$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa File: 71ae16c5-d31e-3798-a172-6d1d107c2749.roa (raw, json) Hash identifier: wwp8vnmIeAn7WO24LZUbSs5D3xFa3abpZKaaHAJBc8o= Subject key identifier: 25:4A:21:FD:37:D1:F3:4F:DD:38:44:26:D7:C0:45:E9:90:E0:2F:40 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58188BF68A4CB5DC1018380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:88:bf:68:a4:cb:5d:c1:01:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6851c99a-d204-4214-a37a-61796538be55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ea:88:b1:3f:2e:09:69:4d:f2:85:3f:d4:e2: 0c:97:8a:23:23:c2:17:11:e8:b4:b0:09:8a:5b:7e: 1a:fc:ae:df:74:ab:d7:5d:37:2c:62:77:19:7c:c1: 88:20:ee:3b:ea:d1:77:93:de:cf:b9:60:4d:5b:94: 72:f4:3d:c6:80:5d:ef:fe:6c:5d:e7:e4:30:11:e8: 93:78:ce:21:a4:0c:b9:46:97:1b:cb:f5:93:06:82: ee:57:bb:a9:bb:a0:b5:f9:52:4b:86:d8:8f:bb:9e: b6:89:c5:09:75:b8:5b:8e:ac:70:5d:38:14:8f:1c: 46:62:df:bf:75:b1:a9:9d:84:67:64:0f:15:43:6c: 30:2d:22:3d:4b:b6:25:06:46:38:27:ed:cf:62:58: b6:91:16:e1:4b:b1:e7:31:5f:f1:25:06:a4:31:dd: ed:55:f5:5c:dc:9d:a3:82:b8:e3:5d:db:66:5d:5a: 98:c2:2f:5c:fd:7e:c3:36:e6:8d:21:c8:8a:85:74: 7b:0f:f0:e8:2a:a7:0b:c0:f4:d9:b9:4a:3b:10:bf: 5b:f6:3d:b0:bf:cf:91:05:06:7f:34:96:e3:ba:52: 31:cb:66:88:f5:70:d4:2e:9a:12:9d:67:da:eb:e6: 41:42:a1:27:67:b5:5f:21:8d:cc:db:e8:b7:32:59: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4A:21:FD:37:D1:F3:4F:DD:38:44:26:D7:C0:45:E9:90:E0:2F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:43:2f:32:75:26:49:6e:53:08:d0:74:a7:7d:31:84:df:04: 21:13:0b:33:c6:14:9b:a3:de:f8:c3:72:9f:b7:08:e4:93:5e: 41:31:b2:0a:f4:a0:55:03:20:7e:b8:42:7e:c7:f0:de:7a:19: b8:3a:8f:ac:5e:73:5d:58:a1:d1:fa:04:19:c8:dd:01:e3:b1: 40:4f:9b:65:b6:54:ac:48:78:62:45:2e:b0:b1:39:6e:0a:8c: da:e6:e4:e4:19:0d:e4:17:28:11:0a:cc:54:ff:c4:af:d5:8d: 9e:fa:a2:ce:15:21:82:ed:91:2e:f3:cc:9c:55:40:eb:65:2f: 04:47:a8:76:8d:38:d3:64:a4:57:bd:8b:29:f8:30:a7:90:10: 6d:44:f8:83:37:0a:52:d3:b6:b7:36:a6:28:cb:ca:26:0d:38: 12:f7:b1:c9:ee:79:bb:a3:21:ff:57:fc:71:9e:b5:cc:75:c7: 75:a1:b7:58:e4:05:80:fe:d1:17:bd:91:db:16:45:64:5b:4b: 2e:bd:cc:fc:d6:9b:6a:cd:c4:9e:16:6f:93:d6:46:d8:ee:b4: 95:92:6f:df:81:ca:f4:a8:bc:6b:e0:88:27:9a:24:a3:31:69: 27:8f:46:7b:c1:0b:65:36:88:ab:97:d5:da:4b:10:ab:db:b8: d6:c8:df:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYi/aKTLXcEBg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Njg1MWM5OWEtZDIwNC00MjE0LWEzN2EtNjE3OTY1MzhiZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOqIsT8uCWlN8oU/1OIMl4ojI8IXEei0sAmK W34a/K7fdKvXXTcsYncZfMGIIO476tF3k97PuWBNW5Ry9D3GgF3v/mxd5+QwEeiT eM4hpAy5Rpcby/WTBoLuV7upu6C1+VJLhtiPu562icUJdbhbjqxwXTgUjxxGYt+/ dbGpnYRnZA8VQ2wwLSI9S7YlBkY4J+3PYli2kRbhS7HnMV/xJQakMd3tVfVc3J2j grjjXdtmXVqYwi9c/X7DNuaNIciKhXR7D/DoKqcLwPTZuUo7EL9b9j2wv8+RBQZ/ NJbjulIxy2aI9XDULpoSnWfa6+ZBQqEnZ7VfIY3M2+i3MlnieQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVKIf030fNP3ThEJtfARemQ4C9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzFhZTE2YzUtZDMxZS0z Nzk4LWExNzItNmQxZDEwN2MyNzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdDLzJ1JkluUwjQdKd9MYTfBCETCzPGFJuj3vjDcp+3COSTXkExsgr0 oFUDIH64Qn7H8N56Gbg6j6xec11YodH6BBnI3QHjsUBPm2W2VKxIeGJFLrCxOW4K jNrm5OQZDeQXKBEKzFT/xK/VjZ76os4VIYLtkS7zzJxVQOtlLwRHqHaNONNkpFe9 iyn4MKeQEG1E+IM3ClLTtrc2pijLyiYNOBL3scnuebujIf9X/HGetcx1x3Wht1jk BYD+0Re9kdsWRWRbSy69zPzWm2rNxJ4Wb5PWRtjutJWSb9+ByvSovGvgiCeaJKMx aSePRnvBC2U2iKuX1dpLEKvbuNbI37k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:20 2025 by rpki-client