$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa File: 661fdda3-d9b9-336b-868c-5694c1d1cfea.roa (raw, json) Hash identifier: ixuqJ/dWHQPQBb2xvNfsktA7k1Jd7C3WY0SEoCzTDT0= Subject key identifier: 92:77:47:81:9B:DE:C4:FB:D3:70:4F:19:BA:21:B0:F7:42:DC:09:5D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58187BD56142944247180A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:87:bd:56:14:29:44:24:71:80:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=90c410c4-dd26-4ac6-87dd-cc20e6bebf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:e8:19:e0:b3:ea:05:d9:6f:14:ba:94:dd: 3a:40:65:18:50:a6:83:b0:d8:ab:18:76:11:69:c0: 85:55:17:c1:9a:5c:76:14:ed:a4:ad:d6:b7:74:8c: 94:e1:71:33:b5:e8:37:46:79:6b:9a:ce:69:16:da: 0c:25:03:c0:94:46:7c:a2:fc:91:2e:c4:9a:b7:3b: 2e:66:60:fd:75:7f:97:bf:62:9f:93:c4:81:16:6c: 54:e5:eb:5c:7d:f3:b3:f2:15:90:7f:1c:d3:3a:8a: 98:b8:01:65:bf:79:6e:bb:58:da:a7:9f:70:91:f0: cc:fd:d8:69:e8:60:76:12:46:dd:9c:73:78:27:84: 4b:87:ad:0c:c7:09:a0:3d:ec:0a:7f:63:b3:df:9c: fe:e5:1d:54:f2:68:ce:c4:1a:40:eb:3d:9d:9a:84: 4d:d0:ee:2b:46:0d:1a:0c:4e:4c:c0:61:7c:cc:bf: d0:35:eb:0b:1a:9f:d2:9a:3b:36:50:30:83:d8:5a: 1b:c5:40:5a:19:88:66:42:d0:24:c0:30:f1:86:34: 62:50:50:27:1e:03:46:1b:27:a1:92:ee:0c:0b:96: 00:b3:af:6c:90:e7:34:16:e8:b9:8f:10:01:49:3c: 03:2b:4a:ef:5f:d6:1f:e5:6a:3d:17:24:48:86:0b: bf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:77:47:81:9B:DE:C4:FB:D3:70:4F:19:BA:21:B0:F7:42:DC:09:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6a:04:e3:16:b3:12:e9:f7:b3:ce:e3:1c:e3:4d:16:24:57: a1:ac:33:ef:10:9d:8c:7c:6a:fe:14:db:dd:74:b3:fa:f6:f1: 56:a0:e7:91:94:f3:3d:de:d9:16:08:58:2f:cc:42:6f:4c:b6: b7:13:f2:bf:d5:7e:3f:58:97:bc:1e:1f:8f:cb:a0:9e:e5:c0: 2e:70:3d:da:4e:33:8e:f7:58:a1:f8:1b:e9:76:b6:d8:05:b9: 92:f7:61:8f:bf:15:14:ab:53:2d:9d:db:5f:79:f9:95:82:c8: 4a:61:98:c9:8d:33:39:9e:aa:60:14:12:82:26:14:3e:20:1c: 4f:1d:2a:db:37:7b:3f:30:dc:6e:a1:df:ca:df:4a:e7:14:47: e3:0a:c0:f0:8c:cc:99:60:8e:80:c8:d3:c5:59:ac:b3:54:b7: 59:f4:fb:69:b8:0e:5f:5e:d1:ed:77:1d:d4:38:4b:68:07:9a: 79:3b:3f:9c:00:f5:53:da:4b:34:4f:c5:a2:6e:9b:05:72:07: a5:12:2b:d4:f3:cc:a8:17:c3:2f:7f:bb:a2:95:36:f3:9e:74: a6:d1:4f:53:23:35:05:35:43:44:9e:82:4d:5e:7d:58:7e:6a: 70:6c:04:ca:70:40:e8:8f:d1:2b:32:9c:0f:5e:6a:8e:b6:4a: ac:50:06:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYe9VhQpRCRxgKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTBjNDEwYzQtZGQyNi00YWM2LTg3ZGQtY2MyMGU2YmViZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG7oGeCz6gXZbxS6lN06QGUYUKaDsNirGHYR acCFVRfBmlx2FO2krda3dIyU4XEzteg3Rnlrms5pFtoMJQPAlEZ8ovyRLsSatzsu ZmD9dX+Xv2Kfk8SBFmxU5etcffOz8hWQfxzTOoqYuAFlv3luu1jap59wkfDM/dhp 6GB2EkbdnHN4J4RLh60MxwmgPewKf2Oz35z+5R1U8mjOxBpA6z2dmoRN0O4rRg0a DE5MwGF8zL/QNesLGp/Smjs2UDCD2FobxUBaGYhmQtAkwDDxhjRiUFAnHgNGGyeh ku4MC5YAs69skOc0Fui5jxABSTwDK0rvX9Yf5Wo9FyRIhgu/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJ3R4Gb3sT703BPGbohsPdC3AldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjYxZmRkYTMtZDliOS0z MzZiLTg2OGMtNTY5NGMxZDFjZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxqBOMWsxLp97PO4xzjTRYkV6GsM+8QnYx8av4U2910s/r28Vag55GU 8z3e2RYIWC/MQm9MtrcT8r/Vfj9Yl7weH4/LoJ7lwC5wPdpOM473WKH4G+l2ttgF uZL3YY+/FRSrUy2d2195+ZWCyEphmMmNMzmeqmAUEoImFD4gHE8dKts3ez8w3G6h 38rfSucUR+MKwPCMzJlgjoDI08VZrLNUt1n0+2m4Dl9e0e13HdQ4S2gHmnk7P5wA 9VPaSzRPxaJumwVyB6USK9TzzKgXwy9/u6KVNvOedKbRT1MjNQU1Q0Segk1efVh+ anBsBMpwQOiP0SsynA9eao62SqxQBmo= -----END CERTIFICATE-----Generated at Fri Apr 4 08:27:18 2025 by rpki-client