$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa File: b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa (raw, json) Hash identifier: hn9F0JzS4E2hKx9RwAYwRUyb1wnEGa+gQXHjohI31o4= Subject key identifier: A4:57:BD:8B:44:D5:AE:38:02:DD:4E:FA:08:99:50:F4:0B:06:47:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E70942E6280A775C30CD140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 172.217.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:94:2e:62:80:a7:75:c3:0c:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=ac01f72f-7939-483e-9e72-89f4f384b773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f6:65:5f:06:7d:15:a8:c6:ad:82:34:ae:8c: 64:7c:7e:92:c5:af:40:1b:0f:e3:79:46:e4:58:95: be:77:96:0d:1b:bc:99:12:ae:dd:4f:a7:6e:10:53: cb:45:4a:7d:18:e3:8e:71:f4:79:26:2a:44:b8:49: 1a:97:ec:f6:4d:22:d6:7b:0e:f1:10:be:9d:8a:66: cf:46:23:c6:d9:d9:50:4b:b0:16:bf:c1:09:80:62: be:29:21:39:a7:86:ae:f6:6a:4c:3c:53:ee:4b:44: 8c:b7:cd:a5:b4:e2:14:ff:30:df:47:81:5a:e4:86: e0:35:47:2b:f6:05:77:4a:90:3a:43:93:a7:84:72: 25:61:60:da:0f:9b:93:38:2f:7d:bb:8a:d7:d4:91: 09:b5:da:fd:b2:eb:28:68:be:ba:5c:fe:f1:ce:fe: e3:aa:8c:69:9f:4e:79:9e:0b:1e:ae:92:3b:e7:2f: 80:b8:8b:ff:da:26:4a:86:db:9c:ce:eb:58:67:11: a9:d7:58:f0:90:4e:04:0b:92:f8:5b:aa:1c:a8:2e: 31:83:46:ff:e6:98:8e:47:54:31:79:e5:b5:0b:53: 58:19:c6:e8:d5:4f:d4:92:5e:c0:83:13:99:b2:50: aa:4c:a7:0e:5e:b5:c6:af:f1:5d:0c:e2:96:0c:a9: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:57:BD:8B:44:D5:AE:38:02:DD:4E:FA:08:99:50:F4:0B:06:47:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2a6ce32-0de7-3b52-b6bb-216a3d3db2f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:39:fa:c4:88:a8:80:b4:f5:a2:af:83:42:4a:d1:ff:36:58: 31:9d:59:0f:29:a9:8c:e0:05:12:06:60:75:25:b8:79:9b:f4: c7:22:70:e2:de:28:2b:cb:b0:b3:bd:91:df:62:44:81:43:04: 2b:32:1e:22:47:0f:72:ad:50:c3:56:ac:f8:24:19:87:8c:3a: 40:da:63:43:a3:e7:b5:fe:dd:23:a6:6c:8f:8a:af:d9:83:68: 97:46:fa:4d:49:a0:1e:92:fb:e6:92:80:25:24:ee:00:9e:cf: f3:df:ca:91:c8:e4:bb:ac:66:65:43:80:69:cd:ed:7c:6e:5f: f4:fd:a0:01:ef:e0:9b:62:7d:8c:61:86:6e:20:98:20:fa:98: b0:dc:5e:fc:75:b2:e7:af:ba:4f:77:ac:3e:97:2e:af:07:38: 7c:f6:74:6c:11:20:6c:7c:c8:6f:fd:b3:30:12:37:bb:6a:4f: 97:19:75:22:f9:1c:8a:9d:f1:ad:13:ae:f4:f1:be:90:fd:f5: 7e:b9:44:6e:82:52:a0:10:fc:c9:06:93:81:7e:4e:39:61:22: 70:24:da:36:6f:27:72:bf:32:86:e5:76:a1:76:47:24:96:e8: 2c:91:3e:f0:31:b8:7b:be:02:64:93:17:51:2b:01:9f:86:1d: a1:41:62:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecJQuYoCndcMM0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk YWMwMWY3MmYtNzkzOS00ODNlLTllNzItODlmNGYzODRiNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/ZlXwZ9FajGrYI0roxkfH6Sxa9AGw/jeUbk WJW+d5YNG7yZEq7dT6duEFPLRUp9GOOOcfR5JipEuEkal+z2TSLWew7xEL6dimbP RiPG2dlQS7AWv8EJgGK+KSE5p4au9mpMPFPuS0SMt82ltOIU/zDfR4Fa5IbgNUcr 9gV3SpA6Q5OnhHIlYWDaD5uTOC99u4rX1JEJtdr9susoaL66XP7xzv7jqoxpn055 ngserpI75y+AuIv/2iZKhtuczutYZxGp11jwkE4EC5L4W6ocqC4xg0b/5piOR1Qx eeW1C1NYGcbo1U/Ukl7AgxOZslCqTKcOXrXGr/FdDOKWDKmhwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRXvYtE1a44At1O+giZUPQLBkeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJhNmNlMzItMGRlNy0z YjUyLWI2YmItMjE2YTNkM2RiMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE5+sSIqIC09aKvg0JK0f82WDGdWQ8pqYzgBRIGYHUluHmb9McicOLe KCvLsLO9kd9iRIFDBCsyHiJHD3KtUMNWrPgkGYeMOkDaY0Oj57X+3SOmbI+Kr9mD aJdG+k1JoB6S++aSgCUk7gCez/PfypHI5LusZmVDgGnN7XxuX/T9oAHv4JtifYxh hm4gmCD6mLDcXvx1suevuk93rD6XLq8HOHz2dGwRIGx8yG/9szASN7tqT5cZdSL5 HIqd8a0TrvTxvpD99X65RG6CUqAQ/MkGk4F+TjlhInAk2jZvJ3K/MobldqF2RySW 6CyRPvAxuHu+AmSTF1ErAZ+GHaFBYmA= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:19 2024 by rpki-client on console-fra.rpki-client.org