$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa File: 72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa (raw, json) Hash identifier: lZX0GgH/V3FpPQcF4xcIlHVsc7Ek2WeWPu0X/04pR5M= Subject key identifier: 1F:5C:D1:F9:43:EC:89:14:1A:85:2F:90:63:FF:18:68:20:8C:91:0D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858454623DEF17E97669924700E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa Signing time: Wed 20 Mar 2024 20:44:56 +0000 ROA not before: Wed 20 Mar 2024 20:44:56 +0000 ROA not after: Tue 18 Jun 2024 20:44:56 +0000 asID: 15169 IP address blocks: 172.217.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:23:de:f1:7e:97:66:99:24:70:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:44:56 2024 GMT Not After : Jun 18 20:44:56 2024 GMT Subject: CN=0cec802b-3697-4065-b24f-c570958cd734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ec:18:b6:be:a7:77:3b:7f:bb:12:cf:74:99: 6d:d6:3f:5a:cc:5d:bb:2d:9a:a9:28:f4:a8:d9:69: 01:96:a9:6b:8f:3b:64:99:f6:df:ca:ff:c2:7d:5d: d7:f1:8f:fc:f4:da:55:0b:e0:a8:88:01:81:61:a2: 55:e4:30:88:85:e5:22:93:ea:22:2c:f4:95:46:27: b6:98:69:c6:5f:d3:3a:6e:8f:6b:b4:c7:75:cc:ba: 8a:0b:d4:1b:68:3a:1e:84:74:13:9b:93:2c:d9:e4: 3e:5e:1c:2f:8d:d7:64:d3:6d:93:16:ea:03:74:49: 53:3b:ae:52:49:cb:08:71:bd:de:e0:f5:82:95:1c: a1:e7:84:c6:f2:fc:b1:85:c0:c5:45:f3:f1:cc:42: 38:56:cb:bd:9b:1c:50:eb:1d:7a:6a:47:8b:ba:b5: 41:a7:09:95:24:b1:32:99:be:89:dc:8a:89:e8:ac: ea:1f:48:75:40:8c:19:ab:f1:fd:cd:2e:56:f9:b1: f4:65:cd:e2:d8:af:63:09:1f:2a:2f:f8:7c:e8:ae: 11:80:1e:f0:fa:2d:03:9f:20:42:2a:76:ba:fa:a7: 82:1a:12:ee:04:f3:21:25:1e:a6:13:9b:70:d6:e3: dd:4a:95:ea:5d:60:3d:3f:f5:03:85:fc:cb:e7:a6: 40:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5C:D1:F9:43:EC:89:14:1A:85:2F:90:63:FF:18:68:20:8C:91:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6c:5d:89:73:d4:2e:54:88:97:a6:10:13:75:1c:1f:c6:a6: 2e:91:2c:9f:ae:dd:48:41:e8:fb:f3:ae:9f:f2:82:f2:39:b1: 91:2d:25:8e:81:98:28:e5:20:eb:b7:4c:bd:d3:ee:45:8a:15: 75:2b:6c:1d:ed:fd:e7:bf:c1:7a:b8:2a:3a:b2:b7:79:69:d1: dc:49:b1:dd:84:32:29:77:4e:35:91:4b:35:fb:cd:4a:e8:3a: 8c:e5:5a:5e:0d:44:a7:bf:5e:f8:71:e6:21:91:73:03:2d:e9: dc:ad:b5:b3:35:9d:52:63:9c:80:ea:d1:eb:69:38:df:dc:32: d7:e0:c5:61:58:f6:de:5e:36:9d:02:ad:62:77:3f:0c:39:d8: cf:d5:6f:40:30:3d:59:66:67:f9:05:a5:25:6f:a9:9b:9a:6c: 57:f6:a6:6a:09:32:3a:20:50:68:fc:92:71:df:81:be:8b:6c: 17:96:0d:20:65:d9:9d:e9:57:93:e8:19:e9:dc:ae:2e:03:db: 81:66:d8:a7:95:d3:bd:88:63:c1:2e:f2:5d:1e:21:85:d2:d8: 12:0d:61:f2:0a:e9:f1:73:43:10:46:07:d5:13:83:63:5c:6b: ee:4d:eb:68:ea:40:b9:06:a2:45:92:65:84:91:f1:d6:fa:9d: c6:fd:48:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGI97xfpdmmSRwDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNDQ1NloXDTI0MDYxODIwNDQ1NlowLzEtMCsGA1UEAxMk MGNlYzgwMmItMzY5Ny00MDY1LWIyNGYtYzU3MDk1OGNkNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluwYtr6ndzt/uxLPdJlt1j9azF27LZqpKPSo 2WkBlqlrjztkmfbfyv/CfV3X8Y/89NpVC+CoiAGBYaJV5DCIheUik+oiLPSVRie2 mGnGX9M6bo9rtMd1zLqKC9QbaDoehHQTm5Ms2eQ+Xhwvjddk022TFuoDdElTO65S ScsIcb3e4PWClRyh54TG8vyxhcDFRfPxzEI4Vsu9mxxQ6x16akeLurVBpwmVJLEy mb6J3IqJ6KzqH0h1QIwZq/H9zS5W+bH0Zc3i2K9jCR8qL/h86K4RgB7w+i0DnyBC Kna6+qeCGhLuBPMhJR6mE5tw1uPdSpXqXWA9P/UDhfzL56ZA8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9c0flD7IkUGoUvkGP/GGggjJENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzJjMjQ4N2MtYjhlOS0z ZDhhLTliZjUtOGMwNDhiMjUxMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZsXYlz1C5UiJemEBN1HB/Gpi6RLJ+u3UhB6Pvzrp/ygvI5sZEtJY6B mCjlIOu3TL3T7kWKFXUrbB3t/ee/wXq4Kjqyt3lp0dxJsd2EMil3TjWRSzX7zUro OozlWl4NRKe/Xvhx5iGRcwMt6dyttbM1nVJjnIDq0etpON/cMtfgxWFY9t5eNp0C rWJ3Pww52M/Vb0AwPVlmZ/kFpSVvqZuabFf2pmoJMjogUGj8knHfgb6LbBeWDSBl 2Z3pV5PoGencri4D24Fm2KeV072IY8Eu8l0eIYXS2BINYfIK6fFzQxBGB9UTg2Nc a+5N62jqQLkGokWSZYSR8db6ncb9SDQ= -----END CERTIFICATE-----Generated at Fri May 17 22:54:40 2024 by rpki-client on console-fra.rpki-client.org