP6KUS08z+v09wrvAFAEhAnkuuCAyU/aPF+U+N29 LXNdSP90JPpziQAO4TH6QzDlzf6cYBjj6BmquJIRy5jeRe7b0lSHQbW/B2vjjOPl U/L5CHpTnrAWQ5z8sJUneV89ufOXu2wzLZeh4b/fDogh1Qa+SGge0fRLxOZqBPR6 syCsI57E4aNebK0xaai+khCX5UBPFsc= -----END CERTIFICATE-----Generated at Fri Mar 14 11:15:05 2025 by rpki-client