$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa File: a061a393-c24b-3e7d-890c-891cf39b13c9.roa (raw, json) Hash identifier: VBjzspkUl3hKOWZYr/ZNBC487rhLTLOawkBrGIqjiN8= Subject key identifier: 11:F4:24:68:ED:0D:DB:8D:F9:E8:9C:09:1C:C6:A6:96:CC:7F:32:65 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA1307715916E65C2A08198 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.217.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:30:77:15:91:6e:65:c2:a0:81:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=006f70be-40f6-4870-8650-a1d3db643cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:31:48:75:16:80:aa:d4:cc:9e:48:19:be:20: e2:b9:9b:91:73:fc:99:91:7f:b6:35:5c:2c:c2:8c: a1:4e:14:c9:b7:04:3d:68:c6:3f:b6:9d:18:4e:50: 61:ac:e6:16:b4:5f:a4:f5:db:29:8c:23:83:c3:1d: bc:1b:ba:16:f3:29:93:63:d0:f8:53:a0:31:11:dc: a1:78:fd:ed:96:db:10:cf:75:38:a2:2a:4a:c0:ae: 7b:db:4c:e7:16:ef:f4:4a:e8:c3:81:db:ee:80:9e: 0a:e6:dc:1b:41:ae:97:2a:fa:25:0d:49:fe:56:d6: 0a:a0:57:c3:f9:18:67:96:cb:a0:6e:9f:77:31:b2: e0:89:a7:90:8b:30:cc:81:c0:7f:18:ff:3a:c5:53: 59:27:38:a0:b6:78:10:02:30:a7:a3:71:6a:13:0e: b4:0b:b0:55:e4:e7:ea:5f:1a:24:de:ce:0d:84:9a: 1b:07:56:e6:53:94:38:58:4f:2f:83:b1:41:18:b1: d8:31:ba:24:4d:db:bd:dd:81:a9:6a:ca:f4:60:85: 2b:a5:b6:96:12:0d:40:f6:6b:40:84:50:5f:22:d9: fa:d8:a0:02:ea:79:95:f2:13:2c:12:e1:5f:87:b3: 16:0d:31:1e:0c:0f:35:b8:a1:2f:90:4a:96:f4:9e: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F4:24:68:ED:0D:DB:8D:F9:E8:9C:09:1C:C6:A6:96:CC:7F:32:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e2:12:a7:f3:82:f0:b1:19:88:a1:5b:8a:48:16:5f:52:6b: 2f:99:b6:48:f5:1e:0c:b2:9c:0c:aa:7d:97:f5:29:ea:87:09: a6:12:c5:02:77:af:9b:17:ec:25:d3:96:a5:07:52:4a:ef:52: a6:4a:db:ef:8f:3f:f4:d3:9c:0b:8a:df:57:a1:73:4c:fd:18: 74:32:97:bc:57:4b:4b:b0:49:0a:a1:cb:63:4a:92:b0:f9:e5: 70:0a:91:57:14:f6:9d:e3:e5:b2:76:bd:a1:ce:8f:0f:17:fe: 87:6d:38:a1:8a:4b:a1:ea:a8:65:0a:3f:5e:e6:b5:7f:cf:7d: 99:b1:99:6a:4e:81:8a:fc:b1:5c:d6:81:45:eb:2e:bb:93:e1: 81:8b:89:e5:82:14:15:3f:b4:4e:55:fb:71:c5:68:7d:1e:03: c9:94:98:1a:ea:0a:07:93:84:60:3c:f4:58:6f:25:9b:7f:f2: de:50:c7:1c:5a:f5:95:2e:06:9b:21:78:84:68:53:6b:2b:21: b5:d5:4a:b5:4e:e7:61:e3:04:3f:f7:80:45:82:a9:58:79:2b: f0:8e:79:12:f3:60:0c:93:8c:fd:ad:66:0d:3e:61:78:35:34: fb:36:00:86:08:a0:45:b4:39:6b:fe:22:b2:27:2a:c3:33:7e: 66:8b:ab:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoTB3FZFuZcKggZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MDA2ZjcwYmUtNDBmNi00ODcwLTg2NTAtYTFkM2RiNjQzY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTFIdRaAqtTMnkgZviDiuZuRc/yZkX+2NVws woyhThTJtwQ9aMY/tp0YTlBhrOYWtF+k9dspjCODwx28G7oW8ymTY9D4U6AxEdyh eP3tltsQz3U4oipKwK5720znFu/0SujDgdvugJ4K5twbQa6XKvolDUn+VtYKoFfD +Rhnlsugbp93MbLgiaeQizDMgcB/GP86xVNZJzigtngQAjCno3FqEw60C7BV5Ofq Xxok3s4NhJobB1bmU5Q4WE8vg7FBGLHYMbokTdu93YGpasr0YIUrpbaWEg1A9mtA hFBfItn62KAC6nmV8hMsEuFfh7MWDTEeDA81uKEvkEqW9J6vRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH0JGjtDduN+eicCRzGppbMfzJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA2MWEzOTMtYzI0Yi0z ZTdkLTg5MGMtODkxY2YzOWIxM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7iEqfzgvCxGYihW4pIFl9Say+Ztkj1HgyynAyqfZf1KeqHCaYSxQJ3 r5sX7CXTlqUHUkrvUqZK2++PP/TTnAuK31ehc0z9GHQyl7xXS0uwSQqhy2NKkrD5 5XAKkVcU9p3j5bJ2vaHOjw8X/odtOKGKS6HqqGUKP17mtX/PfZmxmWpOgYr8sVzW gUXrLruT4YGLieWCFBU/tE5V+3HFaH0eA8mUmBrqCgeThGA89FhvJZt/8t5Qxxxa 9ZUuBpsheIRoU2srIbXVSrVO52HjBD/3gEWCqVh5K/COeRLzYAyTjP2tZg0+YXg1 NPs2AIYIoEW0OWv+IrInKsMzfmaLq84= -----END CERTIFICATE-----Generated at Fri Apr 4 08:25:08 2025 by rpki-client