$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa File: 1cd548a2-3f0a-3bae-b690-0b2164300b26.roa (raw, json) Hash identifier: RzY9PA+JlWM7JzISpg6gWloHJnPY2W4j8l2oZbh68Nw= Subject key identifier: 5F:E9:6F:B3:A5:D8:24:0D:A1:79:90:8F:A3:34:81:65:FA:8D:A2:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582057F21A9F644D86FD180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 209.85.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:05:7f:21:a9:f6:44:d8:6f:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=9bb44789-3b41-4454-a2b6-34a8709f3320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:f4:5e:11:bd:a7:89:5c:67:e0:51:74:8c: 5a:de:83:2c:57:da:0f:8b:fe:e2:cb:b3:73:77:b5: 87:ee:72:e6:29:d1:5a:8d:dd:e2:e4:0f:19:53:56: 9c:1b:74:16:9f:34:a3:e2:3e:67:b5:d8:62:f3:b5: 02:49:2e:1c:14:f3:f6:1f:d4:52:99:0a:f1:7f:2f: ce:88:5b:31:b6:c6:aa:98:ce:4d:98:13:b6:c7:ab: 21:4f:11:0b:7a:0e:87:68:ea:ac:10:b3:06:a5:70: d6:0c:38:d7:98:e8:03:91:4c:11:54:bd:06:d4:24: 9a:a3:a9:5d:98:c9:ea:00:b6:21:3a:c1:c9:74:98: 9c:47:ca:5d:40:3b:22:13:4f:75:3b:e7:38:8f:d2: db:7e:f5:e5:7a:0e:e0:f0:6b:32:04:80:99:5a:ce: 8d:75:fb:9c:c1:1f:b1:07:33:a3:df:6c:b6:e8:38: 03:0c:2b:71:49:69:31:50:6b:ad:f3:5c:f4:64:e0: c0:e9:81:a0:55:ec:0a:c8:e9:c3:23:f4:f7:23:06: fe:8b:2a:27:56:6f:5a:13:cb:72:df:1a:ea:6b:cc: db:35:aa:ae:45:b2:44:ab:c2:d6:b0:29:5b:7f:56: 78:d3:ee:60:f7:5a:0f:eb:a5:1d:79:73:ff:96:b8: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E9:6F:B3:A5:D8:24:0D:A1:79:90:8F:A3:34:81:65:FA:8D:A2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:0a:77:45:91:d0:6d:11:d3:08:b4:0c:cc:0b:cf:1a:f3:7a: 0e:00:18:48:22:fe:63:bc:36:8b:ba:ca:4a:88:5d:cd:12:85: 45:6d:a7:f0:01:19:fa:e7:d2:00:e3:fc:74:c8:70:68:23:54: b2:f7:08:bb:5a:7e:f6:aa:53:fc:5c:41:29:f1:e4:f1:86:d4: 03:d8:27:b4:42:2b:61:eb:35:36:cf:7b:3f:87:25:c1:61:8c: d2:39:e0:d6:46:74:05:42:71:6f:a6:2a:49:a5:45:d2:57:71: 79:9d:e3:4e:8c:87:4a:13:81:d2:23:c9:5a:03:71:19:97:f2: 8c:12:14:f9:cd:45:79:e6:72:4e:77:3f:cb:dd:39:44:31:04: d6:ea:1d:70:71:70:69:c1:6c:0f:e2:24:1c:cd:ac:3b:43:c3: 24:d8:bc:41:4b:93:31:a8:98:ac:2d:73:1c:53:86:4c:7d:41: df:7b:87:7a:b6:84:1b:4a:83:19:50:26:23:d7:0a:ff:f3:eb: bc:95:74:f6:b3:ad:2c:eb:72:f1:77:41:f1:1e:b3:87:e8:65: 96:fc:b2:f9:70:ea:3b:f3:d6:76:a8:47:a1:f4:15:01:f6:57: 48:5b:31:1d:df:cf:77:77:a1:50:2e:5f:97:13:2b:0d:77:51: 32:21:fd:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggV/Ian2RNhv0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OWJiNDQ3ODktM2I0MS00NDU0LWEyYjYtMzRhODcwOWYzMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqf0XhG9p4lcZ+BRdIxa3oMsV9oPi/7iy7Nz d7WH7nLmKdFajd3i5A8ZU1acG3QWnzSj4j5ntdhi87UCSS4cFPP2H9RSmQrxfy/O iFsxtsaqmM5NmBO2x6shTxELeg6HaOqsELMGpXDWDDjXmOgDkUwRVL0G1CSao6ld mMnqALYhOsHJdJicR8pdQDsiE091O+c4j9LbfvXleg7g8GsyBICZWs6NdfucwR+x BzOj32y26DgDDCtxSWkxUGut81z0ZODA6YGgVewKyOnDI/T3Iwb+iyonVm9aE8ty 3xrqa8zbNaquRbJEq8LWsClbf1Z40+5g91oP66UdeXP/lriUuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/pb7Ol2CQNoXmQj6M0gWX6jaJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWNkNTQ4YTItM2YwYS0z YmFlLWI2OTAtMGIyMTY0MzAwYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0VWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8Kd0WR0G0R0wi0DMwLzxrzeg4AGEgi/mO8Nou6ykqIXc0ShUVtp/AB Gfrn0gDj/HTIcGgjVLL3CLtafvaqU/xcQSnx5PGG1APYJ7RCK2HrNTbPez+HJcFh jNI54NZGdAVCcW+mKkmlRdJXcXmd406Mh0oTgdIjyVoDcRmX8owSFPnNRXnmck53 P8vdOUQxBNbqHXBxcGnBbA/iJBzNrDtDwyTYvEFLkzGomKwtcxxThkx9Qd97h3q2 hBtKgxlQJiPXCv/z67yVdPazrSzrcvF3QfEes4foZZb8svlw6jvz1naoR6H0FQH2 V0hbMR3fz3d3oVAuX5cTKw13UTIh/SY= -----END CERTIFICATE-----Generated at Fri Apr 4 08:36:03 2025 by rpki-client