$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91bbc855-c2a1-3ccd-b702-318cab8aa565.roa File: 91bbc855-c2a1-3ccd-b702-318cab8aa565.roa (raw, json) Hash identifier: waZMezRjiyoxJerGhLHpcG6TbkuxfXmvggCfDm0STH0= Subject key identifier: EE:27:6F:BC:C3:83:D0:AD:08:AB:79:F5:28:86:ED:CD:00:E4:D6:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA122DB0609D6498940D280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91bbc855-c2a1-3ccd-b702-318cab8aa565.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.217.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:22:db:06:09:d6:49:89:40:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=1c50ed23-0c55-4478-b1ef-ad5b7201aa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:79:66:f8:a8:ca:69:1e:95:48:3f:19:e9: 77:b1:71:80:e1:8c:61:99:fe:b4:78:2e:07:ce:3b: c7:4d:ca:71:2b:f8:ec:24:eb:81:40:78:b9:b6:0b: 5c:8d:98:80:3d:99:2b:49:e9:fd:d0:c8:ce:42:e2: 83:0c:1c:4d:42:0c:67:8f:0c:65:e5:51:cb:f3:b3: c9:8c:94:d5:18:e9:69:46:75:4d:aa:d3:db:45:75: ea:b4:90:2a:03:14:e9:8d:ba:1a:a4:bd:6d:ca:b2: e8:99:b0:6d:48:b4:90:b6:c2:d7:da:6c:5b:42:bd: 6e:0a:07:2d:fc:a0:d6:c5:0c:8d:ba:47:6a:5e:92: 94:0a:c3:d9:31:44:29:ef:d2:7d:45:0a:60:b4:7e: 17:58:e1:bb:f0:23:4f:2f:71:2a:e7:b4:1b:a1:0a: d1:69:9f:80:34:49:7d:fc:b9:af:9f:60:99:f0:85: 47:8b:09:7b:5e:51:1c:bd:bb:77:19:9e:85:8c:f3: 0f:7d:d7:f7:c2:6d:80:18:13:75:6a:0b:d8:54:1e: eb:1a:48:aa:b8:a7:23:6f:34:66:f8:a6:52:e7:24: c7:ba:42:47:3e:07:bd:50:3a:91:16:52:cb:cd:b5: 0b:fb:a5:fd:ac:1a:af:4c:af:23:a3:9a:bb:55:e8: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:27:6F:BC:C3:83:D0:AD:08:AB:79:F5:28:86:ED:CD:00:E4:D6:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91bbc855-c2a1-3ccd-b702-318cab8aa565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:87:e4:24:71:d1:04:05:ac:3a:b7:b9:b3:40:13:7a:25:c0: f6:63:90:c5:91:0b:b4:fa:b6:77:16:8e:c4:60:3a:fc:3a:58: de:cd:a4:6f:f3:59:da:8b:0c:34:52:45:1d:f7:17:ec:24:72: 31:f5:45:eb:a7:7d:98:85:bc:a0:ed:47:e3:e8:f4:99:05:57: 1c:09:f3:9a:63:38:9e:e3:87:66:d4:3a:95:4b:1b:72:67:2b: 15:20:a4:b2:84:fe:c0:57:e2:28:46:29:c6:77:e9:cd:85:1c: e3:b1:e8:77:bd:af:77:1e:0d:24:42:9c:be:af:b6:8e:4d:f3: 82:2d:b4:f2:86:fa:62:64:a5:9c:5d:4b:ba:00:2a:b8:4d:28: 38:0c:52:f0:59:dc:d8:87:12:9b:ed:1b:ad:8f:e3:f6:0b:da: 4a:d3:6b:18:fa:0b:f6:25:62:1a:85:2f:9f:c5:8b:41:f2:6d: 7b:ee:85:b6:26:52:47:13:83:53:80:7d:d1:f1:5b:42:cd:e7: 7c:9f:1b:cc:02:4f:5d:87:18:e7:00:8c:d3:7e:aa:c4:92:bc: e3:d9:3b:4d:98:6b:fc:e2:d4:17:ec:2e:ec:1d:b8:1e:d2:55: 6d:bb:fd:d8:b3:b7:44:7f:20:88:d8:5e:11:89:95:52:cc:77: ce:18:23:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSLbBgnWSYlA0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MWM1MGVkMjMtMGM1NS00NDc4LWIxZWYtYWQ1YjcyMDFhYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoZ5ZvioymkelUg/Gel3sXGA4Yxhmf60eC4H zjvHTcpxK/jsJOuBQHi5tgtcjZiAPZkrSen90MjOQuKDDBxNQgxnjwxl5VHL87PJ jJTVGOlpRnVNqtPbRXXqtJAqAxTpjboapL1tyrLombBtSLSQtsLX2mxbQr1uCgct /KDWxQyNukdqXpKUCsPZMUQp79J9RQpgtH4XWOG78CNPL3Eq57QboQrRaZ+ANEl9 /Lmvn2CZ8IVHiwl7XlEcvbt3GZ6FjPMPfdf3wm2AGBN1agvYVB7rGkiquKcjbzRm +KZS5yTHukJHPge9UDqRFlLLzbUL+6X9rBqvTK8jo5q7Vej6YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4nb7zDg9CtCKt59SiG7c0A5NYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTFiYmM4NTUtYzJhMS0z Y2NkLWI3MDItMzE4Y2FiOGFhNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+H5CRx0QQFrDq3ubNAE3olwPZjkMWRC7T6tncWjsRgOvw6WN7NpG/z WdqLDDRSRR33F+wkcjH1ReunfZiFvKDtR+Po9JkFVxwJ85pjOJ7jh2bUOpVLG3Jn KxUgpLKE/sBX4ihGKcZ36c2FHOOx6He9r3ceDSRCnL6vto5N84IttPKG+mJkpZxd S7oAKrhNKDgMUvBZ3NiHEpvtG62P4/YL2krTaxj6C/YlYhqFL5/Fi0HybXvuhbYm UkcTg1OAfdHxW0LN53yfG8wCT12HGOcAjNN+qsSSvOPZO02Ya/zi1BfsLuwduB7S VW27/dizt0R/IIjYXhGJlVLMd84YI30= -----END CERTIFICATE-----Generated at Fri Mar 14 11:15:19 2025 by rpki-client