$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1d37ad8-a7e8-37bb-959a-82e32375402d.roa File: b1d37ad8-a7e8-37bb-959a-82e32375402d.roa (raw, json) Hash identifier: Ho3I0ijjJ9q1qXcj1zdMrQOs90sLKEvzPlZiEl9eo5Q= Subject key identifier: D6:C6:26:2F:E8:14:51:7F:29:66:63:05:45:91:24:97:57:80:11:BD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AA45D46E304F6A438D760 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1d37ad8-a7e8-37bb-959a-82e32375402d.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.217.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:a4:5d:46:e3:04:f6:a4:38:d7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=0302e54a-dda3-4e79-a771-6f3c3971c1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:95:a0:3e:76:00:4c:d2:1b:cd:e9:9f:0d: 51:b9:ab:13:a4:20:0a:ed:14:1f:ce:b8:b7:ca:5c: f8:98:3f:b9:cd:8e:65:28:9d:e6:42:39:4a:d8:81: 9f:6f:7b:9e:24:b3:21:8f:ce:c8:2c:11:eb:de:59: e9:6f:f6:93:d8:e2:12:f5:df:3a:f8:cb:2f:db:13: 58:d9:d7:55:da:46:68:1a:80:70:78:50:a7:83:f5: d1:43:ea:41:08:3b:4e:d1:2b:1d:92:9e:e5:86:a7: a5:1b:d7:36:72:98:2c:9f:92:2c:84:2b:57:c3:e8: 91:e6:ce:8a:1f:0e:a6:38:d1:9d:a4:c7:57:b0:39: 1a:83:b0:9c:fc:90:3f:3a:3d:2f:5f:d0:c2:0e:02: 03:88:dd:43:aa:08:64:40:fe:f8:71:e2:96:8f:88: 8b:ef:01:f4:39:d0:2b:1a:b3:09:3c:79:26:9d:fa: 64:cd:5e:20:ea:f6:6a:56:49:e9:c3:2d:95:70:6f: 08:ed:f2:da:05:3e:f3:42:47:35:23:44:25:3f:62: 84:cc:ec:c6:e2:a2:9e:e3:3c:b7:2c:2d:2a:77:01: 1f:9f:24:5a:1c:51:7d:11:42:2a:70:ce:77:f8:4f: 42:5d:d1:e8:c6:a0:46:da:97:ee:65:ae:87:af:78: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C6:26:2F:E8:14:51:7F:29:66:63:05:45:91:24:97:57:80:11:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1d37ad8-a7e8-37bb-959a-82e32375402d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:1b:1c:a4:37:83:38:14:86:fa:a6:69:07:20:4d:6f:54:68: e2:23:b3:22:85:4c:a7:ad:93:fc:fc:2b:d0:9a:8e:47:8a:f0: 80:98:5a:7c:3a:a6:cc:36:32:39:c5:c1:12:f2:b1:2b:0c:1e: c3:78:94:60:d5:c4:5e:d3:31:75:d2:24:bb:fb:23:ea:6a:e1: ed:90:18:35:00:68:a4:c8:a3:55:c2:eb:62:5a:bf:c5:59:85: 3d:31:92:7f:7d:4c:e4:e7:14:08:52:c8:9b:d4:c2:99:4e:bd: 11:a0:77:94:4a:b4:ed:24:8a:2a:5b:d9:3d:13:59:01:13:2e: 97:74:24:d9:f9:9c:d9:1e:fa:15:73:dd:81:76:b8:6e:0a:e6: 72:00:dc:00:7c:e5:41:9c:12:58:11:9c:43:64:46:39:ab:fc: 4b:2c:35:71:36:67:e3:b9:61:69:29:7b:37:1a:2e:75:61:df: 4c:e9:b0:32:4d:89:a9:af:7a:4d:d4:df:9a:58:05:12:65:a9: af:71:e5:f5:f0:aa:33:4e:56:33:92:a4:6a:4d:60:c9:b1:e9: 69:e5:23:8d:a6:36:c9:63:2f:86:33:07:f8:1d:fa:3a:b3:b9: 3c:5c:78:43:0c:83:73:d6:26:ff:9f:5b:de:79:70:3e:af:53: 41:2d:a7:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKqRdRuME9qQ412AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MDMwMmU1NGEtZGRhMy00ZTc5LWE3NzEtNmYzYzM5NzFjMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxaVoD52AEzSG83pnw1RuasTpCAK7RQfzri3 ylz4mD+5zY5lKJ3mQjlK2IGfb3ueJLMhj87ILBHr3lnpb/aT2OIS9d86+Msv2xNY 2ddV2kZoGoBweFCng/XRQ+pBCDtO0Ssdkp7lhqelG9c2cpgsn5IshCtXw+iR5s6K Hw6mONGdpMdXsDkag7Cc/JA/Oj0vX9DCDgIDiN1DqghkQP74ceKWj4iL7wH0OdAr GrMJPHkmnfpkzV4g6vZqVknpwy2VcG8I7fLaBT7zQkc1I0QlP2KEzOzG4qKe4zy3 LC0qdwEfnyRaHFF9EUIqcM53+E9CXdHoxqBG2pfuZa6Hr3jTRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbGJi/oFFF/KWZjBUWRJJdXgBG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjFkMzdhZDgtYTdlOC0z N2JiLTk1OWEtODJlMzIzNzU0MDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIbHKQ3gzgUhvqmaQcgTW9UaOIjsyKFTKetk/z8K9CajkeK8ICYWnw6 psw2MjnFwRLysSsMHsN4lGDVxF7TMXXSJLv7I+pq4e2QGDUAaKTIo1XC62Jav8VZ hT0xkn99TOTnFAhSyJvUwplOvRGgd5RKtO0kiipb2T0TWQETLpd0JNn5nNke+hVz 3YF2uG4K5nIA3AB85UGcElgRnENkRjmr/EssNXE2Z+O5YWkpezcaLnVh30zpsDJN iamvek3U35pYBRJlqa9x5fXwqjNOVjOSpGpNYMmx6WnlI42mNsljL4YzB/gd+jqz uTxceEMMg3PWJv+fW955cD6vU0Etp3Q= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:15 2024 by rpki-client on console-ams.rpki-client.org