$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa File: dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa (raw, json) Hash identifier: kJLO7ghtCsKLzqxjVN6E54qvMwF3M7mk4AdWvw5ntdE= Subject key identifier: D8:9A:F8:98:C2:86:90:FB:38:16:08:1B:42:9A:87:4C:67:27:7E:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847D3673E181614DE19E2AE1000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa Signing time: Sat 09 Nov 2024 20:43:32 +0000 ROA not before: Sat 09 Nov 2024 20:43:32 +0000 ROA not after: Fri 07 Feb 2025 20:43:32 +0000 asID: 15169 IP address blocks: 172.217.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d3:67:3e:18:16:14:de:19:e2:ae:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 9 20:43:32 2024 GMT Not After : Feb 7 20:43:32 2025 GMT Subject: CN=6decce0c-0312-4f36-bef4-d909b8153b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:d8:40:a2:c8:a0:cd:ba:50:51:74:56:e0: 7e:33:de:dd:31:af:65:82:fe:20:06:21:8b:83:77: 99:e1:e3:01:8f:de:f3:35:e8:41:43:c1:71:90:f6: 79:5f:8e:24:93:80:ef:6b:e1:1b:e1:96:e2:67:5b: 2b:36:7d:46:f4:5e:62:b2:75:cc:85:c6:98:96:47: 8e:f5:9c:68:32:16:e1:20:99:a8:e2:42:88:2b:4c: f8:0f:d4:93:36:29:e8:0a:51:97:87:a3:c1:8a:e4: 10:14:0d:20:4a:fa:e3:4b:81:70:77:50:16:81:c9: 20:97:5a:1b:58:3b:68:29:c5:8b:3c:15:8e:00:b7: 6c:a2:17:58:bf:b8:71:41:4b:f8:a9:7d:59:d9:4e: 8d:9a:e2:af:26:10:cf:94:91:a8:55:53:30:9e:86: 9b:56:44:6d:a0:8d:fe:7c:9c:46:b5:5c:c9:08:4e: b3:66:b8:43:9e:6c:c0:a0:f8:e0:7c:e6:ba:67:6b: e9:2a:3b:ca:65:3c:01:c9:98:19:4c:32:4b:62:eb: 8f:a7:18:bd:7c:75:ee:b8:14:25:e3:f6:06:62:7a: 0f:db:0c:19:36:be:f9:6f:e8:76:df:aa:a0:72:3f: 57:3c:ee:d9:17:ba:8d:2c:3a:19:e2:af:9a:57:4a: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9A:F8:98:C2:86:90:FB:38:16:08:1B:42:9A:87:4C:67:27:7E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6d:0c:b7:10:59:f2:7a:b6:23:d6:4d:a1:4e:f5:9d:ea:a1: de:6b:49:b4:e7:1b:59:9e:b7:f6:b0:b1:b9:da:7f:3b:98:d3: 95:15:d9:2e:d7:8b:98:44:de:ea:5a:62:22:60:57:c0:03:a0: 79:e3:39:dd:17:f3:7c:fb:9b:53:ad:77:df:38:40:50:6d:8a: 54:f5:eb:20:a2:25:28:c9:f0:6c:bb:80:e0:3f:56:c3:4d:f6: 43:9e:20:d9:0d:de:b3:d4:3d:e7:cc:a6:3c:6b:3e:31:70:55: 39:71:b6:7d:cb:f3:be:24:4f:9e:37:4b:44:3b:75:70:c6:11: 1b:4d:f0:f9:47:a6:a4:be:06:be:dc:7c:28:86:be:c6:24:94: 28:43:ff:cb:08:36:e0:12:44:a5:11:30:2c:e6:eb:84:a9:cf: 65:5a:39:6f:30:b5:68:47:2a:13:03:e9:49:7e:54:74:35:63: b7:4a:4f:7f:7a:06:32:3a:f2:23:f7:5b:b8:e7:04:9a:69:66: 2b:22:ba:16:b5:92:d3:eb:34:44:97:a2:10:e3:69:e6:9f:3f: 74:8a:8b:a2:ab:a4:89:eb:22:44:bd:4f:5a:a8:21:26:1f:92: 14:3e:c0:b2:d1:b3:1b:3d:a5:c8:be:2d:ed:47:da:20:ed:5c: 89:7f:fa:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfTZz4YFhTeGeKuEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTEwOTIwNDMzMloXDTI1MDIwNzIwNDMzMlowLzEtMCsGA1UEAxMk NmRlY2NlMGMtMDMxMi00ZjM2LWJlZjQtZDkwOWI4MTUzYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpDYQKLIoM26UFF0VuB+M97dMa9lgv4gBiGL g3eZ4eMBj97zNehBQ8FxkPZ5X44kk4Dva+Eb4ZbiZ1srNn1G9F5isnXMhcaYlkeO 9ZxoMhbhIJmo4kKIK0z4D9STNinoClGXh6PBiuQQFA0gSvrjS4Fwd1AWgckgl1ob WDtoKcWLPBWOALdsohdYv7hxQUv4qX1Z2U6NmuKvJhDPlJGoVVMwnoabVkRtoI3+ fJxGtVzJCE6zZrhDnmzAoPjgfOa6Z2vpKjvKZTwByZgZTDJLYuuPpxi9fHXuuBQl 4/YGYnoP2wwZNr75b+h236qgcj9XPO7ZF7qNLDoZ4q+aV0rDKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNia+JjChpD7OBYIG0Kah0xnJ34MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZiOGM1ZmYtNDA0NS0z NzJmLWJiMzEtOTNmNTE2NTFjMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNtDLcQWfJ6tiPWTaFO9Z3qod5rSbTnG1met/awsbnafzuY05UV2S7X i5hE3upaYiJgV8ADoHnjOd0X83z7m1Otd984QFBtilT16yCiJSjJ8Gy7gOA/VsNN 9kOeINkN3rPUPefMpjxrPjFwVTlxtn3L874kT543S0Q7dXDGERtN8PlHpqS+Br7c fCiGvsYklChD/8sINuASRKURMCzm64Spz2VaOW8wtWhHKhMD6Ul+VHQ1Y7dKT396 BjI68iP3W7jnBJppZisiuha1ktPrNESXohDjaeafP3SKi6KrpInrIkS9T1qoISYf khQ+wLLRsxs9pci+Le1H2iDtXIl/+tY= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:17 2024 by rpki-client on console-fra.rpki-client.org