$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa File: 23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa (raw, json) Hash identifier: g6BKZq5yR6p97XoUjw53fmaWTygJSXYE88yG+QOR4nM= Subject key identifier: 90:3F:B2:C9:69:A9:B7:88:79:6D:06:FE:7A:48:2F:8A:B8:3A:88:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822F05B5F71E50061C5080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:2f:05:b5:f7:1e:50:06:1c:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7e70b94d-0d9e-4dd2-81a2-6dfe83a41bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fa:2d:1b:0b:67:00:fa:1b:70:d2:b6:46:0a: a5:12:8d:fc:a6:a5:7f:fc:c0:4b:52:9d:59:c0:6e: fe:4b:26:90:cd:34:43:d0:3c:22:bc:78:17:a6:0c: b4:23:65:60:bd:9e:10:4b:95:e5:6e:e7:a8:0b:71: f4:15:71:c6:64:ee:42:6e:b8:bc:5a:a9:7f:44:2f: 04:23:c3:88:24:c4:80:d7:9e:bc:aa:dd:f6:47:02: d6:7f:19:64:f5:af:24:50:f7:a1:de:f0:71:29:35: b3:91:83:7d:84:04:1b:e0:dc:b8:c0:4e:1e:fc:4e: 57:73:ef:d8:4b:fa:5c:a1:be:f9:bf:30:a7:98:5f: ed:65:5e:ce:0b:3d:b0:6f:4d:de:87:21:6a:69:63: ad:f2:98:c8:73:ca:7b:9c:65:f2:93:72:6a:70:dc: 13:33:d0:44:8f:ce:87:2e:71:15:18:d9:6d:ec:f3: 6e:58:ff:3c:b8:2a:ae:f5:61:18:23:13:7c:58:28: 6c:b1:e9:56:92:a7:de:c9:ed:c2:d4:c5:73:f1:dd: 44:e4:2b:b9:93:7a:5d:5b:19:be:5b:e8:19:48:0c: 70:13:31:5e:a0:cd:d6:45:a3:70:d8:f5:f2:16:13: d2:e0:ae:4e:12:5e:c0:c9:f3:27:45:bf:06:b4:82: 11:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3F:B2:C9:69:A9:B7:88:79:6D:06:FE:7A:48:2F:8A:B8:3A:88:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0b:4a:0a:a3:c8:46:a0:50:bf:44:4e:3b:38:8d:fb:2e:84: 0c:d4:28:0c:9c:dd:24:cf:04:fd:20:a7:5e:3f:46:c0:0f:5c: 35:94:e5:07:7c:85:3a:2d:77:2e:fe:60:d4:f8:0e:4b:ab:63: f2:ae:15:cd:e4:2c:8d:b6:e1:1e:a9:4a:b6:e7:63:ee:5f:c9: d0:9d:43:19:ad:e5:bd:51:7b:c3:7d:c9:a9:b2:4f:42:59:48: aa:cb:4e:d5:9b:9f:16:49:6d:af:c7:0e:1f:b8:c0:76:79:73: bc:53:0a:72:be:b7:ba:c6:6a:84:af:62:7f:8f:23:b0:39:e9: 91:0a:08:05:22:aa:63:6b:1b:7f:9c:53:4d:24:53:bc:30:f4: cc:b1:c5:9b:ba:d6:4f:41:38:0a:20:d6:0f:21:11:ce:4c:38: 56:2f:72:5e:1f:74:7b:f9:38:53:6c:50:c3:17:f0:94:65:1e: 57:af:04:75:43:11:fb:50:43:2b:85:8a:c1:1c:c5:69:b9:f3: 05:22:f9:03:d5:32:b7:a6:39:f1:75:78:6c:4f:04:df:61:9c: 42:f7:52:f2:47:07:0d:de:50:0f:c0:f8:d4:e9:8c:19:5f:4d: 30:5b:15:90:7f:ff:93:e0:ed:04:3c:60:09:24:92:02:20:ee: 91:be:f0:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgi8FtfceUAYcUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2U3MGI5NGQtMGQ5ZS00ZGQyLTgxYTItNmRmZTgzYTQxYmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/otGwtnAPobcNK2RgqlEo38pqV//MBLUp1Z wG7+SyaQzTRD0DwivHgXpgy0I2VgvZ4QS5XlbueoC3H0FXHGZO5Cbri8Wql/RC8E I8OIJMSA1568qt32RwLWfxlk9a8kUPeh3vBxKTWzkYN9hAQb4Ny4wE4e/E5Xc+/Y S/pcob75vzCnmF/tZV7OCz2wb03ehyFqaWOt8pjIc8p7nGXyk3JqcNwTM9BEj86H LnEVGNlt7PNuWP88uCqu9WEYIxN8WChsselWkqfeye3C1MVz8d1E5Cu5k3pdWxm+ W+gZSAxwEzFeoM3WRaNw2PXyFhPS4K5OEl7AyfMnRb8GtIIRQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA/sslpqbeIeW0G/npIL4q4OojUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjNkNWZhNmEtMDViMi0z ZTdlLThlMTMtYTY2ZDM1MDQ2ZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMLSgqjyEagUL9ETjs4jfsuhAzUKAyc3STPBP0gp14/RsAPXDWU5Qd8 hTotdy7+YNT4DkurY/KuFc3kLI224R6pSrbnY+5fydCdQxmt5b1Re8N9yamyT0JZ SKrLTtWbnxZJba/HDh+4wHZ5c7xTCnK+t7rGaoSvYn+PI7A56ZEKCAUiqmNrG3+c U00kU7ww9MyxxZu61k9BOAog1g8hEc5MOFYvcl4fdHv5OFNsUMMX8JRlHlevBHVD EftQQyuFisEcxWm58wUi+QPVMremOfF1eGxPBN9hnEL3UvJHBw3eUA/A+NTpjBlf TTBbFZB//5Pg7QQ8YAkkkgIg7pG+8Hs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:43 2025 by rpki-client