$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2365ed13-33d4-3fa1-b4df-825f7d47358b.roa File: 2365ed13-33d4-3fa1-b4df-825f7d47358b.roa (raw, json) Hash identifier: viFW4yTUNnlC8LFyWYkzR2NPiq7oT1zcUoo8CwXbugM= Subject key identifier: D9:31:EE:6C:06:88:E7:BA:19:28:B6:D1:AC:C4:F3:A1:09:77:CB:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C13C6C36873777F88F3C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2365ed13-33d4-3fa1-b4df-825f7d47358b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 64.233.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:13:c6:c3:68:73:77:7f:88:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=f2fa86c1-bd56-424b-b4cd-bede6b52bc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:13:04:fb:cd:c3:ba:08:ca:e3:c3:61:09: a2:e7:11:03:c4:48:36:67:0a:f3:86:66:9b:9b:39: 48:b9:29:e4:23:82:17:5f:50:61:54:63:4c:db:6a: a1:4a:71:14:df:4e:b5:87:10:0d:41:6e:9e:8c:4a: 70:bf:55:54:dc:12:9d:be:08:65:6c:7b:25:9d:5c: 36:30:1a:88:26:01:2f:65:37:49:e7:3a:a4:30:db: d1:c0:35:a7:00:e4:a6:a4:99:62:1f:91:ac:e8:2c: 73:66:4c:52:54:cb:86:1c:fe:02:fd:2c:5e:2d:d1: 69:ea:86:b4:65:30:46:74:89:9d:cf:2a:d2:23:ce: 01:7d:63:1b:e7:d1:58:3b:cb:c5:8b:cc:92:b1:57: c9:0c:8b:1d:67:dc:07:6b:f0:ab:7b:7f:e8:e2:15: 94:ad:64:1b:6b:31:d4:28:d3:c7:ee:6b:a6:d8:4f: bb:44:39:9b:4c:9c:db:0b:f4:ed:2f:8e:3d:b4:b0: 3b:e5:2a:7a:87:e8:89:ef:a1:88:aa:a4:02:b5:28: 79:18:1e:41:9f:22:53:9d:e8:7f:75:7d:51:d4:d2: a0:aa:dc:f1:cc:24:79:9b:e9:49:ee:8b:90:8f:97: 27:7c:18:74:11:ae:00:f9:15:53:6e:bf:c3:86:a8: 91:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:EE:6C:06:88:E7:BA:19:28:B6:D1:AC:C4:F3:A1:09:77:CB:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2365ed13-33d4-3fa1-b4df-825f7d47358b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b6:13:ce:27:5d:fb:01:c7:52:03:20:28:42:34:73:51:62: 13:27:30:9f:6b:6e:3f:e2:3a:fa:66:5c:3f:fc:e0:75:e3:44: 19:05:78:6a:c5:c0:86:2d:9c:f6:cc:52:2e:de:82:31:67:25: 94:7c:ce:0b:71:cc:dc:d8:96:03:73:7f:84:44:d2:d7:ba:97: fb:ba:8a:2d:87:d0:33:c5:14:32:83:05:5b:55:6c:19:9a:1a: ea:c0:c2:b4:de:92:ed:ea:41:d8:ce:23:9b:c5:9c:72:53:d4: 78:6c:52:cb:ae:81:cb:3f:df:1c:eb:41:a6:bb:bf:c9:8a:d0: d0:c7:37:00:ff:f6:c3:21:ea:a0:63:78:bc:ec:e8:f9:c4:b2: ed:46:b9:f5:eb:31:94:be:04:5d:45:b9:51:23:75:85:46:86: ea:c1:5e:68:fe:36:80:1a:78:69:d2:1c:de:00:f2:a6:c3:2c: 9e:d6:9c:06:af:c3:a4:e8:57:97:2e:e9:fc:56:ed:db:4c:22: 72:8e:9a:ba:49:9b:aa:c0:ad:a3:c4:22:43:32:33:c0:8b:62: 7a:ce:79:e7:87:43:23:c4:74:6c:5d:78:2f:2b:4c:dd:e5:c1: 9c:fd:84:ee:6e:30:5e:18:df:05:a8:ec:ff:f6:c9:40:8f:30: 26:ca:dd:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBPGw2hzd3+I88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZjJmYTg2YzEtYmQ1Ni00MjRiLWI0Y2QtYmVkZTZiNTJiYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkETBPvNw7oIyuPDYQmi5xEDxEg2Zwrzhmab mzlIuSnkI4IXX1BhVGNM22qhSnEU3061hxANQW6ejEpwv1VU3BKdvghlbHslnVw2 MBqIJgEvZTdJ5zqkMNvRwDWnAOSmpJliH5Gs6CxzZkxSVMuGHP4C/SxeLdFp6oa0 ZTBGdImdzyrSI84BfWMb59FYO8vFi8ySsVfJDIsdZ9wHa/Cre3/o4hWUrWQbazHU KNPH7mum2E+7RDmbTJzbC/TtL449tLA75Sp6h+iJ76GIqqQCtSh5GB5BnyJTneh/ dX1R1NKgqtzxzCR5m+lJ7ouQj5cnfBh0Ea4A+RVTbr/DhqiR/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkx7mwGiOe6GSi20azE86EJd8tJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjM2NWVkMTMtMzNkNC0z ZmExLWI0ZGYtODI1ZjdkNDczNThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa2E84nXfsBx1IDIChCNHNRYhMnMJ9rbj/iOvpmXD/84HXjRBkFeGrF wIYtnPbMUi7egjFnJZR8zgtxzNzYlgNzf4RE0te6l/u6ii2H0DPFFDKDBVtVbBma GurAwrTeku3qQdjOI5vFnHJT1HhsUsuugcs/3xzrQaa7v8mK0NDHNwD/9sMh6qBj eLzs6PnEsu1GufXrMZS+BF1FuVEjdYVGhurBXmj+NoAaeGnSHN4A8qbDLJ7WnAav w6ToV5cu6fxW7dtMInKOmrpJm6rAraPEIkMyM8CLYnrOeeeHQyPEdGxdeC8rTN3l wZz9hO5uMF4Y3wWo7P/2yUCPMCbK3Us= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:24 2025 by rpki-client