$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa File: ef6dc64b-a739-3069-8e89-e656f33c13e6.roa (raw, json) Hash identifier: PAxtp3/qVStWSNs4PaL+dTh+iIPwCa+j8PUg9V06SoY= Subject key identifier: E9:1D:B9:9D:00:15:49:13:73:B6:B8:8B:8A:11:4C:8A:B6:C3:B2:DB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818381B027DA970D8C8EC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:83:81:b0:27:da:97:0d:8c:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=612a2cf3-492a-475f-bc8c-968eff5ec19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:e7:83:9f:86:2c:69:79:e0:24:d4:22:47: fb:c9:ae:e1:10:5a:f8:4d:14:2c:7a:85:a1:ab:a7: 98:0f:76:5b:d8:03:44:49:29:a7:19:55:34:87:52: e2:53:23:47:d1:5f:fd:96:29:e7:8a:3c:16:c2:30: d9:8b:5b:88:f1:bb:12:72:7c:cc:67:d2:4c:27:8f: 9e:8f:a8:a5:64:77:8f:6d:a2:cc:c5:1c:42:fa:3a: 62:e6:63:cf:ea:e2:d5:1e:b1:3d:fc:db:8a:09:c0: 3e:84:44:a6:98:cb:de:3f:7d:e4:eb:52:e3:89:70: 38:c3:63:ab:b6:ee:88:9a:95:c6:a6:4e:48:7f:95: 3b:ac:4e:3c:2a:f2:07:1b:09:b2:a2:fe:87:41:cd: f8:1f:6e:56:b4:03:45:55:a5:95:21:82:e8:64:fb: 31:cc:b6:72:dc:f8:d6:11:08:0d:36:42:d6:9b:52: 09:de:5a:c4:92:e8:a4:f6:1e:06:d4:e9:4c:85:15: 5c:ae:85:5b:4e:6a:c6:27:3c:bf:4c:56:f1:64:92: 91:30:5d:8f:a7:a8:70:25:e5:fe:40:c3:ca:d6:d3: 8a:e2:a2:45:b7:dc:ec:88:d2:24:b7:ed:69:df:95: d8:cf:99:09:45:17:c5:0d:e2:df:60:51:1b:3e:ec: 82:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:B9:9D:00:15:49:13:73:B6:B8:8B:8A:11:4C:8A:B6:C3:B2:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:af:85:54:39:af:e7:54:b8:57:36:41:dc:52:06:06:e6:eb: af:7a:9d:ae:47:b6:0c:c1:d5:66:27:2f:9b:b2:fb:d6:df:69: 62:af:97:d2:7d:06:1a:f1:9d:8a:95:77:8c:49:b1:7d:0a:b2: ed:59:8d:77:31:85:50:90:d0:1c:c9:73:65:55:76:81:30:7f: 76:81:44:f2:2a:28:e2:0f:2e:55:e5:1d:53:fd:a2:f8:cd:40: 77:db:4b:ab:f2:d1:40:2d:87:69:41:1a:78:a3:f4:1b:10:4b: 8e:3f:ba:46:49:b2:78:db:1c:7b:a7:3a:ff:bb:07:36:a6:5d: d0:a9:b1:f3:a4:6c:df:07:d6:27:4c:3a:1f:56:1a:b6:c4:bd: 21:9d:3d:06:41:05:9a:bd:41:cd:79:1c:f4:87:70:b5:63:13: ad:ab:09:b8:04:9e:9f:2a:68:56:bc:1f:d9:06:2e:4c:6a:f1: 04:8f:15:86:6a:76:33:61:df:71:4e:43:2a:8d:1e:24:ff:9e: 26:da:a8:e3:ab:dc:3d:08:4c:6e:72:cb:7e:3c:2d:a7:1b:89: 78:8e:e1:e8:d3:86:27:99:69:4e:13:7b:36:ce:e7:e2:cf:15: 00:0e:fe:26:83:2a:b4:05:ad:8d:2c:37:bc:fd:ff:81:4a:1a: 69:96:e7:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYOBsCfalw2MjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjEyYTJjZjMtNDkyYS00NzVmLWJjOGMtOTY4ZWZmNWVjMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusvng5+GLGl54CTUIkf7ya7hEFr4TRQseoWh q6eYD3Zb2ANESSmnGVU0h1LiUyNH0V/9linnijwWwjDZi1uI8bsScnzMZ9JMJ4+e j6ilZHePbaLMxRxC+jpi5mPP6uLVHrE9/NuKCcA+hESmmMveP33k61LjiXA4w2Or tu6ImpXGpk5If5U7rE48KvIHGwmyov6HQc34H25WtANFVaWVIYLoZPsxzLZy3PjW EQgNNkLWm1IJ3lrEkuik9h4G1OlMhRVcroVbTmrGJzy/TFbxZJKRMF2Pp6hwJeX+ QMPK1tOK4qJFt9zsiNIkt+1p35XYz5kJRRfFDeLfYFEbPuyCowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkduZ0AFUkTc7a4i4oRTIq2w7LbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWY2ZGM2NGItYTczOS0z MDY5LThlODktZTY1NmYzM2MxM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADivhVQ5r+dUuFc2QdxSBgbm6696na5HtgzB1WYnL5uy+9bfaWKvl9J9 BhrxnYqVd4xJsX0Ksu1ZjXcxhVCQ0BzJc2VVdoEwf3aBRPIqKOIPLlXlHVP9ovjN QHfbS6vy0UAth2lBGnij9BsQS44/ukZJsnjbHHunOv+7BzamXdCpsfOkbN8H1idM Oh9WGrbEvSGdPQZBBZq9Qc15HPSHcLVjE62rCbgEnp8qaFa8H9kGLkxq8QSPFYZq djNh33FOQyqNHiT/nibaqOOr3D0ITG5yy348LacbiXiO4ejThieZaU4TezbO5+LP FQAO/iaDKrQFrY0sN7z9/4FKGmmW5yM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:51 2025 by rpki-client