$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c2f479c-b069-3ee1-b689-f37a48d218f8.roa File: 7c2f479c-b069-3ee1-b689-f37a48d218f8.roa (raw, json) Hash identifier: gqzLPaTYZF5AjWW/WUYtJ+9nkyBjfKxNhdWON5C9LA4= Subject key identifier: 2E:56:95:2B:BE:CC:E8:6A:08:29:00:82:10:A6:B0:76:76:2B:79:02 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5821559D7BBD7EF41E25380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c2f479c-b069-3ee1-b689-f37a48d218f8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:15:59:d7:bb:d7:ef:41:e2:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3ab1c521-7ac9-4f4c-80ea-cf12cc136b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:8a:9b:58:d4:df:8d:85:7d:19:83:41:b1: 49:13:62:30:01:77:e5:69:fd:f0:23:1f:f7:9e:73: 08:58:7d:a8:a9:c3:79:2c:ca:9a:3a:44:ee:82:32: 70:de:f0:63:51:f0:c2:01:77:e8:02:a6:af:ab:a1: e2:8c:5e:9a:35:82:7c:89:a3:f4:d4:80:27:13:a0: f6:bc:60:6d:ca:4f:e3:94:23:9e:65:45:05:1d:f9: 9c:3a:94:3a:2a:00:52:16:f2:5f:b6:16:2c:2c:ce: 24:b5:e9:94:34:cc:bf:bf:57:f9:80:6a:c4:f8:ad: b8:52:21:7a:4c:49:fe:74:13:9d:fb:38:f3:a9:36: 02:30:84:ac:6a:f4:7d:a6:d2:d3:44:51:a9:c4:75: 74:ef:c2:06:06:b0:74:80:a0:df:a4:13:92:5e:7b: 34:9c:15:c2:b1:b2:3a:c0:6f:51:2d:46:bf:a7:80: a3:6f:c9:82:22:e0:b3:dd:3e:1f:36:5d:c9:f5:a3: ab:84:c5:05:0d:34:a3:eb:64:a6:13:63:e7:25:f2: 53:70:a4:6d:bd:66:f9:39:4c:f5:56:54:e4:7c:f5: 51:b6:a1:cd:a8:57:bc:d3:77:e9:6f:df:b1:5c:0a: 56:de:ac:7e:2c:1b:be:b6:c2:5e:34:42:76:1e:c0: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:56:95:2B:BE:CC:E8:6A:08:29:00:82:10:A6:B0:76:76:2B:79:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c2f479c-b069-3ee1-b689-f37a48d218f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:c6:b8:19:e1:93:05:8a:45:db:e6:cf:cd:5f:22:a5:ae:0d: 26:d6:75:9c:72:d9:9a:5f:f0:62:0f:4d:82:80:13:b2:c7:41: a0:86:ec:99:39:97:79:6f:49:66:b9:64:7e:82:7c:d2:61:92: b8:e5:bf:a6:b6:a9:d3:72:78:81:dc:47:ed:e3:aa:a5:a4:10: 30:61:51:2f:0d:94:c2:d5:4d:84:d7:cb:43:91:e8:01:71:e9: e4:de:c0:b8:41:be:2b:6a:54:85:ab:28:48:a8:e7:cd:6d:0f: 26:ba:cd:31:31:2a:de:bc:fc:25:01:be:7c:ea:ae:e4:df:02: d9:57:77:ac:4d:18:f6:f2:31:df:f2:db:bf:a1:94:76:2a:82: 87:42:ad:df:b1:88:05:94:18:25:78:a5:b1:17:dc:9f:10:16: 2f:c4:0c:06:68:b6:e2:b4:ea:df:fe:a0:0f:2a:a0:e7:f2:62: b0:97:a7:3e:e8:e8:ee:d7:89:8e:ed:6f:21:e4:37:23:28:b1: b0:c2:3f:d7:1c:01:d6:02:05:6e:e5:b8:fb:06:e6:d1:56:9c: c0:08:6f:db:07:3a:8d:87:fe:77:71:2f:ed:0c:24:c5:e2:3f: db:c8:d3:e5:8f:19:d4:e0:bd:b1:12:05:6a:ed:a8:04:6c:f7: d6:fa:14:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghVZ17vX70HiU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2FiMWM1MjEtN2FjOS00ZjRjLTgwZWEtY2YxMmNjMTM2YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6GKm1jU342FfRmDQbFJE2IwAXflaf3wIx/3 nnMIWH2oqcN5LMqaOkTugjJw3vBjUfDCAXfoAqavq6HijF6aNYJ8iaP01IAnE6D2 vGBtyk/jlCOeZUUFHfmcOpQ6KgBSFvJfthYsLM4ktemUNMy/v1f5gGrE+K24UiF6 TEn+dBOd+zjzqTYCMISsavR9ptLTRFGpxHV078IGBrB0gKDfpBOSXns0nBXCsbI6 wG9RLUa/p4Cjb8mCIuCz3T4fNl3J9aOrhMUFDTSj62SmE2PnJfJTcKRtvWb5OUz1 VlTkfPVRtqHNqFe803fpb9+xXApW3qx+LBu+tsJeNEJ2HsBEvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5WlSu+zOhqCCkAghCmsHZ2K3kCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2MyZjQ3OWMtYjA2OS0z ZWUxLWI2ODktZjM3YTQ4ZDIxOGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzGuBnhkwWKRdvmz81fIqWuDSbWdZxy2Zpf8GIPTYKAE7LHQaCG7Jk5 l3lvSWa5ZH6CfNJhkrjlv6a2qdNyeIHcR+3jqqWkEDBhUS8NlMLVTYTXy0OR6AFx 6eTewLhBvitqVIWrKEio581tDya6zTExKt68/CUBvnzqruTfAtlXd6xNGPbyMd/y 27+hlHYqgodCrd+xiAWUGCV4pbEX3J8QFi/EDAZotuK06t/+oA8qoOfyYrCXpz7o 6O7XiY7tbyHkNyMosbDCP9ccAdYCBW7luPsG5tFWnMAIb9sHOo2H/ndxL+0MJMXi P9vI0+WPGdTgvbESBWrtqARs99b6FM0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:20 2025 by rpki-client