$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa File: 859f2179-6268-3d00-b2bc-ba3b138d14d0.roa (raw, json) Hash identifier: naHSIhafqtNGfk4uZbfCCvmYpUxJkm2sDcr2HGQKWss= Subject key identifier: 9F:15:4B:4E:DF:EC:84:D3:7D:1E:3F:90:39:C1:EA:F9:B8:AD:41:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820DCEE097CBD4F56C6480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0d:ce:e0:97:cb:d4:f5:6c:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=bd10c484-4e24-437f-85c7-7172d4160766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cb:51:68:b2:30:6f:bc:99:46:d6:e1:51:0b: 94:42:5b:95:a0:3d:50:f7:38:a6:95:61:25:74:2e: 73:63:60:0c:5b:e6:5c:85:e1:2b:97:72:7a:33:ca: 07:c9:23:d9:6b:a7:e2:3a:67:07:94:cc:69:64:9d: 55:36:84:dc:7b:ef:25:49:f1:ba:01:6d:73:21:38: bd:de:8d:3c:75:47:1f:09:a9:67:59:dd:8e:d9:a7: 92:2b:3f:5a:25:15:78:68:4c:64:52:5d:e6:f0:6e: b0:cd:78:92:ef:e0:f2:9d:1c:e7:71:12:dd:9d:13: dc:5e:7e:b0:54:ba:a1:fc:da:8b:6d:a1:01:0c:8a: 13:86:7c:dd:3d:51:1b:e0:32:85:8e:78:19:e3:14: 7d:fe:6f:13:84:5c:31:75:17:c6:c1:d8:3b:a1:fe: 04:18:a3:4a:b3:6f:09:b6:6d:c0:f6:b0:a1:d7:cc: 16:58:ce:c4:90:74:8c:37:25:31:c3:72:21:d9:24: b1:bf:3f:f0:5b:ed:b2:5e:5b:97:fd:0c:35:d7:d4: 2f:68:e1:c0:c2:4a:2f:67:11:5b:1f:63:bd:0e:a3: c9:df:6a:fd:23:fa:bf:bf:6e:f2:6c:7b:e0:bc:47: 5d:92:49:74:3c:ac:5f:38:ec:36:0a:9a:c4:5a:a5: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:15:4B:4E:DF:EC:84:D3:7D:1E:3F:90:39:C1:EA:F9:B8:AD:41:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:83:cc:98:78:36:0c:6a:99:a2:0f:3b:a7:10:f9:50:40:e9: 9b:d4:3c:b8:34:06:57:10:00:30:cd:cd:da:bb:03:53:84:d1: 66:99:bf:7d:e7:04:31:4d:a7:8e:2f:30:d9:7d:30:0d:73:d6: bf:9b:44:f8:c3:54:11:e8:06:38:fc:5d:74:1f:3d:13:69:68: 95:7a:78:fe:f6:41:8a:71:bb:bb:ce:7a:30:6f:25:91:10:d0: 6f:ab:ab:b4:4a:f1:b5:c8:6c:25:d6:ff:e3:56:ac:da:57:f4: 0e:1b:e2:8e:02:4c:6c:2d:b7:79:c3:35:16:0b:a1:a9:c4:9b: 43:77:fc:07:3d:f9:7f:41:73:b1:18:a1:42:e6:f8:40:b5:9a: 1d:1c:95:f2:f5:53:5d:1a:8f:24:e5:bf:22:e1:23:af:04:c9: 14:66:64:9a:1b:ff:1b:02:21:70:31:d6:23:a3:a6:47:8e:e0: ae:68:51:13:38:56:f5:07:de:ad:82:de:44:30:2a:37:a7:85: 88:c0:85:7e:7a:cc:08:84:36:7f:a2:fe:8e:91:ea:5e:26:d6: ba:f7:61:78:32:b0:25:d6:3b:e8:1e:8d:22:09:13:29:e5:4c: be:15:8e:3a:1c:20:24:49:b5:39:5c:46:b4:96:e1:dc:35:06: a6:70:cd:6a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjFgg3O4JfL1PVsZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmQxMGM0ODQtNGUyNC00MzdmLTg1YzctNzE3MmQ0MTYwNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMtRaLIwb7yZRtbhUQuUQluVoD1Q9zimlWEl dC5zY2AMW+ZcheErl3J6M8oHySPZa6fiOmcHlMxpZJ1VNoTce+8lSfG6AW1zITi9 3o08dUcfCalnWd2O2aeSKz9aJRV4aExkUl3m8G6wzXiS7+DynRzncRLdnRPcXn6w VLqh/NqLbaEBDIoThnzdPVEb4DKFjngZ4xR9/m8ThFwxdRfGwdg7of4EGKNKs28J tm3A9rCh18wWWM7EkHSMNyUxw3Ih2SSxvz/wW+2yXluX/Qw119QvaOHAwkovZxFb H2O9DqPJ32r9I/q/v27ybHvgvEddkkl0PKxfOOw2CprEWqVRxQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ8VS07f7ITTfR4/kDnB6vm4rUHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODU5ZjIxNzktNjI2OC0z ZDAwLWIyYmMtYmEzYjEzOGQxNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArNkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACYPMmHg2DGqZog87pxD5UEDpm9Q8uDQGVxAAMM3N2rsDU4TRZpm/fecE MU2nji8w2X0wDXPWv5tE+MNUEegGOPxddB89E2lolXp4/vZBinG7u856MG8lkRDQ b6urtErxtchsJdb/41as2lf0DhvijgJMbC23ecM1FguhqcSbQ3f8Bz35f0FzsRih Qub4QLWaHRyV8vVTXRqPJOW/IuEjrwTJFGZkmhv/GwIhcDHWI6OmR47grmhREzhW 9QferYLeRDAqN6eFiMCFfnrMCIQ2f6L+jpHqXibWuvdheDKwJdY76B6NIgkTKeVM vhWOOhwgJEm1OVxGtJbh3DUGpnDNag== -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:15 2025 by rpki-client