$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32f738d-e272-3502-be6b-3b1726c0da29.roa File: f32f738d-e272-3502-be6b-3b1726c0da29.roa (raw, json) Hash identifier: 40a00d9qTyGYWz/BTQ3YphNz/5a/wkuXNKWNTjtwUN4= Subject key identifier: 91:FE:10:0A:B1:97:FA:F5:6E:B7:B1:E0:66:7A:29:A3:F6:C7:1E:5A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822878726A9EB45FFD1980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32f738d-e272-3502-be6b-3b1726c0da29.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:28:78:72:6a:9e:b4:5f:fd:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=388e6d96-133f-4bc4-a5c7-0034773c0368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:24:2d:41:e9:84:0b:24:3a:f4:92:9e:84:d1: 45:e2:f4:1f:aa:a5:1a:84:45:fe:37:5b:27:a5:43: 6b:02:02:97:d1:c5:8e:3e:4b:62:1e:fa:d4:df:08: f5:9c:4a:ec:5b:cd:f5:0f:66:54:62:6f:fb:7d:8d: 20:a5:03:72:6b:08:a5:2d:bc:ec:eb:10:1c:2e:d7: 82:c9:9d:0c:bc:fd:b0:b5:25:cd:c3:93:dd:b7:21: c8:df:97:17:2f:dc:34:1d:44:21:c5:99:f9:79:e4: 6b:d3:e4:a4:60:16:e8:ba:66:c4:e4:6a:b7:7b:7d: 4a:bd:97:8f:29:c6:82:31:95:c0:90:4d:83:24:8d: db:d7:38:04:2f:08:d0:27:2c:36:9f:0f:c9:47:ce: 7c:65:8f:89:98:2c:cd:25:a9:28:68:d2:07:e6:93: 39:9f:00:d3:0e:0e:82:5b:23:9a:c4:dd:04:a6:5f: c3:a4:a7:3c:d1:2f:03:43:80:dc:e8:2c:93:9e:69: 7a:d4:63:9a:57:1c:52:d8:7a:bd:b5:27:72:ab:43: f0:94:3f:04:de:ba:83:0b:bc:a1:71:ad:87:a6:ea: 2e:c0:11:bb:1a:b1:f0:28:e7:58:8a:05:16:79:e9: c5:86:5b:b0:27:98:61:86:f4:cb:bf:52:98:ce:69: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FE:10:0A:B1:97:FA:F5:6E:B7:B1:E0:66:7A:29:A3:F6:C7:1E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32f738d-e272-3502-be6b-3b1726c0da29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d7:0b:76:7b:73:3f:1b:5c:f5:02:ba:6b:96:e7:2e:bc:57: ba:a9:e6:97:2d:34:5b:de:f2:39:47:b6:fd:4f:c2:9c:a0:b6: 2d:5d:fb:15:44:d3:9f:34:85:4b:1f:f3:8a:93:08:13:12:da: 17:0f:6b:37:41:fe:2a:7e:78:70:2d:2d:88:86:9a:dc:cc:fd: 49:2e:8f:5c:4a:0f:4c:3c:7c:47:d5:1d:f0:a4:d1:78:e8:35: eb:31:48:c5:0d:7b:de:12:c2:25:7c:77:21:4a:1f:fa:1a:0a: b6:00:b4:ff:cb:c5:e7:80:d4:d9:ab:31:4c:b4:74:9d:2a:5c: 42:58:d4:3d:11:15:58:10:6b:7d:8b:b8:ea:6b:1b:5a:0f:da: 20:97:30:cd:73:70:d4:b6:9a:f4:24:d7:3d:0a:b4:20:e3:cc: 2b:54:e7:93:62:77:8c:7b:fa:ff:16:e5:9a:ba:5a:33:5f:21: e7:08:f0:53:0e:a4:2e:ae:0b:65:a9:6a:db:03:17:e0:18:80: ad:cb:d6:c1:b2:fc:10:76:0b:e0:b0:58:46:21:67:73:c6:95: ce:82:18:6f:18:aa:55:18:cc:9b:2b:53:4c:21:d2:d6:81:aa: 85:b9:5f:75:c9:6c:4c:f5:26:52:82:90:d3:9e:38:33:07:ba: b2:4f:ea:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgih4cmqetF/9GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Mzg4ZTZkOTYtMTMzZi00YmM0LWE1YzctMDAzNDc3M2MwMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iQtQemECyQ69JKehNFF4vQfqqUahEX+N1sn pUNrAgKX0cWOPktiHvrU3wj1nErsW831D2ZUYm/7fY0gpQNyawilLbzs6xAcLteC yZ0MvP2wtSXNw5PdtyHI35cXL9w0HUQhxZn5eeRr0+SkYBboumbE5Gq3e31KvZeP KcaCMZXAkE2DJI3b1zgELwjQJyw2nw/JR858ZY+JmCzNJakoaNIH5pM5nwDTDg6C WyOaxN0Epl/DpKc80S8DQ4Dc6CyTnml61GOaVxxS2Hq9tSdyq0PwlD8E3rqDC7yh ca2HpuouwBG7GrHwKOdYigUWeenFhluwJ5hhhvTLv1KYzmllCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJH+EAqxl/r1brex4GZ6KaP2xx5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjMyZjczOGQtZTI3Mi0z NTAyLWJlNmItM2IxNzI2YzBkYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/XC3Z7cz8bXPUCumuW5y68V7qp5pctNFve8jlHtv1Pwpygti1d+xVE 0580hUsf84qTCBMS2hcPazdB/ip+eHAtLYiGmtzM/Ukuj1xKD0w8fEfVHfCk0Xjo NesxSMUNe94SwiV8dyFKH/oaCrYAtP/LxeeA1NmrMUy0dJ0qXEJY1D0RFVgQa32L uOprG1oP2iCXMM1zcNS2mvQk1z0KtCDjzCtU55Nid4x7+v8W5Zq6WjNfIecI8FMO pC6uC2WpatsDF+AYgK3L1sGy/BB2C+CwWEYhZ3PGlc6CGG8YqlUYzJsrU0wh0taB qoW5X3XJbEz1JlKCkNOeODMHurJP6jM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:59 2025 by rpki-client