$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99a1f6e0-9850-3d93-92e5-5ca182743881.roa File: 99a1f6e0-9850-3d93-92e5-5ca182743881.roa (raw, json) Hash identifier: lnfj6tQDFdGfvZdGzDPmbXf0s2SgfatRE828I9iR5as= Subject key identifier: BF:95:2C:B2:E1:D1:A0:4F:DF:E2:66:0E:1B:A6:90:E9:A5:BC:25:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581FE6EA817E8455552D980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99a1f6e0-9850-3d93-92e5-5ca182743881.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:fe:6e:a8:17:e8:45:55:52:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b39837ba-c26c-40f1-a2aa-a6ce900da4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:e6:ee:96:43:89:37:77:96:36:94:15:6c: cf:6d:fd:ec:b1:dc:68:ff:71:e3:d0:8b:ed:67:50: 8d:9a:59:9c:3f:ec:85:e4:90:57:43:8c:68:3d:22: b8:b8:3f:7f:6e:08:06:b1:70:0c:84:38:2a:57:60: 37:04:ee:90:c8:bd:fd:03:35:63:7a:0f:73:01:2c: 1d:eb:6d:9f:77:af:29:65:28:fd:9c:33:38:d2:d2: 02:c4:20:a7:f7:44:9c:64:01:50:f5:1b:da:97:bc: 35:9a:c0:1b:8d:c1:9a:2f:ac:ea:3e:1b:31:38:7a: 7f:94:90:48:0f:e9:a3:3a:51:66:c1:14:bc:2e:eb: 1f:09:fd:46:dc:12:55:a9:8a:e2:eb:75:39:b6:4c: b6:7c:f5:e3:e7:73:8f:8b:3a:34:70:9f:a7:9a:9e: 66:66:7f:d8:f8:3a:4b:04:80:57:f2:50:4a:ef:27: 1c:32:af:5a:a4:e8:d3:12:2e:4f:0c:ce:c6:e6:4d: ec:68:95:02:fe:ca:04:71:b5:40:90:64:af:f4:b5: 38:f2:35:89:0d:7c:23:8b:d9:88:00:29:d5:bb:b5: 2b:5b:a8:ab:b5:3c:2a:42:15:ae:89:e0:0c:2d:ed: f3:14:c5:6c:f0:b6:92:51:0c:8c:9d:86:3c:aa:f1: 12:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:95:2C:B2:E1:D1:A0:4F:DF:E2:66:0E:1B:A6:90:E9:A5:BC:25:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99a1f6e0-9850-3d93-92e5-5ca182743881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:1c:80:98:37:c0:8b:3a:25:c7:ff:39:87:d3:4e:95:25:9c: 52:9a:44:16:25:8d:76:b7:65:0c:2b:d5:1e:f7:ac:26:57:2d: 07:32:02:5d:70:fb:fb:a0:5d:0d:db:13:e3:3d:08:15:de:76: 91:75:4a:52:53:ea:09:75:6b:16:60:68:44:63:07:64:cd:8a: db:7e:cb:df:4a:b1:8f:0f:23:82:9c:19:66:3c:83:c9:e1:0d: 0a:fd:40:ff:67:7e:a5:3c:16:ca:df:2c:dc:d2:bc:9b:72:9b: eb:78:72:77:81:eb:77:c1:b2:60:c0:f0:41:bc:12:f1:23:81: 4f:05:40:d6:57:79:5f:22:65:57:3b:43:60:a4:53:49:51:77: 91:77:ee:e7:da:ea:80:6d:3f:5a:94:78:60:61:80:54:05:a6: 64:ac:34:9c:dc:4e:d0:ee:a8:2a:ea:3a:54:c4:95:64:54:4b: 42:13:e4:b9:41:7a:de:e8:66:4b:72:06:8b:42:d5:c3:c3:80: 7c:0a:6e:de:f0:f0:97:44:52:98:7e:f4:70:4e:44:6c:3c:f9: 49:ab:96:16:ca:58:03:29:11:bc:6f:61:3a:8d:28:57:86:ca: 7a:34:d7:fa:b8:0e:a3:3d:7f:0c:fd:e1:53:c0:c8:01:c8:d9: e6:eb:54:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgf5uqBfoRVVS2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjM5ODM3YmEtYzI2Yy00MGYxLWEyYWEtYTZjZTkwMGRhNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEDm7pZDiTd3ljaUFWzPbf3ssdxo/3Hj0Ivt Z1CNmlmcP+yF5JBXQ4xoPSK4uD9/bggGsXAMhDgqV2A3BO6QyL39AzVjeg9zASwd 622fd68pZSj9nDM40tICxCCn90ScZAFQ9Rval7w1msAbjcGaL6zqPhsxOHp/lJBI D+mjOlFmwRS8LusfCf1G3BJVqYri63U5tky2fPXj53OPizo0cJ+nmp5mZn/Y+DpL BIBX8lBK7yccMq9apOjTEi5PDM7G5k3saJUC/soEcbVAkGSv9LU48jWJDXwji9mI ACnVu7UrW6irtTwqQhWuieAMLe3zFMVs8LaSUQyMnYY8qvESFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+VLLLh0aBP3+JmDhumkOmlvCWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTlhMWY2ZTAtOTg1MC0z ZDkzLTkyZTUtNWNhMTgyNzQzODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrNmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUcgJg3wIs6Jcf/OYfTTpUlnFKaRBYljXa3ZQwr1R73rCZXLQcyAl1w +/ugXQ3bE+M9CBXedpF1SlJT6gl1axZgaERjB2TNitt+y99KsY8PI4KcGWY8g8nh DQr9QP9nfqU8FsrfLNzSvJtym+t4cneB63fBsmDA8EG8EvEjgU8FQNZXeV8iZVc7 Q2CkU0lRd5F37ufa6oBtP1qUeGBhgFQFpmSsNJzcTtDuqCrqOlTElWRUS0IT5LlB et7oZktyBotC1cPDgHwKbt7w8JdEUph+9HBORGw8+UmrlhbKWAMpEbxvYTqNKFeG yno01/q4DqM9fwz94VPAyAHI2ebrVNA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:23 2025 by rpki-client