$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa File: 069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa (raw, json) Hash identifier: OI3uNemzrB3gSbDe3cBQapBQVNuDYPKPivNF4R/58ZY= Subject key identifier: B7:EB:5F:81:24:28:0F:7D:41:3C:C0:E7:FF:AD:20:48:B4:EE:33:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5816DC1C300154867418760 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 209.85.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6d:c1:c3:00:15:48:67:41:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3b4c9ca6-34c3-4c89-9dd1-790d365673a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:fb:c5:f0:32:68:6c:1e:26:b5:50:92:66: bf:2e:ac:0a:ef:4f:a1:b5:1a:10:60:ff:68:0e:89: 42:68:97:7f:00:01:50:80:d4:c0:98:b2:61:6b:ea: bb:bb:de:75:bf:66:b4:7d:d4:33:e9:5d:07:21:a6: d5:aa:24:b5:3d:b7:e0:e4:d5:99:4c:c5:ab:28:4f: 45:79:67:11:8d:03:97:89:41:c0:1f:6b:42:4a:e4: 4a:d4:9e:f0:0a:b9:10:23:d4:89:0e:26:e1:fd:cc: 8e:b3:cf:d3:a8:d6:98:1c:cc:d4:1b:79:87:fc:63: 57:84:b3:d5:cd:dd:32:64:65:1c:2f:ef:df:13:12: 0b:52:9a:0d:a5:ad:5a:7a:85:fa:1b:d1:44:f0:c0: c3:61:1b:ea:36:07:9c:58:fb:c9:22:85:5e:cb:ed: 47:ea:86:26:c4:fd:90:1c:80:f6:a4:c6:0c:77:59: a3:41:a3:92:c3:cc:fa:65:42:ae:00:0d:e0:eb:0c: 21:8d:4e:35:d9:a9:c7:ae:46:38:db:c4:dc:30:78: 3b:03:c7:1e:53:fa:e0:c8:3d:fa:62:06:33:94:17: 03:92:ba:24:c0:34:dc:86:d1:ed:b2:0b:cb:9f:35: 14:91:a2:98:19:a5:d0:4b:a9:e4:21:41:c6:8c:a9: 97:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EB:5F:81:24:28:0F:7D:41:3C:C0:E7:FF:AD:20:48:B4:EE:33:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:b2:11:9e:5b:30:ca:68:2e:d6:48:f3:4a:b9:a2:8d:a0:0a: 24:7a:3c:d5:7e:27:30:68:37:7d:bd:08:e1:49:bd:15:12:93: 99:c9:8c:c5:55:2d:54:5b:45:38:08:a6:22:34:27:44:c1:8e: 62:29:68:5a:a1:4c:74:42:fe:79:ec:79:ce:70:67:22:5b:3c: a6:f6:24:66:60:20:4a:83:1e:30:f8:77:2b:ef:05:ec:8b:aa: 18:b5:63:1d:6e:64:3e:c7:e6:1a:30:a3:9b:8f:cd:80:e1:18: 6a:17:a8:86:e5:6f:d8:ab:ff:c6:ca:09:b6:ea:de:ee:3e:3c: d1:40:70:ae:fe:30:84:5b:cb:f8:df:e3:50:61:cb:03:c4:07: d4:0b:b9:e0:b0:80:99:0f:d0:cf:33:7b:be:f5:50:3d:87:ca: a6:b0:f0:59:36:3b:dc:b6:f7:cf:83:3d:90:aa:22:8d:20:e0: c1:5e:c1:de:f0:dd:8b:64:1e:83:0d:1a:e7:70:7a:a6:72:10: b8:a1:44:4c:a9:e4:66:5b:66:dc:2d:04:3c:47:19:6d:6e:0e: 08:ee:06:85:10:e7:3d:6a:23:be:52:6f:66:17:9c:43:74:e9: ef:81:8e:a4:2a:04:25:a4:91:8c:28:95:fc:b9:35:44:6b:aa: 7f:6b:5b:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgW3BwwAVSGdBh2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2I0YzljYTYtMzRjMy00Yzg5LTlkZDEtNzkwZDM2NTY3M2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGb7xfAyaGweJrVQkma/LqwK70+htRoQYP9o DolCaJd/AAFQgNTAmLJha+q7u951v2a0fdQz6V0HIabVqiS1Pbfg5NWZTMWrKE9F eWcRjQOXiUHAH2tCSuRK1J7wCrkQI9SJDibh/cyOs8/TqNaYHMzUG3mH/GNXhLPV zd0yZGUcL+/fExILUpoNpa1aeoX6G9FE8MDDYRvqNgecWPvJIoVey+1H6oYmxP2Q HID2pMYMd1mjQaOSw8z6ZUKuAA3g6wwhjU412anHrkY428TcMHg7A8ceU/rgyD36 YgYzlBcDkrokwDTchtHtsgvLnzUUkaKYGaXQS6nkIUHGjKmXWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfrX4EkKA99QTzA5/+tIEi07jP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDY5YTZmYWEtYTNjYy0z MGM3LTllYzItZmZkYTc4ZTE4MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeyEZ5bMMpoLtZI80q5oo2gCiR6PNV+JzBoN329COFJvRUSk5nJjMVV LVRbRTgIpiI0J0TBjmIpaFqhTHRC/nnsec5wZyJbPKb2JGZgIEqDHjD4dyvvBeyL qhi1Yx1uZD7H5howo5uPzYDhGGoXqIblb9ir/8bKCbbq3u4+PNFAcK7+MIRby/jf 41BhywPEB9QLueCwgJkP0M8ze771UD2Hyqaw8Fk2O9y298+DPZCqIo0g4MFewd7w 3YtkHoMNGudweqZyELihREyp5GZbZtwtBDxHGW1uDgjuBoUQ5z1qI75Sb2YXnEN0 6e+BjqQqBCWkkYwolfy5NURrqn9rWwo= -----END CERTIFICATE-----Generated at Fri Apr 4 08:25:05 2025 by rpki-client