$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa File: 72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa (raw, json) Hash identifier: Jg7qPZrPXXpp3WDbcaIm/wuPPnYYWiaj9BPBqUdxik0= Subject key identifier: B7:3C:DF:6E:B7:AA:27:A8:18:45:57:8E:FA:41:D8:C6:4D:53:45:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58204B0096457A5DB1D3440 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:04:b0:09:64:57:a5:db:1d:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d56c957d-0c84-4cdc-894e-35a17e7b8554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:36:83:1f:7f:65:77:2c:74:aa:49:7f:ea: 00:4e:7a:7e:74:31:fb:8c:a3:c5:eb:ff:e8:3c:49: a0:0a:bf:7c:6d:23:59:55:ed:25:18:bd:3f:2a:89: 64:87:6c:1d:1b:95:f2:d7:55:e9:6f:74:87:cf:44: f3:93:1a:2a:1b:2d:e2:fe:27:83:13:21:38:70:f6: 8b:99:a8:5a:a1:19:b6:ef:03:d7:d7:03:2b:05:fd: aa:15:88:35:f1:0c:87:ef:9f:3a:bf:ef:b8:c7:b7: ba:bd:78:b1:5e:69:55:f9:b5:70:22:f6:d7:d8:74: cc:7e:22:07:83:9f:b7:0a:82:bd:62:33:f3:1b:49: 11:fe:ca:1f:ff:a0:c0:eb:fd:6a:03:cc:3c:17:a9: 5d:7f:c0:ee:f2:cb:7c:0a:05:b0:92:1c:2e:76:24: ae:8c:f1:16:c1:4a:86:64:22:a6:c8:6f:39:0b:6a: 99:cc:6a:dc:ed:f8:15:f9:46:12:56:b4:63:d0:64: 4b:f7:f4:17:92:7f:95:6a:1a:b2:21:7f:19:4d:f1: fb:0f:8a:19:fb:9c:06:d4:9d:b5:fc:9c:a2:c8:b3: e8:5a:3f:5b:3e:e5:d5:df:91:81:5d:82:48:1f:41: 30:91:cf:b9:f2:ba:8e:5e:58:98:97:e4:d0:29:3c: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3C:DF:6E:B7:AA:27:A8:18:45:57:8E:FA:41:D8:C6:4D:53:45:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1e:ea:87:b8:9a:28:44:fa:15:cd:87:07:e2:71:cb:34:1a: 5f:ca:85:9c:20:ef:fe:d9:31:c7:b7:7a:66:3b:80:ae:52:c5: db:7a:87:ab:12:ae:4d:5c:69:dc:28:a4:6d:54:8f:e6:8c:65: 2f:da:8f:ef:89:3f:f9:42:e1:7f:ab:96:a0:f7:d0:5e:6b:a8: 76:c9:43:9b:9e:1b:ca:31:97:5b:80:11:6b:0d:e8:69:4a:a2: cb:45:4f:c7:40:3c:35:7c:67:61:7f:8f:93:02:ec:6f:9b:05: d2:09:8f:cc:3c:6f:d0:63:f1:b4:5e:52:83:7c:30:05:d6:a6: 98:20:94:3f:e1:b1:b8:e9:46:81:69:c6:ef:0d:5a:ff:15:e2: 2a:08:90:3d:b9:49:03:65:7a:67:2b:50:a5:ff:d5:2f:87:00: 54:fe:67:c4:c3:4f:0d:f1:69:28:5b:91:05:05:bc:53:f5:79: 6e:f7:bc:84:2e:37:39:fe:2b:2a:e8:ec:1f:c5:fb:7b:ca:7a: be:98:cb:8b:d4:f8:dd:d7:2c:23:0f:23:0d:60:0b:67:62:b8: b2:d9:53:e4:36:f2:3a:5c:77:7b:84:e9:42:27:da:e0:6f:b4: 4d:d2:31:55:6c:29:1e:df:e6:2d:38:20:3b:88:4d:b7:81:5c: 60:60:80:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggSwCWRXpdsdNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDU2Yzk1N2QtMGM4NC00Y2RjLTg5NGUtMzVhMTdlN2I4NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbU2gx9/ZXcsdKpJf+oATnp+dDH7jKPF6//o PEmgCr98bSNZVe0lGL0/Kolkh2wdG5Xy11Xpb3SHz0TzkxoqGy3i/ieDEyE4cPaL mahaoRm27wPX1wMrBf2qFYg18QyH7586v++4x7e6vXixXmlV+bVwIvbX2HTMfiIH g5+3CoK9YjPzG0kR/sof/6DA6/1qA8w8F6ldf8Du8st8CgWwkhwudiSujPEWwUqG ZCKmyG85C2qZzGrc7fgV+UYSVrRj0GRL9/QXkn+VahqyIX8ZTfH7D4oZ+5wG1J21 /JyiyLPoWj9bPuXV35GBXYJIH0Ewkc+58rqOXliYl+TQKTyGZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLc83263qieoGEVXjvpB2MZNU0U/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzJjMjQ4N2MtYjhlOS0z ZDhhLTliZjUtOGMwNDhiMjUxMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIce6oe4mihE+hXNhwficcs0Gl/KhZwg7/7ZMce3emY7gK5Sxdt6h6sS rk1cadwopG1Uj+aMZS/aj++JP/lC4X+rlqD30F5rqHbJQ5ueG8oxl1uAEWsN6GlK ostFT8dAPDV8Z2F/j5MC7G+bBdIJj8w8b9Bj8bReUoN8MAXWppgglD/hsbjpRoFp xu8NWv8V4ioIkD25SQNlemcrUKX/1S+HAFT+Z8TDTw3xaShbkQUFvFP1eW73vIQu Nzn+Kyro7B/F+3vKer6Yy4vU+N3XLCMPIw1gC2diuLLZU+Q28jpcd3uE6UIn2uBv tE3SMVVsKR7f5i04IDuITbeBXGBggP4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:43 2025 by rpki-client