$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa File: bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa (raw, json) Hash identifier: KRzz1X+uCLqIUeHOxMesLlBAGQEP2redrn780hUPBdg= Subject key identifier: 50:E9:3A:9D:B7:98:E9:3F:03:19:9C:FB:76:60:03:E5:67:67:02:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5816D7CF1548B07576C1380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6d:7c:f1:54:8b:07:57:6c:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ee2c32e7-880a-4a89-8893-7760e786e012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:b2:d3:09:8e:04:24:b2:56:5e:eb:d0:81: 2c:27:28:34:33:ed:02:4a:74:53:9c:96:ce:40:46: d8:31:2d:e5:69:28:e3:64:d6:67:46:2d:77:47:10: a2:72:ed:b5:89:be:57:54:7f:cf:4d:a2:a6:db:e3: 11:73:88:29:bf:13:22:43:d2:89:9e:77:38:9d:cb: ab:67:43:da:73:db:a5:1c:24:13:85:cb:2b:ec:0c: 47:fa:2a:1c:b2:9f:e6:3d:fa:56:10:f0:79:d6:8e: d1:0b:0b:e9:0e:ea:fb:e4:e7:26:ed:4e:a0:fd:75: 9d:68:ef:3a:a2:cc:5a:e4:8d:a5:69:b4:ff:9c:4c: d0:a1:a2:07:08:95:04:79:7d:6b:13:a5:ed:17:78: 8b:82:d3:0c:29:ec:49:4f:52:32:4f:40:83:50:dc: cf:ab:48:2e:e3:17:41:77:cd:bc:90:01:d7:00:83: 67:fc:be:63:bf:4a:d9:a2:b3:cf:8f:62:04:a4:01: 8c:1a:5f:ed:42:17:51:1a:f5:71:d3:67:fd:cd:a2: 7e:59:f3:7f:4e:d4:33:07:6e:d5:dd:64:7e:33:1b: c5:9e:aa:58:bd:6b:ef:d4:ce:f7:97:43:b7:2b:7a: 28:cf:00:0a:a2:56:76:4a:0e:12:47:8b:28:73:44: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E9:3A:9D:B7:98:E9:3F:03:19:9C:FB:76:60:03:E5:67:67:02:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb7e7eca-0e38-3b17-b7cc-66f97a74650e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ba:45:e6:0c:77:23:55:f6:51:cc:6e:01:e3:b7:79:d3:08: 76:a2:f6:9b:17:9a:c2:d4:7f:55:27:98:62:8e:c4:7f:5e:30: 34:90:e2:c9:53:22:28:81:ed:7c:f7:32:15:07:c4:cc:e1:bb: 02:11:73:70:9e:37:74:3a:52:01:73:54:77:cc:75:4e:20:b3: 03:3c:b1:86:e6:6a:c0:24:92:94:97:d7:3f:50:53:73:5b:e1: c2:50:fd:3d:df:9a:cc:c8:ae:80:88:8f:4c:c6:52:aa:d2:63: 1a:e1:1d:5f:bf:42:c8:c3:c4:a9:a3:98:7c:12:e1:58:aa:b0: 91:5d:69:8d:76:83:7a:2b:bd:b7:1f:89:4e:27:d9:2f:fe:45: 53:f3:dc:5b:94:b1:ca:c0:02:73:6b:d7:cd:9b:3c:4f:43:78: 77:2e:f7:3a:ed:08:d0:08:e1:63:75:32:7d:f7:ef:b0:be:27: 67:c3:a4:d0:1d:ce:73:ab:b3:97:64:e9:93:36:9a:c7:ab:a5: 9d:eb:2d:86:cd:1b:c6:07:a6:25:43:87:b6:45:19:1f:f3:85: 9e:70:0e:90:bd:ac:11:85:83:b9:f3:4d:2d:19:b3:88:fb:f4: 35:6b:ee:0a:74:4f:24:62:ac:9c:96:db:42:3b:c1:26:1c:b0: 9c:99:db:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgW188VSLB1dsE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWUyYzMyZTctODgwYS00YTg5LTg4OTMtNzc2MGU3ODZlMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCCy0wmOBCSyVl7r0IEsJyg0M+0CSnRTnJbO QEbYMS3laSjjZNZnRi13RxCicu21ib5XVH/PTaKm2+MRc4gpvxMiQ9KJnnc4ncur Z0Pac9ulHCQThcsr7AxH+iocsp/mPfpWEPB51o7RCwvpDur75Ocm7U6g/XWdaO86 osxa5I2labT/nEzQoaIHCJUEeX1rE6XtF3iLgtMMKexJT1IyT0CDUNzPq0gu4xdB d828kAHXAINn/L5jv0rZorPPj2IEpAGMGl/tQhdRGvVx02f9zaJ+WfN/TtQzB27V 3WR+MxvFnqpYvWvv1M73l0O3K3oozwAKolZ2Sg4SR4soc0RlEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDpOp23mOk/Axmc+3ZgA+VnZwKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmI3ZTdlY2EtMGUzOC0z YjE3LWI3Y2MtNjZmOTdhNzQ2NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW6ReYMdyNV9lHMbgHjt3nTCHai9psXmsLUf1UnmGKOxH9eMDSQ4slT IiiB7Xz3MhUHxMzhuwIRc3CeN3Q6UgFzVHfMdU4gswM8sYbmasAkkpSX1z9QU3Nb 4cJQ/T3fmszIroCIj0zGUqrSYxrhHV+/QsjDxKmjmHwS4ViqsJFdaY12g3orvbcf iU4n2S/+RVPz3FuUscrAAnNr182bPE9DeHcu9zrtCNAI4WN1Mn3377C+J2fDpNAd znOrs5dk6ZM2mserpZ3rLYbNG8YHpiVDh7ZFGR/zhZ5wDpC9rBGFg7nzTS0Zs4j7 9DVr7gp0TyRirJyW20I7wSYcsJyZ26c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:03 2025 by rpki-client