$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa File: eccc049d-f39e-3a01-8af3-e167539adf3d.roa (raw, json) Hash identifier: L2g0tM43+rgUV6g9L9++R1JJOypZL6YoVpDQJv9ux3o= Subject key identifier: A5:7E:99:42:D2:8D:C7:A6:8A:E4:43:22:A8:50:48:87:28:16:9D:36 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA1248405CBE54D33D649C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.217.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:24:84:05:cb:e5:4d:33:d6:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=f3db69d1-019d-4edb-9cc0-e2d488d483d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c1:dd:43:4e:10:2c:90:a3:e5:8f:c9:30:c8: 62:e4:da:c1:ec:d8:9e:f9:bd:73:51:bf:c0:c9:17: cd:dd:f4:92:44:36:bc:1f:5d:e0:2a:46:6e:91:9c: 16:c1:84:7c:23:78:b2:16:2b:b4:20:94:e7:c2:9f: ba:f2:f4:fd:24:4a:9e:b6:b8:b3:d6:ef:bc:42:92: 1d:e5:1b:04:96:18:3f:7e:99:60:ce:a9:e2:ac:04: e8:21:09:8c:18:80:d5:06:38:9f:b1:ae:d5:23:c1: 4a:ef:48:e1:0f:fe:7c:b7:3a:7e:ee:29:77:52:b5: fc:02:94:78:d0:8a:b8:1a:59:b0:8a:f6:26:d9:1a: bf:4f:c6:67:d2:60:43:86:c4:1d:74:7b:20:7d:4a: 34:3d:8b:cb:7a:74:6d:71:db:8f:0f:f4:80:de:f8: e8:78:29:42:d7:3a:9f:91:60:66:47:62:3f:9c:22: 86:f0:0f:09:62:95:49:4f:ad:80:4b:26:66:38:b8: 3f:2e:29:50:1a:5d:49:6e:91:dc:50:d9:b9:8e:7f: e4:1c:50:19:bc:47:1a:20:46:b5:6f:ae:6f:39:99: 48:b4:1b:e0:6d:64:09:08:58:f9:9a:ef:47:f9:93: 8c:b3:62:46:82:5c:50:d8:be:50:d3:40:76:02:38: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7E:99:42:D2:8D:C7:A6:8A:E4:43:22:A8:50:48:87:28:16:9D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8a:66:47:fc:0e:49:59:bf:0e:25:19:8f:49:be:75:2f:bb: cc:26:67:40:d4:19:10:21:c2:96:a5:29:8f:ec:e0:7f:d4:05: b5:47:90:ab:be:5a:da:65:96:cc:9a:82:92:7a:d0:18:db:e6: 20:3e:8d:3c:bd:fd:f5:62:fc:b4:89:32:0a:6a:12:25:9e:e5: 9b:47:d8:1d:50:54:ad:97:69:8a:84:ce:23:24:3b:5d:00:b6: 88:36:aa:13:5a:76:bc:1c:e0:90:41:de:84:44:bc:ed:26:9b: f7:b4:0d:5f:ce:d3:16:b9:d7:40:c2:45:11:65:27:df:91:91: fe:17:be:6d:39:b9:3a:74:3b:47:53:20:f0:4f:06:fe:1b:5c: ec:dc:bf:c1:6a:5b:c5:06:fa:56:96:35:82:3f:8f:02:2b:0d: 97:ac:97:a9:48:15:34:81:95:a2:7e:12:a9:4e:0a:50:84:4d: 16:94:d2:cf:a6:29:66:d5:d0:2d:58:7b:26:2e:c4:4b:6e:3b: 96:e2:5a:9c:6e:b7:0b:d6:59:56:4e:98:e3:c3:00:1d:76:8f: c2:57:2b:88:0c:ad:70:6c:84:1e:18:eb:14:06:cc:f6:e2:cd: ce:9a:79:5e:00:5f:ac:8d:40:2c:77:5e:62:c4:d3:6e:9b:4b: 19:82:52:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSSEBcvlTTPWScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZjNkYjY5ZDEtMDE5ZC00ZWRiLTljYzAtZTJkNDg4ZDQ4M2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMHdQ04QLJCj5Y/JMMhi5NrB7Nie+b1zUb/A yRfN3fSSRDa8H13gKkZukZwWwYR8I3iyFiu0IJTnwp+68vT9JEqetriz1u+8QpId 5RsElhg/fplgzqnirAToIQmMGIDVBjifsa7VI8FK70jhD/58tzp+7il3UrX8ApR4 0Iq4GlmwivYm2Rq/T8Zn0mBDhsQddHsgfUo0PYvLenRtcduPD/SA3vjoeClC1zqf kWBmR2I/nCKG8A8JYpVJT62ASyZmOLg/LilQGl1JbpHcUNm5jn/kHFAZvEcaIEa1 b65vOZlItBvgbWQJCFj5mu9H+ZOMs2JGglxQ2L5Q00B2AjgqlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV+mULSjcemiuRDIqhQSIcoFp02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWNjYzA0OWQtZjM5ZS0z YTAxLThhZjMtZTE2NzUzOWFkZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiKZkf8DklZvw4lGY9JvnUvu8wmZ0DUGRAhwpalKY/s4H/UBbVHkKu+ WtpllsyagpJ60Bjb5iA+jTy9/fVi/LSJMgpqEiWe5ZtH2B1QVK2XaYqEziMkO10A tog2qhNadrwc4JBB3oREvO0mm/e0DV/O0xa510DCRRFlJ9+Rkf4Xvm05uTp0O0dT IPBPBv4bXOzcv8FqW8UG+laWNYI/jwIrDZesl6lIFTSBlaJ+EqlOClCETRaU0s+m KWbV0C1YeyYuxEtuO5biWpxutwvWWVZOmOPDAB12j8JXK4gMrXBshB4Y6xQGzPbi zc6aeV4AX6yNQCx3XmLE026bSxmCUqM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:33 2025 by rpki-client