$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa File: 65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa (raw, json) Hash identifier: cHc3gMgeEa2BqOJSa+b/96KzengZsh+j8Ud+RRcES3U= Subject key identifier: 36:72:A6:6A:20:86:95:EB:D4:39:85:7A:81:56:38:3B:CE:DF:60:ED Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58175BA4298EF39E1936680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:75:ba:42:98:ef:39:e1:93:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=656e0df0-b2a6-4f8a-ba44-566ce5c458b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:69:87:cc:ea:04:81:5c:19:a2:22:dc:e3:11: 5f:4b:0c:a6:75:b2:f9:22:71:64:07:16:d7:bd:ea: 09:32:53:70:1d:58:0d:9a:93:a1:ad:a9:0c:aa:7d: 9a:d0:d4:e3:62:ac:c9:01:74:1a:0f:c4:1a:05:6c: 46:6a:32:88:a1:66:7b:af:83:0f:35:50:8a:aa:51: fa:70:9b:67:ae:cc:0e:b6:48:0b:a1:13:a9:65:f4: 03:67:17:52:d5:8e:b5:3b:6c:fe:02:ac:b4:89:62: 38:0e:d0:6d:59:51:de:6b:f6:b1:8d:3f:fd:1e:1a: 16:06:38:d2:52:00:d3:56:ff:65:86:ae:9a:4a:61: 5e:56:fe:8a:62:22:b0:8b:30:ac:bc:05:d8:5c:d3: 82:5a:dd:4a:c0:07:ee:36:48:da:17:bf:15:33:49: 90:e5:a6:f9:ee:f9:0e:68:2d:5d:b7:b0:6a:c0:fc: d9:6f:dc:b3:72:84:65:14:b4:bf:e8:70:fb:0f:45: 3b:30:fe:27:a7:07:5b:55:b8:62:91:9c:1c:b6:8c: 70:e0:71:02:64:11:bb:f3:63:2d:ba:0a:5a:d5:80: bf:77:7f:51:3a:9d:1c:52:8d:65:8f:88:63:f3:be: 39:99:59:28:de:f6:79:bd:c3:75:5c:7c:9f:25:f7: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:72:A6:6A:20:86:95:EB:D4:39:85:7A:81:56:38:3B:CE:DF:60:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d5:c0:f1:3d:8c:b6:80:d8:03:f9:7e:1d:19:10:07:ee:57: c0:12:77:49:c3:92:1f:66:e8:b5:64:a2:fb:db:af:a6:a2:6c: 83:4b:2d:ab:03:5f:cf:1d:34:de:f2:c7:51:af:4e:16:ea:8a: c1:c8:33:f5:56:8d:94:4f:e3:b0:30:dc:37:3d:91:a4:e0:a3: 4f:54:8d:74:30:b7:18:da:6f:10:6b:40:6f:7a:83:01:e9:39: fa:fa:54:23:aa:44:c9:dc:7f:9b:e5:20:24:93:c0:8f:5a:1d: 8c:34:c5:c4:a1:98:0a:c8:eb:bb:a3:12:0f:a6:a3:6a:2f:4d: 02:95:55:16:c4:ea:d5:5d:a8:25:03:fd:42:bc:ec:c1:e2:01: ea:07:d3:e9:f7:d9:21:b9:55:8c:ce:c3:9b:82:f6:ea:7b:59: 1d:76:8c:c1:fa:d3:53:38:e5:bc:4d:df:af:d4:49:24:dc:37: 9a:1f:d8:59:56:6a:8b:9d:21:82:0e:41:9b:60:53:27:65:21: d0:df:0a:55:47:af:85:9e:0a:95:ec:fa:ab:d8:bf:03:b4:f6: 12:b0:29:d6:6b:28:eb:7e:78:1f:24:c2:81:c8:14:f3:67:7e: c4:9f:67:ef:74:b4:61:8e:6d:03:14:f9:ff:1c:60:85:c6:89: 89:fa:61:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXW6QpjvOeGTZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjU2ZTBkZjAtYjJhNi00ZjhhLWJhNDQtNTY2Y2U1YzQ1OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52mHzOoEgVwZoiLc4xFfSwymdbL5InFkBxbX veoJMlNwHVgNmpOhrakMqn2a0NTjYqzJAXQaD8QaBWxGajKIoWZ7r4MPNVCKqlH6 cJtnrswOtkgLoROpZfQDZxdS1Y61O2z+Aqy0iWI4DtBtWVHea/axjT/9HhoWBjjS UgDTVv9lhq6aSmFeVv6KYiKwizCsvAXYXNOCWt1KwAfuNkjaF78VM0mQ5ab57vkO aC1dt7BqwPzZb9yzcoRlFLS/6HD7D0U7MP4npwdbVbhikZwctoxw4HECZBG782Mt ugpa1YC/d39ROp0cUo1lj4hj8745mVko3vZ5vcN1XHyfJfdJRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZypmoghpXr1DmFeoFWODvO32DtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjVhNmU1YmEtYzA1NC0z YTA0LThjM2YtMmQ0ZGUxMWU5NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjVwPE9jLaA2AP5fh0ZEAfuV8ASd0nDkh9m6LVkovvbr6aibINLLasD X88dNN7yx1GvThbqisHIM/VWjZRP47Aw3Dc9kaTgo09UjXQwtxjabxBrQG96gwHp Ofr6VCOqRMncf5vlICSTwI9aHYw0xcShmArI67ujEg+mo2ovTQKVVRbE6tVdqCUD /UK87MHiAeoH0+n32SG5VYzOw5uC9up7WR12jMH601M45bxN36/USSTcN5of2FlW aoudIYIOQZtgUydlIdDfClVHr4WeCpXs+qvYvwO09hKwKdZrKOt+eB8kwoHIFPNn fsSfZ+90tGGObQMU+f8cYIXGiYn6YcI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:15 2025 by rpki-client