$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab7b560f-d613-3ae1-9329-f7563f517db9.roa File: ab7b560f-d613-3ae1-9329-f7563f517db9.roa (raw, json) Hash identifier: Br3oxh3gFHA1Q0LuPygXPYZsQiBFTBxtt2EYrw/Y1bs= Subject key identifier: 00:DF:57:73:9D:9B:1A:98:53:97:CA:0A:B5:6B:97:B0:6A:4E:08:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817790441C7B241EF76B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab7b560f-d613-3ae1-9329-f7563f517db9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:77:90:44:1c:7b:24:1e:f7:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4319ad80-cf3f-4e61-89da-a1bd88ab5858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:92:b4:5e:78:05:5f:70:1f:d5:4b:f8:3a: ec:97:82:b8:c8:ca:19:a0:e0:ba:1b:44:66:f5:f2: a2:45:5c:c4:f1:c7:05:d3:31:d2:7b:05:72:ca:d4: c0:eb:3c:66:56:fc:ca:21:bb:a1:fc:02:45:8b:5a: e3:d9:7e:5d:d2:54:e2:00:a2:c9:6c:62:7c:74:00: 43:1e:fe:29:8c:77:70:4d:d8:9a:a1:14:2b:05:9c: bd:89:7a:0c:70:72:7e:5a:b0:b8:ac:19:02:d6:36: f8:72:67:81:d7:6e:e8:8a:21:f9:fe:4d:00:05:ce: 3c:0c:54:66:e6:dc:46:a0:8d:49:49:9e:8f:4c:3c: 90:e2:5e:1f:45:f5:c4:27:1b:da:47:7a:c2:de:06: 3a:db:10:db:41:74:b7:80:ef:dd:b5:d4:46:7b:90: d5:6d:f5:dc:1d:3e:f6:4a:53:c2:be:07:8c:16:47: 49:dc:76:b6:13:15:a8:4b:bb:a5:d9:f2:cb:6c:ad: 11:de:57:fa:30:9b:22:ca:07:43:6e:20:cd:24:ce: f0:98:6e:b0:03:68:dc:a5:f8:9f:65:00:20:45:e0: f8:50:12:64:5d:fe:af:41:28:4c:26:87:0a:1e:ee: 90:c9:ab:48:39:c5:62:9d:db:8a:47:98:87:a7:98: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DF:57:73:9D:9B:1A:98:53:97:CA:0A:B5:6B:97:B0:6A:4E:08:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab7b560f-d613-3ae1-9329-f7563f517db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:fb:01:53:ed:1f:23:f1:b9:be:0a:12:d1:37:fc:c3:10:8a: ba:0d:b5:e5:67:3c:6c:5b:cc:b4:99:20:a7:5f:70:f1:82:4b: 53:16:23:a6:0d:10:3c:63:47:00:26:e9:85:e2:36:b3:43:f5: 97:9a:68:88:e7:36:63:03:4e:47:9b:a7:27:10:7d:de:41:ed: 0b:57:32:ca:a7:3d:e0:43:fa:e3:3f:e4:ee:99:1a:12:38:be: 9d:d0:6c:f1:74:90:e8:aa:a3:2a:33:45:2c:38:a7:65:ce:ce: 14:2d:b1:73:2d:07:78:73:df:89:07:65:9c:6c:91:ce:1f:33: 68:f1:4a:ad:85:75:4b:8b:f0:54:eb:02:cf:84:2e:dc:12:ef: d8:ae:d1:cd:53:82:ca:05:31:8a:1f:b7:96:6b:53:f3:9c:15: 81:a7:77:9d:ad:11:4c:19:17:92:86:64:e9:27:e7:68:49:6d: 0b:23:66:8d:6f:4f:3a:5c:4d:99:4a:0c:86:0d:76:84:80:71: 56:ca:41:d4:30:15:72:e0:e2:cd:6c:58:bb:bf:a6:1e:eb:dc: 97:bd:c3:8d:51:42:34:55:60:67:d0:6a:56:da:cc:67:53:4a: 1d:bb:fb:4d:93:e0:16:0c:99:39:70:2a:03:e5:e4:71:b0:f1: e3:97:dd:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXeQRBx7JB73awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDMxOWFkODAtY2YzZi00ZTYxLTg5ZGEtYTFiZDg4YWI1ODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQaStF54BV9wH9VL+Drsl4K4yMoZoOC6G0Rm 9fKiRVzE8ccF0zHSewVyytTA6zxmVvzKIbuh/AJFi1rj2X5d0lTiAKLJbGJ8dABD Hv4pjHdwTdiaoRQrBZy9iXoMcHJ+WrC4rBkC1jb4cmeB127oiiH5/k0ABc48DFRm 5txGoI1JSZ6PTDyQ4l4fRfXEJxvaR3rC3gY62xDbQXS3gO/dtdRGe5DVbfXcHT72 SlPCvgeMFkdJ3Ha2ExWoS7ul2fLLbK0R3lf6MJsiygdDbiDNJM7wmG6wA2jcpfif ZQAgReD4UBJkXf6vQShMJocKHu6QyatIOcVinduKR5iHp5jEkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADfV3OdmxqYU5fKCrVrl7BqTgiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWI3YjU2MGYtZDYxMy0z YWUxLTkzMjktZjc1NjNmNTE3ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJb7AVPtHyPxub4KEtE3/MMQiroNteVnPGxbzLSZIKdfcPGCS1MWI6YN EDxjRwAm6YXiNrND9ZeaaIjnNmMDTkebpycQfd5B7QtXMsqnPeBD+uM/5O6ZGhI4 vp3QbPF0kOiqoyozRSw4p2XOzhQtsXMtB3hz34kHZZxskc4fM2jxSq2FdUuL8FTr As+ELtwS79iu0c1TgsoFMYoft5ZrU/OcFYGnd52tEUwZF5KGZOkn52hJbQsjZo1v TzpcTZlKDIYNdoSAcVbKQdQwFXLg4s1sWLu/ph7r3Je9w41RQjRVYGfQalbazGdT Sh27+02T4BYMmTlwKgPl5HGw8eOX3bI= -----END CERTIFICATE-----Generated at Fri Apr 4 08:51:35 2025 by rpki-client