$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa File: 8684240a-b3e2-3586-b1f0-1953cb883e6c.roa (raw, json) Hash identifier: dTzDFZ6nYV6qV4QXTBQrZTJQNnjsaxb30iPdCM2GVPw= Subject key identifier: 8A:D3:56:44:0C:4D:2A:41:6C:BA:4B:EF:00:4B:FF:47:A5:2D:BD:87 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847055154A9512B3A3BB8F58280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa Signing time: Wed 28 Aug 2024 01:00:31 +0000 ROA not before: Wed 28 Aug 2024 01:00:31 +0000 ROA not after: Tue 26 Nov 2024 02:00:31 +0000 asID: 15169 IP address blocks: 172.217.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:05:51:54:a9:51:2b:3a:3b:b8:f5:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 28 01:00:31 2024 GMT Not After : Nov 26 02:00:31 2024 GMT Subject: CN=237f9047-9d5e-4a1c-8f4e-085f27e7e5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:65:01:97:63:f8:97:1b:d8:48:09:19:e3:d2: b1:05:8c:48:4b:47:14:02:7c:58:42:1c:0f:37:d2: 2e:17:0e:e7:49:14:53:6d:7b:97:13:7a:d1:f3:38: 9e:6b:2b:82:c0:62:58:a9:e4:e5:01:55:4d:41:e3: 41:c3:f5:c0:8b:df:e7:bb:4d:f8:36:65:03:9c:3b: 97:09:42:2f:eb:81:38:d6:3a:71:aa:5e:06:6c:c1: 9f:76:30:15:c4:24:bf:22:52:fc:87:47:13:c1:a8: cc:2e:76:76:c6:ec:b0:21:75:90:95:8b:a5:69:7d: d7:a9:94:c1:a2:89:fd:75:8e:42:85:0d:47:29:ff: 84:b0:d4:5c:39:9b:e9:c7:6e:02:92:b2:6a:d1:54: b8:65:86:03:5d:8d:73:23:9d:ff:c8:82:d7:7c:34: 4b:65:e9:39:0b:c2:80:79:63:62:d9:a6:1c:44:94: 91:3d:c9:e7:dd:3e:76:78:b0:5d:62:04:79:5c:e1: 2c:7a:a7:4f:5f:1f:44:30:52:96:dc:ee:f2:04:8f: 12:42:18:24:dc:16:fd:d8:5c:55:8c:cb:76:77:2d: b9:1d:fb:86:f4:12:53:22:16:b9:fd:92:dd:50:78: 45:f6:01:00:b5:f3:38:b2:3c:27:06:36:5b:35:4f: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D3:56:44:0C:4D:2A:41:6C:BA:4B:EF:00:4B:FF:47:A5:2D:BD:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8684240a-b3e2-3586-b1f0-1953cb883e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:be:35:8f:6f:d3:12:57:1d:c8:8f:37:48:b2:6d:18:44:0f: 3d:c2:ed:37:07:a3:0f:da:ed:61:4f:22:af:86:9b:38:ae:23: ca:c8:5f:16:a6:b9:ce:86:26:7c:52:2a:a1:8e:9d:e6:c3:f0: 5c:7e:c9:c2:da:08:1c:f3:20:8a:8a:6f:f8:74:a6:fc:b1:f5: 19:d6:e6:2f:ad:b3:2c:51:08:36:2b:f7:2b:24:86:ea:79:d9: 58:b7:46:21:c0:fa:e6:0f:7d:73:ad:69:eb:43:1b:db:ef:b6: 13:a7:4e:17:7c:59:05:1b:d0:cb:35:61:b0:95:78:f4:c0:c7: d8:31:b4:8c:d9:75:6d:32:bb:b0:0d:e9:25:cd:c9:5c:f1:9a: b5:cd:f7:7e:c1:d8:3f:aa:f1:16:9b:b9:f7:39:df:27:d9:82: 3c:9d:35:68:32:58:56:ac:52:12:e8:a8:d0:64:e6:e5:90:6d: fa:18:31:6a:a2:8f:33:7a:86:1f:70:8d:19:13:4d:6d:55:b8: 76:d2:4c:73:f9:ca:40:ce:35:5f:21:5e:78:5e:81:9f:55:cf: cc:e7:5e:2c:ac:84:ed:13:89:d8:0a:60:b7:c7:21:78:b8:66: af:c7:da:40:4b:04:d3:a7:a5:d0:3b:b4:d1:82:74:6f:dc:82: 59:2c:8e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcFUVSpUSs6O7j1goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDgyODAxMDAzMVoXDTI0MTEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MjM3ZjkwNDctOWQ1ZS00YTFjLThmNGUtMDg1ZjI3ZTdlNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGUBl2P4lxvYSAkZ49KxBYxIS0cUAnxYQhwP N9IuFw7nSRRTbXuXE3rR8zieayuCwGJYqeTlAVVNQeNBw/XAi9/nu034NmUDnDuX CUIv64E41jpxql4GbMGfdjAVxCS/IlL8h0cTwajMLnZ2xuywIXWQlYulaX3XqZTB oon9dY5ChQ1HKf+EsNRcOZvpx24CkrJq0VS4ZYYDXY1zI53/yILXfDRLZek5C8KA eWNi2aYcRJSRPcnn3T52eLBdYgR5XOEseqdPXx9EMFKW3O7yBI8SQhgk3Bb92FxV jMt2dy25HfuG9BJTIha5/ZLdUHhF9gEAtfM4sjwnBjZbNU+xcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrTVkQMTSpBbLpL7wBL/0elLb2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY4NDI0MGEtYjNlMi0z NTg2LWIxZjAtMTk1M2NiODgzZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm+NY9v0xJXHciPN0iybRhEDz3C7TcHow/a7WFPIq+GmziuI8rIXxam uc6GJnxSKqGOnebD8Fx+ycLaCBzzIIqKb/h0pvyx9RnW5i+tsyxRCDYr9yskhup5 2Vi3RiHA+uYPfXOtaetDG9vvthOnThd8WQUb0Ms1YbCVePTAx9gxtIzZdW0yu7AN 6SXNyVzxmrXN937B2D+q8Rabufc53yfZgjydNWgyWFasUhLoqNBk5uWQbfoYMWqi jzN6hh9wjRkTTW1VuHbSTHP5ykDONV8hXnhegZ9Vz8znXiyshO0TidgKYLfHIXi4 Zq/H2kBLBNOnpdA7tNGCdG/cglksjoc= -----END CERTIFICATE-----Generated at Sat Sep 7 22:45:04 2024 by rpki-client on console-ams.rpki-client.org