$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfd34f80-5b5d-329f-818d-08233d807954.roa File: cfd34f80-5b5d-329f-818d-08233d807954.roa (raw, json) Hash identifier: gOxXn/9iISWXUCySHV1hDg/AvaRxTnXMXWm1GtWh4C0= Subject key identifier: A6:22:E1:36:A5:0E:C3:37:E5:D9:CC:1A:11:D0:77:B2:49:C3:E9:93 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584546259E1191E4ADB3C4E499C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfd34f80-5b5d-329f-818d-08233d807954.roa Signing time: Wed 20 Mar 2024 20:48:27 +0000 ROA not before: Wed 20 Mar 2024 20:48:27 +0000 ROA not after: Tue 18 Jun 2024 20:48:27 +0000 asID: 15169 IP address blocks: 172.217.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:25:9e:11:91:e4:ad:b3:c4:e4:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:48:27 2024 GMT Not After : Jun 18 20:48:27 2024 GMT Subject: CN=abf1deff-70e0-48a9-bee0-f14cf8e62fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:b3:bf:d8:fb:f2:d5:63:c7:83:38:8f:71: 70:b1:ef:86:96:fb:96:95:63:d3:e5:97:5b:78:56: 0d:54:10:1e:d0:37:38:80:78:55:aa:56:dd:8b:5a: 95:50:4d:bb:c6:9b:55:15:4e:cf:f4:c8:ad:12:58: 33:67:a9:31:11:79:28:90:1f:07:0f:44:e5:6e:2c: 61:03:67:96:86:b7:da:ae:65:dc:f9:75:a9:d3:94: 42:da:08:9d:5c:4b:91:c2:25:01:f6:db:e0:2a:13: 24:0d:bf:97:c0:93:41:89:38:e6:73:51:73:72:41: 13:d4:ff:96:3d:5c:49:ae:c0:74:fe:0b:08:ef:78: 19:60:36:00:a8:f7:ca:2f:20:af:23:06:e7:41:46: 4f:9c:5a:e3:cc:f8:7a:3d:ed:83:c0:60:6c:8b:03: 96:67:6a:62:09:79:d0:3c:6f:3d:66:aa:4e:c1:97: cb:a5:a4:b4:2d:d3:28:8b:d4:d0:25:8b:4f:65:aa: a7:ac:b5:90:32:d4:78:61:49:fc:29:6f:8f:c9:fa: 43:14:52:33:8b:83:58:e2:6f:23:34:bf:1e:6b:25: c3:84:07:11:47:33:c3:7d:9b:a3:5f:23:90:e1:38: e2:1c:35:4a:bd:5b:be:a7:11:f5:95:54:2f:22:85: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:22:E1:36:A5:0E:C3:37:E5:D9:CC:1A:11:D0:77:B2:49:C3:E9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfd34f80-5b5d-329f-818d-08233d807954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:17:1c:60:db:6e:1d:da:da:7d:d8:c0:0c:e7:fc:23:3f:43: b9:7a:bc:c4:d8:75:c1:b2:4d:5e:e5:6f:a0:07:ab:e7:f1:a0: 5c:9f:1b:a5:63:28:a4:e3:b5:b3:8a:01:dc:67:da:5d:d5:41: c9:a5:38:35:16:8f:21:09:61:0b:30:98:53:4a:9c:44:b2:e7: 72:8b:c4:05:88:b7:2f:5d:9c:29:fa:e0:9b:10:ae:d2:e6:a5: e0:b0:3b:68:bc:29:42:20:80:a5:4f:1c:09:15:bd:2b:71:87: 4b:9b:65:42:25:08:a6:d2:b7:90:a2:76:f9:7a:cd:03:c8:53: 26:2d:97:35:cb:23:2b:2a:5d:ad:f0:ba:af:9f:34:f0:08:c2: ca:42:1b:fb:10:42:64:04:41:9b:6a:49:88:d6:e5:68:6f:38: 14:95:ae:a7:02:c3:92:17:21:3e:24:54:64:f4:96:9b:2f:dc: 45:18:f4:9b:61:11:54:d7:19:0c:99:90:94:51:9f:cf:f8:f1: 50:27:c1:f7:46:54:ae:0c:13:57:54:49:be:3d:75:7a:08:1a: 97:4c:ad:56:e1:f5:e1:4c:e6:6a:e7:b5:d1:34:dc:cb:fa:ec: 37:7f:f3:04:c6:c0:cd:c1:62:48:2a:bb:f3:b7:8e:87:f7:1b: a9:41:15:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJZ4RkeSts8TkmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNDgyN1oXDTI0MDYxODIwNDgyN1owLzEtMCsGA1UEAxMk YWJmMWRlZmYtNzBlMC00OGE5LWJlZTAtZjE0Y2Y4ZTYyZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD+zv9j78tVjx4M4j3Fwse+GlvuWlWPT5Zdb eFYNVBAe0Dc4gHhVqlbdi1qVUE27xptVFU7P9MitElgzZ6kxEXkokB8HD0Tlbixh A2eWhrfarmXc+XWp05RC2gidXEuRwiUB9tvgKhMkDb+XwJNBiTjmc1FzckET1P+W PVxJrsB0/gsI73gZYDYAqPfKLyCvIwbnQUZPnFrjzPh6Pe2DwGBsiwOWZ2piCXnQ PG89ZqpOwZfLpaS0LdMoi9TQJYtPZaqnrLWQMtR4YUn8KW+PyfpDFFIzi4NY4m8j NL8eayXDhAcRRzPDfZujXyOQ4TjiHDVKvVu+pxH1lVQvIoXaowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYi4TalDsM35dnMGhHQd7JJw+mTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2ZkMzRmODAtNWI1ZC0z MjlmLTgxOGQtMDgyMzNkODA3OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkXHGDbbh3a2n3YwAzn/CM/Q7l6vMTYdcGyTV7lb6AHq+fxoFyfG6Vj KKTjtbOKAdxn2l3VQcmlODUWjyEJYQswmFNKnESy53KLxAWIty9dnCn64JsQrtLm peCwO2i8KUIggKVPHAkVvStxh0ubZUIlCKbSt5Cidvl6zQPIUyYtlzXLIysqXa3w uq+fNPAIwspCG/sQQmQEQZtqSYjW5WhvOBSVrqcCw5IXIT4kVGT0lpsv3EUY9Jth EVTXGQyZkJRRn8/48VAnwfdGVK4ME1dUSb49dXoIGpdMrVbh9eFM5mrntdE03Mv6 7Dd/8wTGwM3BYkgqu/O3jof3G6lBFTk= -----END CERTIFICATE-----Generated at Sat May 18 01:58:35 2024 by rpki-client on console-ams.rpki-client.org