$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea185470-3e9a-3696-a828-c5a306242e4e.roa File: ea185470-3e9a-3696-a828-c5a306242e4e.roa (raw, json) Hash identifier: wKDlQebyBYDnjUYqOlNqLdTw+a99e9qbYxAjTiWjiis= Subject key identifier: 9E:31:6F:8D:80:E5:A6:B7:79:37:6A:8A:5C:45:D6:64:AA:C3:6D:9F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E706E5791A63DCE8DE13820 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea185470-3e9a-3696-a828-c5a306242e4e.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 172.217.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:6e:57:91:a6:3d:ce:8d:e1:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=ede367d3-58cf-4bf7-8bae-e2c1ab2b332b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:94:5a:ce:1e:46:f6:27:92:72:8a:10:d0:d2: 4e:4f:a7:5c:d8:ce:bf:e4:eb:76:93:c2:ee:bf:42: 0e:3a:64:bd:6d:e0:18:ac:0c:a6:b1:0e:dc:f0:d1: 99:4d:6a:8a:c3:e3:5e:48:eb:f5:92:1b:9a:30:c4: 68:0b:39:09:75:87:f9:7a:63:a9:e9:84:c2:e3:cf: 00:ab:e1:c6:49:3e:5c:c6:13:07:35:65:14:4e:6f: 21:91:3b:0f:fe:d1:a2:7b:41:25:41:50:75:3c:5d: b4:15:41:af:1b:2d:05:2f:e9:dc:cf:3c:a9:d3:bd: 3e:d2:b1:64:d8:bc:32:36:64:ca:12:f4:dd:17:73: 31:0f:f8:de:d1:58:e9:2c:b8:ac:0d:74:f1:3c:4d: 8b:98:a2:ec:df:c0:a5:11:4a:9a:07:08:22:8c:23: 5f:b8:c1:cf:02:41:32:75:e1:71:9d:29:12:9d:c7: be:eb:21:f4:ef:93:b3:e0:e3:d6:59:89:00:ed:93: 2c:bf:07:c3:57:92:10:63:3a:c5:9d:0c:45:00:8a: 1b:14:98:96:50:bd:f9:46:10:04:ca:5b:de:d9:b9: a2:56:4b:1e:fb:6a:6e:59:25:55:42:39:dc:44:b4: d1:3e:06:06:8e:93:ed:1f:56:01:d4:4f:e4:1f:e2: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:31:6F:8D:80:E5:A6:B7:79:37:6A:8A:5C:45:D6:64:AA:C3:6D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea185470-3e9a-3696-a828-c5a306242e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:94:73:16:5a:6a:6a:bb:c0:ed:0f:90:45:1a:70:e2:dd:6d: d8:83:1a:ca:6f:6f:06:ef:98:0d:44:74:1a:c9:0a:e0:f0:0d: da:2c:31:8d:e0:b4:a6:e8:da:23:f1:6f:71:81:56:eb:3f:8a: c5:c1:ef:0f:c0:84:35:66:37:9a:b6:6b:3f:19:b9:0e:34:6e: 5d:15:0d:38:6f:c3:92:04:76:56:36:ab:37:ed:61:66:68:8f: 50:53:b6:89:8c:d4:9d:d0:88:4f:94:15:13:df:a5:9a:93:fc: 60:a0:b5:6a:84:0f:40:60:2e:8b:f7:4a:d7:8c:ac:03:b0:30: 58:54:d7:79:02:d5:b3:88:15:73:db:9e:38:0d:94:09:0f:4a: 55:fa:91:cd:92:72:2e:b5:29:7a:30:af:bc:99:d0:73:67:f6: 3d:ed:28:67:e5:af:23:c0:f3:46:50:e7:28:01:3e:a1:6c:1b: 08:6b:52:90:00:10:d2:d1:34:1c:ed:dc:2b:17:f2:ea:4b:89: ef:4b:11:9f:14:cc:46:b6:5c:76:c5:88:8b:c5:ab:19:5e:86: 57:f2:3c:2b:bb:d0:c5:7d:af:68:84:37:4a:fb:fd:cd:f3:47: 3a:2e:34:59:57:c8:87:3b:0f:a3:7a:42:cc:db:a3:12:27:57: 6d:53:08:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecG5XkaY9zo3hOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk ZWRlMzY3ZDMtNThjZi00YmY3LThiYWUtZTJjMWFiMmIzMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJRazh5G9ieScooQ0NJOT6dc2M6/5Ot2k8Lu v0IOOmS9beAYrAymsQ7c8NGZTWqKw+NeSOv1khuaMMRoCzkJdYf5emOp6YTC488A q+HGST5cxhMHNWUUTm8hkTsP/tGie0ElQVB1PF20FUGvGy0FL+nczzyp070+0rFk 2LwyNmTKEvTdF3MxD/je0VjpLLisDXTxPE2LmKLs38ClEUqaBwgijCNfuMHPAkEy deFxnSkSnce+6yH075Oz4OPWWYkA7ZMsvwfDV5IQYzrFnQxFAIobFJiWUL35RhAE ylve2bmiVkse+2puWSVVQjncRLTRPgYGjpPtH1YB1E/kH+KetwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4xb42A5aa3eTdqilxF1mSqw22fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWExODU0NzAtM2U5YS0z Njk2LWE4MjgtYzVhMzA2MjQyZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrNk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+UcxZaamq7wO0PkEUacOLdbdiDGspvbwbvmA1EdBrJCuDwDdosMY3g tKbo2iPxb3GBVus/isXB7w/AhDVmN5q2az8ZuQ40bl0VDThvw5IEdlY2qzftYWZo j1BTtomM1J3QiE+UFRPfpZqT/GCgtWqED0BgLov3SteMrAOwMFhU13kC1bOIFXPb njgNlAkPSlX6kc2Sci61KXowr7yZ0HNn9j3tKGflryPA80ZQ5ygBPqFsGwhrUpAA ENLRNBzt3CsX8upLie9LEZ8UzEa2XHbFiIvFqxlehlfyPCu70MV9r2iEN0r7/c3z RzouNFlXyIc7D6N6QszboxInV21TCAc= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:18 2024 by rpki-client on console-ams.rpki-client.org