$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa File: 0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa (raw, json) Hash identifier: tHHZB3NR6r0whimft075B8Fyw1/Y737Y4L9yxhIU1HM= Subject key identifier: AC:17:21:88:6D:C4:8C:C7:28:DF:44:A8:72:07:9C:8E:F4:04:69:5B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817667B526876B724EB300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.58.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:76:67:b5:26:87:6b:72:4e:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=522c751e-16ab-4604-b332-2f82847869af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:c0:31:7a:78:20:8d:44:be:77:2e:b5:08: 91:00:28:f8:22:74:2a:b8:8b:25:8c:27:3a:df:50: 13:a6:6f:62:14:7f:14:a1:38:b1:71:9d:0d:0d:a8: 7b:a5:8c:68:1a:d0:8b:d5:83:b4:36:1a:d5:0a:79: 68:80:55:91:9c:4f:61:93:63:29:5d:a2:fa:93:fa: 8f:1e:de:d9:60:5d:7b:1e:12:4b:3f:ef:cf:22:17: ba:08:6a:85:15:20:fc:f0:d6:c8:12:13:f5:48:eb: f9:04:89:90:67:b3:68:68:00:fd:39:6c:73:24:68: 3c:2f:34:90:75:38:89:65:69:c2:99:7f:13:a9:5d: fe:7a:2d:13:31:73:9a:fe:22:d0:c0:02:49:ac:3c: 50:d0:86:eb:17:f0:be:82:25:aa:71:ad:7a:09:1b: 75:82:20:78:1a:43:45:2d:35:76:07:4d:3b:80:3b: 59:1c:22:fc:f8:12:29:98:32:33:c5:65:9b:3d:72: ec:48:02:fd:6e:03:aa:35:c4:20:e9:64:31:68:58: b6:82:bb:ea:d4:aa:c7:db:a6:83:76:ba:7b:eb:c9: 83:0e:3f:11:25:af:bc:a8:e3:1b:cd:1c:b7:72:6a: b1:df:b9:79:80:b8:a2:71:19:57:b7:d3:fa:5e:95: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:17:21:88:6D:C4:8C:C7:28:DF:44:A8:72:07:9C:8E:F4:04:69:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:32:2a:3e:84:1f:c2:2f:1a:cc:94:dd:15:42:a3:ef:fc:51: 08:79:ca:c2:0e:c9:f9:85:5f:c1:99:03:bb:85:44:39:7f:39: 40:cb:7a:53:99:96:43:f6:e9:c8:a6:db:8a:52:0e:e5:06:bd: 08:a7:21:59:f0:4c:bc:3e:59:c5:8d:51:05:b9:2a:2c:0c:e7: dc:c6:4a:80:d9:c6:6e:e9:62:11:b3:d7:b6:0e:be:9d:22:0e: c3:4a:3b:8f:eb:e3:0a:ea:d7:9d:74:15:6d:38:e6:83:d2:2d: 44:07:c2:bc:a8:ef:25:be:c3:58:c8:a3:24:4d:e5:ec:26:4b: 83:f9:09:3e:88:3d:e2:90:b7:31:49:7b:48:f0:e5:56:03:84: d2:76:1c:35:52:49:32:53:05:d4:8d:41:25:35:eb:c2:d6:c2: ba:c9:cd:fe:85:9b:d8:fe:7a:46:d7:c4:96:6d:5c:d6:ed:a0: e2:46:6b:f7:2a:49:2d:d1:9a:56:76:e8:88:4e:e2:ea:b3:48: cc:1a:15:e7:f8:5f:0d:6d:78:cc:30:87:b2:27:e8:27:45:5b: 15:3c:d5:c5:91:86:05:64:07:0e:28:94:cb:4b:25:bc:e3:2e: bd:f3:53:d6:db:32:28:75:68:76:ff:82:63:64:78:c1:8b:6c: 2d:79:63:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXZntSaHa3JOswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTIyYzc1MWUtMTZhYi00NjA0LWIzMzItMmY4Mjg0Nzg2OWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ3AMXp4II1EvncutQiRACj4InQquIsljCc6 31ATpm9iFH8UoTixcZ0NDah7pYxoGtCL1YO0NhrVCnlogFWRnE9hk2MpXaL6k/qP Ht7ZYF17HhJLP+/PIhe6CGqFFSD88NbIEhP1SOv5BImQZ7NoaAD9OWxzJGg8LzSQ dTiJZWnCmX8TqV3+ei0TMXOa/iLQwAJJrDxQ0IbrF/C+giWqca16CRt1giB4GkNF LTV2B007gDtZHCL8+BIpmDIzxWWbPXLsSAL9bgOqNcQg6WQxaFi2grvq1KrH26aD drp768mDDj8RJa+8qOMbzRy3cmqx37l5gLiicRlXt9P6XpU8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwXIYhtxIzHKN9EqHIHnI70BGlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGY0YjcyNGItM2M4My0z NzdlLWEzZmEtNDljMTM0ZjkzZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcyKj6EH8IvGsyU3RVCo+/8UQh5ysIOyfmFX8GZA7uFRDl/OUDLelOZ lkP26cim24pSDuUGvQinIVnwTLw+WcWNUQW5KiwM59zGSoDZxm7pYhGz17YOvp0i DsNKO4/r4wrq1510FW045oPSLUQHwryo7yW+w1jIoyRN5ewmS4P5CT6IPeKQtzFJ e0jw5VYDhNJ2HDVSSTJTBdSNQSU168LWwrrJzf6Fm9j+ekbXxJZtXNbtoOJGa/cq SS3RmlZ26IhO4uqzSMwaFef4Xw1teMwwh7In6CdFWxU81cWRhgVkBw4olMtLJbzj Lr3zU9bbMih1aHb/gmNkeMGLbC15Y7M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:53 2025 by rpki-client