$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa File: 8684240a-b3e2-3586-b1f0-1953cb883e6c.roa (raw, json) Hash identifier: /KcKmFFUFgyZWMr2/rWj5+SBp81F9u6IoW0EstELAmo= Subject key identifier: 06:3D:E5:B3:D6:97:93:6E:D5:2A:27:97:96:19:87:0B:A3:ED:10:F1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58212BF9CB5C4E0A1A76D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:12:bf:9c:b5:c4:e0:a1:a7:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=beda2d8e-d88e-4411-914b-97ce92f49e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:9b:4f:eb:ab:6b:5f:56:5d:2c:46:52:27: 2e:d3:2b:14:9c:1e:7e:cb:c9:5b:f8:e6:17:be:1b: 27:63:2e:ac:64:fb:2b:b4:02:7d:8d:4e:97:41:2a: d6:01:7a:d0:03:f5:e3:4c:e9:4d:10:55:bd:c0:2e: 8f:71:c2:54:47:ca:12:a1:76:be:c7:ef:1e:0f:0c: 2e:04:17:3d:e3:d0:7e:04:2f:21:ee:63:7b:c5:ec: 51:d0:2e:f9:d8:10:7a:ea:61:fc:f4:28:3a:e3:73: a8:af:f2:10:d3:ce:9d:08:64:b6:1e:73:0e:38:70: f8:58:c5:9d:04:b0:b6:ba:d9:1e:cd:86:13:56:bb: 9c:e3:09:48:7d:32:bb:03:c0:f1:6b:58:9d:b6:b7: 72:bb:35:64:ed:9f:32:98:98:d0:9a:2b:68:30:4b: 2e:6f:37:af:02:bb:77:18:8a:5c:7e:86:04:dd:39: d1:57:51:71:b9:fe:2d:06:fb:d0:88:14:65:82:3a: 54:a0:f1:e1:e0:b0:6d:9e:af:da:58:10:36:3a:c7: 37:2b:38:f9:b0:00:5b:79:78:03:42:9d:1b:20:bf: 94:93:b0:24:d9:cb:30:35:c4:10:d6:08:76:c5:7d: 17:e5:3f:50:e3:a3:4a:ea:7d:73:b2:41:84:5c:b1: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3D:E5:B3:D6:97:93:6E:D5:2A:27:97:96:19:87:0B:A3:ED:10:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:57:20:2c:c3:07:00:ff:c3:74:fa:d0:4f:83:6f:94:86:e2: ea:8c:05:b0:23:dc:ed:4a:c4:3a:7c:63:ef:6d:4e:f6:59:3f: 2a:42:9c:ba:8a:79:60:c2:c7:67:48:dd:03:81:a7:1f:d5:13: 8c:43:ff:f6:fc:fb:65:f2:d7:c1:86:ed:ec:a4:d5:89:e8:3d: 3f:85:1a:82:09:16:b4:8a:83:7c:0b:14:a3:3c:38:f7:1b:7f: 1f:9a:95:97:4c:7e:2f:6d:dd:e9:b7:e1:73:0a:98:03:90:64: d4:bd:69:61:98:af:25:8a:a4:12:eb:91:9b:1d:3b:7b:58:1c: 28:28:f5:90:27:d2:79:79:89:2f:6c:72:a8:16:66:e6:35:17: 8a:a9:5e:e0:22:b3:74:60:6a:7e:ce:60:4f:ed:c7:4d:c6:11: 0c:c0:a4:22:70:be:43:48:4d:96:1d:67:11:f6:43:ae:4f:8c: d6:5f:09:be:69:0c:22:42:8b:37:bd:66:c6:a4:7b:f8:94:15: 64:7d:3a:38:31:bf:5c:60:9e:c7:48:ff:e5:8f:8c:a0:5a:01: a8:80:c2:2e:16:24:41:e9:e6:2e:a6:e8:de:06:36:01:54:c8: 96:e0:9b:8e:b9:0f:cc:ce:fe:9a:92:43:48:89:22:32:1d:62: 5d:11:ee:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghK/nLXE4KGnbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmVkYTJkOGUtZDg4ZS00NDExLTkxNGItOTdjZTkyZjQ5ZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoSbT+ura19WXSxGUicu0ysUnB5+y8lb+OYX vhsnYy6sZPsrtAJ9jU6XQSrWAXrQA/XjTOlNEFW9wC6PccJUR8oSoXa+x+8eDwwu BBc949B+BC8h7mN7xexR0C752BB66mH89Cg643Oor/IQ086dCGS2HnMOOHD4WMWd BLC2utkezYYTVruc4wlIfTK7A8Dxa1idtrdyuzVk7Z8ymJjQmitoMEsubzevArt3 GIpcfoYE3TnRV1Fxuf4tBvvQiBRlgjpUoPHh4LBtnq/aWBA2Osc3Kzj5sABbeXgD Qp0bIL+Uk7Ak2cswNcQQ1gh2xX0X5T9Q46NK6n1zskGEXLEWKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY95bPWl5Nu1Sonl5YZhwuj7RDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY4NDI0MGEtYjNlMi0z NTg2LWIxZjAtMTk1M2NiODgzZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlXICzDBwD/w3T60E+Db5SG4uqMBbAj3O1KxDp8Y+9tTvZZPypCnLqK eWDCx2dI3QOBpx/VE4xD//b8+2Xy18GG7eyk1YnoPT+FGoIJFrSKg3wLFKM8OPcb fx+alZdMfi9t3em34XMKmAOQZNS9aWGYryWKpBLrkZsdO3tYHCgo9ZAn0nl5iS9s cqgWZuY1F4qpXuAis3Rgan7OYE/tx03GEQzApCJwvkNITZYdZxH2Q65PjNZfCb5p DCJCize9Zsake/iUFWR9Ojgxv1xgnsdI/+WPjKBaAaiAwi4WJEHp5i6m6N4GNgFU yJbgm465D8zO/pqSQ0iJIjIdYl0R7u0= -----END CERTIFICATE-----Generated at Fri Apr 4 09:02:59 2025 by rpki-client