$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa File: ade63972-a7fa-3aa6-9cdc-7f422468c453.roa (raw, json) Hash identifier: X/C1m26uAyoQY83s/RyqD2c/Gu2127QpxKrG1WGrrX4= Subject key identifier: 0D:F7:0B:FE:C1:C2:FA:F5:DC:CB:E3:83:E3:E0:E5:AB:72:97:E9:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B35AC49A2FFE19B312680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.217.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:35:ac:49:a2:ff:e1:9b:31:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=1ad801da-0b01-4bfa-a402-c56934c75f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d3:2f:fe:fd:2e:0e:1d:a9:90:b5:2a:42:26: 00:43:9f:b8:bd:d9:87:a7:9e:d1:3f:93:0f:39:68: 02:1b:3a:89:8f:6c:3d:13:c8:e3:7a:52:d9:85:1e: 8a:f6:30:75:58:cf:d8:87:4d:b7:f3:15:15:fd:ec: a3:73:c4:c8:ca:27:fc:0f:c6:d2:ce:bb:4e:f1:1e: f1:41:3a:74:cd:4b:8f:44:b1:08:e6:fe:25:37:d4: 41:56:b6:c5:61:f0:0d:d5:66:19:36:a3:13:a7:1d: a5:32:ee:94:a0:25:57:cd:68:d9:73:4d:c8:ee:db: 5d:f8:e9:ab:a1:38:d6:8d:e2:1e:10:21:ea:46:e4: ff:b5:b7:f1:ac:02:59:b3:f3:9a:76:1c:11:ae:87: 05:e8:41:e8:bc:33:71:f4:0c:03:51:1b:89:25:91: d5:30:c5:b6:c8:49:a6:4b:85:0c:e8:dc:e0:35:30: 3d:87:2f:56:25:36:ca:bc:c7:98:3d:a8:63:01:3b: 21:40:ca:cd:31:98:d9:4b:6b:99:ac:ad:0d:23:b4: 40:45:2d:db:05:e1:6f:f4:35:9e:f1:13:49:8a:05: 01:2b:0e:09:41:04:dd:98:c8:82:74:3f:82:c2:a1: f5:94:de:65:40:f1:61:d8:9e:10:d3:9c:e5:fd:9f: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F7:0B:FE:C1:C2:FA:F5:DC:CB:E3:83:E3:E0:E5:AB:72:97:E9:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ad:93:18:55:f2:48:8f:75:30:73:27:b8:63:fb:54:a8:64: 80:45:b9:45:36:f0:76:08:41:fc:7b:0a:da:bb:cc:08:1c:88: 0f:d4:52:36:ab:df:cc:d2:0c:72:8d:90:a3:94:50:4c:d1:04: 6e:e1:0c:71:db:71:1b:a1:5b:ae:85:3b:ed:37:95:ac:a4:8a: 5c:80:89:39:7d:8a:0b:44:69:4a:c5:3d:48:46:62:77:5e:84: 3d:b5:b1:25:36:4c:b7:da:cf:12:0d:cd:4b:66:cc:63:54:55: 2f:a2:b1:39:55:b2:10:78:bc:6b:12:9e:42:c4:ba:29:d3:b3: 36:1d:aa:bf:b1:35:ae:16:60:0b:e9:7e:73:3c:40:11:6f:02: 1d:96:e1:17:57:2e:9c:10:93:a0:86:0d:df:bb:45:d3:7b:96: 13:a1:42:e0:65:1b:e7:de:32:cb:2c:8d:a4:23:dc:44:4f:a2: ee:c6:b7:58:1b:40:09:3f:b4:61:30:39:03:84:fc:a2:19:68: e6:70:e5:8d:9d:e0:45:f4:69:5d:13:e0:ec:e7:ea:c5:73:8a: a3:0e:2b:45:ca:70:6a:72:af:5e:f8:ee:fd:ac:ac:eb:7c:78: 5a:4d:23:41:15:2a:ac:0a:d4:4a:37:a8:ba:34:48:27:f2:9a: 0c:b7:33:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzWsSaL/4ZsxJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MWFkODAxZGEtMGIwMS00YmZhLWE0MDItYzU2OTM0Yzc1ZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktMv/v0uDh2pkLUqQiYAQ5+4vdmHp57RP5MP OWgCGzqJj2w9E8jjelLZhR6K9jB1WM/Yh0238xUV/eyjc8TIyif8D8bSzrtO8R7x QTp0zUuPRLEI5v4lN9RBVrbFYfAN1WYZNqMTpx2lMu6UoCVXzWjZc03I7ttd+Omr oTjWjeIeECHqRuT/tbfxrAJZs/OadhwRrocF6EHovDNx9AwDURuJJZHVMMW2yEmm S4UM6NzgNTA9hy9WJTbKvMeYPahjATshQMrNMZjZS2uZrK0NI7RARS3bBeFv9DWe 8RNJigUBKw4JQQTdmMiCdD+CwqH1lN5lQPFh2J4Q05zl/Z+cvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA33C/7Bwvr13Mvjg+Pg5atyl+mcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWRlNjM5NzItYTdmYS0z YWE2LTljZGMtN2Y0MjI0NjhjNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmtkxhV8kiPdTBzJ7hj+1SoZIBFuUU28HYIQfx7Ctq7zAgciA/UUjar 38zSDHKNkKOUUEzRBG7hDHHbcRuhW66FO+03laykilyAiTl9igtEaUrFPUhGYnde hD21sSU2TLfazxINzUtmzGNUVS+isTlVshB4vGsSnkLEuinTszYdqr+xNa4WYAvp fnM8QBFvAh2W4RdXLpwQk6CGDd+7RdN7lhOhQuBlG+feMsssjaQj3ERPou7Gt1gb QAk/tGEwOQOE/KIZaOZw5Y2d4EX0aV0T4Ozn6sVziqMOK0XKcGpyr1747v2srOt8 eFpNI0EVKqwK1Eo3qLo0SCfymgy3M3o= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:19 2024 by rpki-client on console-fra.rpki-client.org