$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8001ad8a-257e-30e1-9921-efa36d9bac39.roa File: 8001ad8a-257e-30e1-9921-efa36d9bac39.roa (raw, json) Hash identifier: SU2O0tzNt5zwLh0AZkyg22g+dL6aXcl1U8+DDKSIe+g= Subject key identifier: E2:DA:A1:7B:78:A4:71:85:96:3F:2A:C0:0C:B9:EC:7F:C5:8B:88:85 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12B396F74AC20A71D3680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8001ad8a-257e-30e1-9921-efa36d9bac39.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.217.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2b:39:6f:74:ac:20:a7:1d:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=2e5c7410-9baa-4b28-88bf-2978ebdff21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:00:17:6e:b4:d6:e3:43:7e:e7:3f:20:a1:4c: 2b:c9:e5:0d:3f:f8:b4:56:74:ca:1a:af:7b:18:45: 43:83:a8:2e:4d:51:cd:f4:2c:12:ec:ee:cc:70:0d: a9:ee:42:bc:7a:11:df:b6:33:10:b1:53:e1:14:74: 65:94:07:39:35:17:f8:59:e7:01:82:cb:45:a7:cf: 52:ac:f6:2b:18:40:b9:3d:03:8e:2c:a9:82:37:bd: 8b:bc:5c:8a:c5:be:00:f7:da:1f:1d:81:c3:a7:b1: 23:65:12:53:3f:29:a4:3c:1e:bc:b2:ba:de:50:81: 4d:f9:0e:e9:eb:da:6b:78:fc:22:64:94:b5:8e:4f: 87:54:42:28:66:b6:3b:76:13:bb:59:77:64:5c:d7: 17:a7:34:58:2e:98:64:01:89:5c:79:14:1b:8e:f4: 96:1d:91:5a:b7:cf:b8:3a:02:26:c9:cb:4e:f7:d4: 48:e6:b6:7d:9f:28:63:a9:12:b5:11:54:7a:00:02: e7:b3:92:a4:33:f1:6c:29:0a:81:4a:4e:b2:49:00: 06:49:26:3e:79:da:5c:64:85:da:ed:59:b1:39:1c: 5a:b6:d0:46:67:a0:d2:d2:25:b8:33:8e:dd:3d:be: e0:1f:6b:75:1c:38:58:e0:96:2d:9f:64:2b:50:bf: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DA:A1:7B:78:A4:71:85:96:3F:2A:C0:0C:B9:EC:7F:C5:8B:88:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8001ad8a-257e-30e1-9921-efa36d9bac39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:48:85:c6:9f:0d:1a:9a:39:f9:ce:ea:86:58:33:e1:1c:92: 41:53:61:91:2f:6c:ea:3f:f9:31:d4:63:a8:3d:de:e5:ac:4b: 43:3a:45:39:1e:6c:f5:98:76:05:71:42:eb:cf:d3:32:96:cc: 54:eb:b9:14:4b:18:19:62:94:10:2e:b1:42:c2:41:04:e1:c1: 58:ed:b8:3d:b5:18:d3:4a:03:80:f4:32:58:a3:5b:3d:f6:1f: 19:e4:23:ac:82:59:4b:91:be:ce:98:1d:a7:58:09:8f:74:ea: e6:5f:ac:35:87:da:18:7e:2a:83:e7:09:53:1f:24:02:41:40: 38:08:5f:b1:c7:23:49:33:b4:7e:e8:43:6c:25:9c:1a:b1:c1: 20:01:a1:b9:38:33:03:85:2a:63:04:2f:91:c2:ce:53:e9:01: 79:9e:da:78:dd:f3:40:2e:48:39:69:10:94:ee:ca:e4:9e:4f: b1:d0:37:3e:4f:ee:cd:7b:5c:df:5d:0a:3c:66:03:97:1e:1c: 71:5a:f1:2b:3e:47:0d:66:75:e1:5c:9b:50:15:58:51:8e:c5: 4a:cd:b7:90:fd:5f:47:dd:36:63:88:80:72:a1:37:ae:9d:88: e6:21:57:6f:f5:39:7c:e4:30:48:a7:83:0c:46:6a:27:04:7d: 0f:50:28:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSs5b3SsIKcdNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MmU1Yzc0MTAtOWJhYS00YjI4LTg4YmYtMjk3OGViZGZmMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQAXbrTW40N+5z8goUwryeUNP/i0VnTKGq97 GEVDg6guTVHN9CwS7O7McA2p7kK8ehHftjMQsVPhFHRllAc5NRf4WecBgstFp89S rPYrGEC5PQOOLKmCN72LvFyKxb4A99ofHYHDp7EjZRJTPymkPB68srreUIFN+Q7p 69prePwiZJS1jk+HVEIoZrY7dhO7WXdkXNcXpzRYLphkAYlceRQbjvSWHZFat8+4 OgImyctO99RI5rZ9nyhjqRK1EVR6AALns5KkM/FsKQqBSk6ySQAGSSY+edpcZIXa 7VmxORxattBGZ6DS0iW4M47dPb7gH2t1HDhY4JYtn2QrUL8elwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLaoXt4pHGFlj8qwAy57H/Fi4iFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODAwMWFkOGEtMjU3ZS0z MGUxLTk5MjEtZWZhMzZkOWJhYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFIhcafDRqaOfnO6oZYM+EckkFTYZEvbOo/+THUY6g93uWsS0M6RTke bPWYdgVxQuvP0zKWzFTruRRLGBlilBAusULCQQThwVjtuD21GNNKA4D0MlijWz32 HxnkI6yCWUuRvs6YHadYCY906uZfrDWH2hh+KoPnCVMfJAJBQDgIX7HHI0kztH7o Q2wlnBqxwSABobk4MwOFKmMEL5HCzlPpAXme2njd80AuSDlpEJTuyuSeT7HQNz5P 7s17XN9dCjxmA5ceHHFa8Ss+Rw1mdeFcm1AVWFGOxUrNt5D9X0fdNmOIgHKhN66d iOYhV2/1OXzkMEingwxGaicEfQ9QKJA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:33:39 2025 by rpki-client