$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa File: 8420604a-78c3-354a-867d-4cbdeb9953ad.roa (raw, json) Hash identifier: FFmzekXhUMLfoHlFv+3NGTvEEQQhKaWk4CKZfBc32eM= Subject key identifier: 86:0D:DF:EA:33:37:6B:7B:A2:D2:40:97:66:16:DE:7E:8C:6E:10:BD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58205AC203FBDDA98962C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:05:ac:20:3f:bd:da:98:96:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4ba8cc8d-c042-4cd5-b823-d342a0d40efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:a4:2b:6a:76:d4:5f:b1:82:b1:f5:c6:ce: a8:82:89:08:1d:6f:70:e5:38:98:2d:0e:b3:8b:d9: 03:bc:04:ff:d6:70:bf:57:4a:81:a0:f7:3a:7b:c8: cc:9e:72:e5:f1:30:5c:2a:e9:18:86:81:ec:2e:88: 96:ac:01:57:52:22:a3:29:5f:ab:be:1b:d4:13:2a: 10:08:69:5f:7e:40:1c:d8:02:5c:3f:71:b5:75:39: ff:11:62:b0:b3:39:66:13:72:89:f9:83:ea:f6:26: ab:80:b3:be:08:72:ef:47:83:65:4c:4b:9b:65:ab: cc:46:f7:5f:04:e1:9e:7c:9a:19:cc:c3:62:88:dc: b9:5a:63:04:11:d2:81:47:9a:1a:9d:5d:d0:3a:cd: c7:21:b9:bc:c9:e1:f6:5d:61:68:15:a2:1c:80:53: 78:f8:41:8e:6d:d8:66:cd:b8:e4:69:5d:56:bf:c2: 25:14:d2:75:42:d3:cd:f9:32:f3:12:28:b7:ca:c6: 29:7e:c8:1a:9b:0b:2e:ad:d4:e3:dc:b4:c7:86:db: a2:60:21:01:d5:9c:fa:cc:6c:ab:be:34:9f:fe:e8: fe:3d:e4:2f:bb:f8:fd:e7:99:5b:3e:01:4f:d3:c7: 8a:5a:34:c0:de:9c:4b:f4:9e:44:f1:07:69:ac:c0: 7f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0D:DF:EA:33:37:6B:7B:A2:D2:40:97:66:16:DE:7E:8C:6E:10:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c4:7c:e2:b3:c9:05:0f:9d:f5:48:a1:c3:83:c1:b9:31:7d: 4b:99:5b:be:5e:a6:43:8f:44:c3:74:ce:f5:f6:82:b6:f7:00: b8:85:53:96:1d:c9:c3:aa:25:d6:79:1c:f5:c3:d9:8d:22:d5: 3c:eb:c5:6b:7b:d6:52:a5:56:44:f8:01:ba:f5:b4:b5:e5:2b: 95:2d:bb:99:1b:db:f4:e5:e0:ef:69:04:9d:fb:91:8c:e7:be: d1:6b:15:27:d8:6d:d8:f4:ca:0e:cb:59:ad:c5:8c:fd:ed:b2: 91:27:3f:15:84:9b:97:0f:5d:c9:9b:68:51:df:80:83:17:33: 04:7c:1d:2a:f3:bc:63:3d:05:2c:f8:46:6b:bb:2f:62:4a:a3: 88:7b:bc:2d:ef:ef:07:9d:c4:13:fd:94:b4:1f:7b:2a:e0:f5: cd:77:40:79:32:eb:c4:bf:ab:c6:d0:b2:24:1d:1b:09:82:a0: 05:6a:ed:4b:4f:f2:a2:b2:d0:49:83:12:f4:70:74:da:39:8c: bb:f4:f6:5a:08:9a:0d:74:6b:68:9f:47:e8:54:03:0e:3f:6a: 1e:18:a7:f2:f7:10:bc:6a:fe:d0:73:7d:1e:bd:9f:ea:ad:7a: 07:ce:91:85:c9:de:13:77:67:fa:db:03:ec:70:1c:1a:dd:f1: 5f:a3:d9:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggWsID+92piWLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NGJhOGNjOGQtYzA0Mi00Y2Q1LWI4MjMtZDM0MmEwZDQwZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj6kK2p21F+xgrH1xs6ogokIHW9w5TiYLQ6z i9kDvAT/1nC/V0qBoPc6e8jMnnLl8TBcKukYhoHsLoiWrAFXUiKjKV+rvhvUEyoQ CGlffkAc2AJcP3G1dTn/EWKwszlmE3KJ+YPq9iargLO+CHLvR4NlTEubZavMRvdf BOGefJoZzMNiiNy5WmMEEdKBR5oanV3QOs3HIbm8yeH2XWFoFaIcgFN4+EGObdhm zbjkaV1Wv8IlFNJ1QtPN+TLzEii3ysYpfsgamwsurdTj3LTHhtuiYCEB1Zz6zGyr vjSf/uj+PeQvu/j955lbPgFP08eKWjTA3pxL9J5E8QdprMB/RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYN3+ozN2t7otJAl2YW3n6MbhC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODQyMDYwNGEtNzhjMy0z NTRhLTg2N2QtNGNiZGViOTk1M2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPEfOKzyQUPnfVIocODwbkxfUuZW75epkOPRMN0zvX2grb3ALiFU5Yd ycOqJdZ5HPXD2Y0i1TzrxWt71lKlVkT4Abr1tLXlK5Utu5kb2/Tl4O9pBJ37kYzn vtFrFSfYbdj0yg7LWa3FjP3tspEnPxWEm5cPXcmbaFHfgIMXMwR8HSrzvGM9BSz4 Rmu7L2JKo4h7vC3v7wedxBP9lLQfeyrg9c13QHky68S/q8bQsiQdGwmCoAVq7UtP 8qKy0EmDEvRwdNo5jLv09loImg10a2ifR+hUAw4/ah4Yp/L3ELxq/tBzfR69n+qt egfOkYXJ3hN3Z/rbA+xwHBrd8V+j2dM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:23 2025 by rpki-client