$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa File: b803768f-6f65-3934-87a6-cba4dc1d2977.roa (raw, json) Hash identifier: 5nOK2lQ4EQzYOC7RUAGttq7GW9lBSV8HkpjZ0tMPM14= Subject key identifier: F4:5A:A2:40:91:13:97:29:55:BE:F1:4F:C7:41:E8:40:7F:B6:5D:27 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AB1540D300BC74BA4DF80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.217.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:b1:54:0d:30:0b:c7:4b:a4:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=95ad7732-15a0-411c-aede-912801fcdcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:9c:ae:4a:bf:25:b8:f1:e7:42:64:bd:5f: 66:6e:ad:e7:85:51:b4:e3:0d:34:61:19:3a:7e:72: d0:e0:52:67:e5:a0:eb:42:ac:21:18:ee:88:fc:b2: c0:dd:41:57:25:25:ab:47:14:9b:6b:db:5e:e1:01: e6:7e:29:84:29:ca:46:d6:11:cf:63:78:7a:57:3b: f8:94:cf:2f:47:63:43:ee:5b:e6:4f:52:f6:50:04: 7b:e3:2f:74:8a:11:aa:b9:a7:b9:7f:ee:7b:1f:51: 98:dd:36:38:fe:f6:a5:ad:b4:2e:01:8f:dd:90:2f: 75:35:6a:86:3a:01:3e:63:11:f9:a1:84:03:a4:e6: 54:49:72:41:0f:44:ce:8c:1f:1b:55:ae:5c:22:59: ec:e1:12:a0:75:db:68:69:47:b0:d8:75:2d:ec:ad: f1:30:45:80:54:74:a6:21:b9:94:61:a1:53:10:20: 9c:1f:7d:d6:ce:bb:0f:96:aa:c0:c6:93:4e:59:a3: 83:08:b1:97:95:1f:e5:29:6d:99:89:d0:4e:79:2a: cb:e2:64:7e:cc:b4:6e:57:54:ab:00:a9:6f:6b:2f: 99:19:09:70:c5:45:5a:41:a0:7a:22:b2:a9:bb:c0: c3:6d:53:87:79:4e:68:0b:d7:ed:44:9f:16:9e:86: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5A:A2:40:91:13:97:29:55:BE:F1:4F:C7:41:E8:40:7F:B6:5D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:68:fc:d2:74:ed:ca:dc:3f:e1:8a:3e:31:43:0c:29:a3:88: aa:a9:94:93:26:2c:b6:39:51:96:af:99:da:b4:b2:37:c5:2f: 96:fa:8f:82:cf:0e:ef:26:89:95:65:50:bf:e3:b2:78:b5:6c: 6f:51:2b:66:6d:11:b4:85:2d:7c:91:7f:df:d1:55:60:1d:dd: 2a:bb:25:6c:23:f5:50:f3:57:4f:25:2a:1e:36:68:92:e7:71: cc:d7:4c:55:f9:5e:09:17:b7:e9:1b:4f:71:38:7e:09:13:57: eb:9d:28:3e:1e:ba:c0:44:48:09:ef:07:a7:f8:b1:01:f6:4f: da:4a:bc:57:ef:3c:fc:b2:0b:80:8d:20:ea:8a:a0:37:85:21: 72:0b:5f:f4:74:05:6f:c7:0d:9f:f7:94:ad:29:ef:4b:71:b1: 5a:86:a2:c6:01:7b:27:a4:b1:86:6d:6f:3a:f6:2e:4b:6c:d8: 54:ee:e6:7a:7d:fc:51:d4:7a:e5:c3:1c:bd:98:80:0d:04:9c: 6f:cb:04:30:20:7e:7e:9a:83:26:3c:53:c9:cc:a9:f9:b4:dd: 4c:1f:33:27:f4:bc:97:53:f8:20:bd:e3:14:ad:57:3c:51:eb: 11:28:6d:e2:10:d5:a1:66:a2:da:6c:b5:a2:dd:2d:3c:60:2b: 32:68:46:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKrFUDTALx0uk34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OTVhZDc3MzItMTVhMC00MTFjLWFlZGUtOTEyODAxZmNkY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreScrkq/Jbjx50JkvV9mbq3nhVG04w00YRk6 fnLQ4FJn5aDrQqwhGO6I/LLA3UFXJSWrRxSba9te4QHmfimEKcpG1hHPY3h6Vzv4 lM8vR2ND7lvmT1L2UAR74y90ihGquae5f+57H1GY3TY4/valrbQuAY/dkC91NWqG OgE+YxH5oYQDpOZUSXJBD0TOjB8bVa5cIlns4RKgddtoaUew2HUt7K3xMEWAVHSm IbmUYaFTECCcH33WzrsPlqrAxpNOWaODCLGXlR/lKW2ZidBOeSrL4mR+zLRuV1Sr AKlvay+ZGQlwxUVaQaB6IrKpu8DDbVOHeU5oC9ftRJ8WnobQcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRaokCRE5cpVb7xT8dB6EB/tl0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjgwMzc2OGYtNmY2NS0z OTM0LTg3YTYtY2JhNGRjMWQyOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVo/NJ07crcP+GKPjFDDCmjiKqplJMmLLY5UZavmdq0sjfFL5b6j4LP Du8miZVlUL/jsni1bG9RK2ZtEbSFLXyRf9/RVWAd3Sq7JWwj9VDzV08lKh42aJLn cczXTFX5XgkXt+kbT3E4fgkTV+udKD4eusBESAnvB6f4sQH2T9pKvFfvPPyyC4CN IOqKoDeFIXILX/R0BW/HDZ/3lK0p70txsVqGosYBeyeksYZtbzr2Lkts2FTu5np9 /FHUeuXDHL2YgA0EnG/LBDAgfn6agyY8U8nMqfm03UwfMyf0vJdT+CC94xStVzxR 6xEobeIQ1aFmotpstaLdLTxgKzJoRjQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:00 2024 by rpki-client on console-ams.rpki-client.org