$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa File: a67282dc-ef4b-3424-b14a-d7cc85f54925.roa (raw, json) Hash identifier: ppKA7p5YYjngMc1njTXfAN6nzPAF+8iHQCda19HK3FI= Subject key identifier: 55:91:84:76:D6:F5:76:71:52:99:1E:A5:38:4E:9E:61:17:80:13:4D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58183590D7015E9602DC180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:83:59:0d:70:15:e9:60:2d:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=13e15e37-77d9-4b44-bcc9-f54458470b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:c1:52:74:61:25:7c:52:e0:ca:b7:33:5c: b1:28:26:d8:32:fb:77:7f:ea:8a:e0:95:b4:17:cf: f1:da:9a:1c:89:94:b8:d5:9d:a0:76:d1:1e:d8:b7: 65:7f:08:31:64:5e:8c:a4:6c:72:34:cc:dc:ef:92: 56:1c:df:bf:b4:2f:e6:be:c3:23:55:15:2c:ae:d1: df:cd:84:2a:4c:53:e6:5c:96:e1:a8:2d:e9:1e:bd: cb:eb:7a:8c:53:7f:75:b9:5b:ba:58:e7:32:2d:d2: ed:a4:06:8b:3d:65:38:6d:ac:fa:02:d8:53:33:e8: dd:49:84:a5:e4:81:62:e2:ed:bc:8e:57:c4:4e:81: c3:a2:68:a4:93:11:bb:61:f7:42:b4:bd:a3:e0:8a: 96:b6:79:73:62:24:8c:28:fe:ff:94:9e:83:51:03: b7:73:33:ec:2b:e6:9d:ad:81:10:c3:a5:e8:9c:85: cd:7c:af:87:8b:19:3d:aa:ae:1e:c0:b1:8f:b3:de: 9e:62:2e:06:36:94:c7:41:f1:59:1b:4e:1d:23:ae: e8:25:56:f4:c5:a2:f4:47:8b:b0:6c:ee:45:60:e6: c0:46:64:03:6f:00:e9:65:00:2f:81:e8:19:fb:55: 52:f3:f2:20:75:81:5b:69:e2:17:3f:b3:46:30:a9: c4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:91:84:76:D6:F5:76:71:52:99:1E:A5:38:4E:9E:61:17:80:13:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:4b:4f:81:f4:b3:bc:45:1b:01:cf:64:92:91:dc:b5:7a:c1: d1:fd:aa:2e:14:bf:6a:83:87:d1:08:25:1c:1c:43:33:8c:32: 0a:16:02:73:e1:fa:cb:92:2d:cd:11:cb:3e:59:48:8f:e8:5d: 1c:06:04:fd:05:68:6f:06:95:6c:8c:80:97:3d:fe:16:5c:8c: 1c:ea:2c:05:24:39:07:97:cc:42:e5:1a:72:09:d7:b2:c9:09: fc:0b:8f:8a:ea:2d:95:7f:a2:bd:1d:ef:07:09:46:72:77:4a: 45:a2:18:00:d1:8e:6a:52:6c:bb:58:b9:b7:21:c0:e5:3c:55: 09:7d:6f:5c:fd:45:f1:83:e2:20:89:2a:4a:ea:11:09:43:2d: 16:34:19:f6:4e:78:ad:44:07:1a:31:cd:96:5e:61:9d:ff:db: e6:48:a4:13:1e:be:65:1e:7e:03:c2:b4:16:d1:fa:a0:cb:0e: fa:ee:9f:0e:86:aa:cf:13:8c:f9:67:9f:37:43:c5:69:e0:ab: 58:4d:bb:be:e1:a7:29:e1:e7:d2:20:6e:27:15:f8:8c:42:31: 7c:f8:5e:0a:51:5c:18:ec:ac:64:c8:94:2a:80:0a:7c:78:2d: 64:e8:bb:03:80:e7:a9:6c:e9:91:95:a2:90:8e:de:b9:a1:8a: bc:cd:d4:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYNZDXAV6WAtwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTNlMTVlMzctNzdkOS00YjQ0LWJjYzktZjU0NDU4NDcwYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMXBUnRhJXxS4Mq3M1yxKCbYMvt3f+qK4JW0 F8/x2pociZS41Z2gdtEe2LdlfwgxZF6MpGxyNMzc75JWHN+/tC/mvsMjVRUsrtHf zYQqTFPmXJbhqC3pHr3L63qMU391uVu6WOcyLdLtpAaLPWU4baz6AthTM+jdSYSl 5IFi4u28jlfEToHDomikkxG7YfdCtL2j4IqWtnlzYiSMKP7/lJ6DUQO3czPsK+ad rYEQw6XonIXNfK+Hixk9qq4ewLGPs96eYi4GNpTHQfFZG04dI67oJVb0xaL0R4uw bO5FYObARmQDbwDpZQAvgegZ+1VS8/IgdYFbaeIXP7NGMKnEEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWRhHbW9XZxUpkepThOnmEXgBNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTY3MjgyZGMtZWY0Yi0z NDI0LWIxNGEtZDdjYzg1ZjU0OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBLT4H0s7xFGwHPZJKR3LV6wdH9qi4Uv2qDh9EIJRwcQzOMMgoWAnPh +suSLc0Ryz5ZSI/oXRwGBP0FaG8GlWyMgJc9/hZcjBzqLAUkOQeXzELlGnIJ17LJ CfwLj4rqLZV/or0d7wcJRnJ3SkWiGADRjmpSbLtYubchwOU8VQl9b1z9RfGD4iCJ KkrqEQlDLRY0GfZOeK1EBxoxzZZeYZ3/2+ZIpBMevmUefgPCtBbR+qDLDvrunw6G qs8TjPlnnzdDxWngq1hNu77hpynh59IgbicV+IxCMXz4XgpRXBjsrGTIlCqACnx4 LWTouwOA56ls6ZGVopCO3rmhirzN1Eo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:48 2025 by rpki-client