$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac30b313-cfe9-33e4-9f76-6627db129217.roa File: ac30b313-cfe9-33e4-9f76-6627db129217.roa (raw, json) Hash identifier: ScK7iF3QLm/umWY4UDd+YZWVfvhawPkeX4fTGeQjVdM= Subject key identifier: AF:CC:B4:97:B4:77:5E:A5:43:54:E0:79:83:2B:AD:61:E8:10:81:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581716FF85984C13A4B3B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac30b313-cfe9-33e4-9f76-6627db129217.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:71:6f:f8:59:84:c1:3a:4b:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b947317d-622c-4d4f-a569-8d63e4f3e6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9e:cb:bb:82:b0:f2:f7:fb:1a:01:4f:53:10: 21:cc:45:f1:c5:b7:a7:f7:0c:34:07:b1:17:65:c7: 52:56:9a:8a:60:c1:40:0c:09:26:cd:24:9a:0c:0b: d4:be:0b:bc:5b:16:49:cb:ca:2a:2f:b5:dd:13:12: 4d:9f:b7:62:30:f3:bf:04:d4:4f:95:58:ef:88:b1: d3:9d:55:1d:4a:4f:39:d6:cc:c0:8c:6f:2f:43:c7: 50:d2:fb:67:fb:84:bc:5d:95:d0:8d:8c:87:ea:7f: 17:08:9e:19:49:25:c6:ab:a3:51:19:1d:16:bc:c2: 81:4c:ff:97:ed:9f:be:5c:66:66:61:24:d0:15:ba: 63:2b:84:05:07:93:85:1a:3a:62:a3:0d:f2:da:be: cb:db:99:96:c9:84:92:8b:2f:ca:95:d4:1e:c0:56: f2:57:1d:88:a0:75:e9:56:87:d2:a4:a4:d1:b4:9b: 8a:7d:32:74:9d:8f:72:5d:37:30:75:f5:6a:7e:5c: 11:d2:c5:ba:42:e6:ec:bc:fe:b2:d7:fe:bc:35:e2: 0e:d2:eb:5c:8f:a5:a2:e4:01:39:ea:8b:a8:4a:7a: fe:67:2b:8e:20:55:d1:62:56:ae:0f:1c:4f:b2:61: c6:51:9b:9b:b0:59:5c:49:f6:5a:99:06:59:5f:30: 29:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CC:B4:97:B4:77:5E:A5:43:54:E0:79:83:2B:AD:61:E8:10:81:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac30b313-cfe9-33e4-9f76-6627db129217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8e:ca:6c:ef:72:28:4a:6a:4d:3a:5c:52:7c:9b:ae:f5:7e: 69:dc:4b:fb:67:0a:b9:54:85:21:27:b8:43:1a:39:dc:49:97: b7:5f:45:34:b8:53:00:00:0d:b2:33:79:2f:1a:22:3d:0f:12: 9d:8c:33:25:06:04:46:51:c9:3c:c1:bc:27:dc:e5:a6:1b:68: d8:f4:01:64:b0:60:48:cf:fa:b1:e9:aa:63:14:af:52:98:91: 37:53:1b:2e:f2:68:a1:66:53:db:f1:4f:bd:db:83:b9:ff:b1: 81:51:0c:24:2e:93:55:12:a9:0b:04:be:df:ae:e2:d8:2e:e3: e9:2b:db:3e:a7:2d:03:50:d9:e4:e4:53:eb:5f:89:40:75:93: ac:35:1d:1f:e7:54:24:d7:63:ce:da:54:f2:16:41:f6:26:0a: c3:a6:89:fe:ed:1e:d6:cf:11:a6:e3:dc:17:a2:22:21:f4:49: a9:12:fe:e2:3a:d4:e2:e7:b2:07:5e:64:72:3a:df:e7:8b:21: b9:27:7c:5e:97:fa:91:24:23:e7:63:4a:13:50:c1:7b:ed:ac: e3:bf:eb:6b:6b:f6:ae:3b:9f:48:f6:95:6c:e4:5b:68:a1:44: a1:52:d2:d2:e7:24:b2:39:3f:32:fd:a3:2b:31:ea:7f:ad:2a: f2:20:55:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXFv+FmEwTpLO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Yjk0NzMxN2QtNjIyYy00ZDRmLWE1NjktOGQ2M2U0ZjNlNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp7Lu4Kw8vf7GgFPUxAhzEXxxben9ww0B7EX ZcdSVpqKYMFADAkmzSSaDAvUvgu8WxZJy8oqL7XdExJNn7diMPO/BNRPlVjviLHT nVUdSk851szAjG8vQ8dQ0vtn+4S8XZXQjYyH6n8XCJ4ZSSXGq6NRGR0WvMKBTP+X 7Z++XGZmYSTQFbpjK4QFB5OFGjpiow3y2r7L25mWyYSSiy/KldQewFbyVx2IoHXp VofSpKTRtJuKfTJ0nY9yXTcwdfVqflwR0sW6QubsvP6y1/68NeIO0utcj6Wi5AE5 6ouoSnr+ZyuOIFXRYlauDxxPsmHGUZubsFlcSfZamQZZXzApyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/MtJe0d16lQ1TgeYMrrWHoEIEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWMzMGIzMTMtY2ZlOS0z M2U0LTlmNzYtNjYyN2RiMTI5MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKOymzvcihKak06XFJ8m671fmncS/tnCrlUhSEnuEMaOdxJl7dfRTS4 UwAADbIzeS8aIj0PEp2MMyUGBEZRyTzBvCfc5aYbaNj0AWSwYEjP+rHpqmMUr1KY kTdTGy7yaKFmU9vxT73bg7n/sYFRDCQuk1USqQsEvt+u4tgu4+kr2z6nLQNQ2eTk U+tfiUB1k6w1HR/nVCTXY87aVPIWQfYmCsOmif7tHtbPEabj3BeiIiH0SakS/uI6 1OLnsgdeZHI63+eLIbknfF6X+pEkI+djShNQwXvtrOO/62tr9q47n0j2lWzkW2ih RKFS0tLnJLI5PzL9oysx6n+tKvIgVYM= -----END CERTIFICATE-----Generated at Fri Mar 14 08:39:29 2025 by rpki-client