$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa File: 2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa (raw, json) Hash identifier: +TfCwMgKXDOSQEseY+sKrETsgypgRSU0LdAkrD9W5Iw= Subject key identifier: 87:86:F5:49:F7:40:80:4C:29:47:F5:C6:76:DB:E8:C4:75:2F:77:D8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58214244C09770B569C0B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:14:24:4c:09:77:0b:56:9c:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=00a65607-bee6-4e9c-b6ba-460105fd08da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:cd:9d:bd:7d:4e:af:f1:e6:b5:44:b6:60: 8d:a7:53:c1:e1:6b:cf:39:91:fa:f5:7e:b9:fe:99: ac:fa:00:4e:3e:b3:b0:24:97:82:a8:ca:04:dd:56: 2c:2a:4d:f9:1e:3c:1c:8a:5a:69:34:a4:02:2e:e8: 95:93:67:0e:7d:a5:68:d2:58:78:9f:81:44:d1:fd: 2c:f7:8a:94:1a:a8:05:59:79:6f:3f:05:df:8a:95: 59:1d:56:22:b9:c3:8b:fc:0d:35:7b:e6:31:17:2e: f1:c8:7d:00:ba:f5:e3:06:2b:30:8a:96:45:10:55: 4c:80:62:93:97:3f:d0:1f:ed:e6:82:c8:b4:8d:13: 5b:01:7c:0a:ba:e6:3b:ba:8d:ee:0f:7f:c5:2a:fc: 27:00:63:07:e6:2d:6b:2a:75:ef:55:6d:11:4a:b8: bf:4f:54:f9:20:f6:46:42:59:e5:9a:72:ad:67:65: a3:4a:bc:27:8c:01:f9:0a:5d:ca:f2:6b:c6:e8:18: 29:97:f7:f1:d1:b3:5e:a6:10:9d:41:67:41:e4:52: 9b:62:bd:cf:14:65:7d:3f:21:d9:58:54:9d:e7:fb: 55:ac:66:d0:ed:b0:a2:2b:54:8f:32:72:fb:83:0c: 8b:b7:8e:57:e2:f1:b1:1f:4a:f4:23:4a:00:c1:c4: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:86:F5:49:F7:40:80:4C:29:47:F5:C6:76:DB:E8:C4:75:2F:77:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6e:53:ae:ee:78:07:e7:48:cc:07:9b:de:57:96:ee:32:04: 0a:33:70:37:34:6c:61:18:ee:d5:d6:0f:57:2e:a9:58:90:2c: 16:98:54:1a:8a:d4:07:c9:f6:48:79:93:8a:4b:13:a0:48:aa: 5e:0b:75:10:a9:5b:4c:4a:33:e4:5f:5c:a4:7e:b3:23:70:5e: 64:5f:d7:e9:3d:8e:de:39:d3:c2:1e:75:23:62:c8:39:67:dd: dc:d1:f0:b7:45:b2:6e:f0:0e:f6:d2:c8:f5:aa:ca:fd:17:ed: 31:86:65:ba:6b:7a:a6:4b:9d:7f:0f:57:0b:9b:d4:09:3c:e7: 09:fd:c6:ba:35:96:9d:ce:31:f1:f6:77:36:b9:82:f7:85:99: 05:11:b8:4b:25:c8:5d:54:36:84:86:ab:b4:76:6d:8c:b3:09: dc:61:98:56:4e:0e:99:99:cd:44:ed:ce:22:ad:0c:bf:4a:3f: 00:09:26:59:04:be:8e:da:50:be:c7:af:56:31:0d:c8:4d:58: 6e:b3:d8:a3:35:55:55:5a:ac:e2:93:e0:e5:8c:fe:f5:e9:06: 17:1c:a6:ab:aa:89:06:12:62:37:1e:62:2f:fd:43:59:83:ac: bd:ec:5e:5e:c3:57:60:0d:97:5f:24:66:f3:4d:dc:d3:40:3c: 48:5f:4d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghQkTAl3C1acCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDBhNjU2MDctYmVlNi00ZTljLWI2YmEtNDYwMTA1ZmQwOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW/Nnb19Tq/x5rVEtmCNp1PB4WvPOZH69X65 /pms+gBOPrOwJJeCqMoE3VYsKk35HjwcilppNKQCLuiVk2cOfaVo0lh4n4FE0f0s 94qUGqgFWXlvPwXfipVZHVYiucOL/A01e+YxFy7xyH0AuvXjBiswipZFEFVMgGKT lz/QH+3mgsi0jRNbAXwKuuY7uo3uD3/FKvwnAGMH5i1rKnXvVW0RSri/T1T5IPZG QlnlmnKtZ2WjSrwnjAH5Cl3K8mvG6Bgpl/fx0bNephCdQWdB5FKbYr3PFGV9PyHZ WFSd5/tVrGbQ7bCiK1SPMnL7gwyLt45X4vGxH0r0I0oAwcQgTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeG9Un3QIBMKUf1xnbb6MR1L3fYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg5MmQ1ZTItZDhiMy0z ZWI4LWFiODEtOTcyMDQ2ZmQyOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5uU67ueAfnSMwHm95Xlu4yBAozcDc0bGEY7tXWD1cuqViQLBaYVBqK 1AfJ9kh5k4pLE6BIql4LdRCpW0xKM+RfXKR+syNwXmRf1+k9jt4508IedSNiyDln 3dzR8LdFsm7wDvbSyPWqyv0X7TGGZbpreqZLnX8PVwub1Ak85wn9xro1lp3OMfH2 dza5gveFmQURuEslyF1UNoSGq7R2bYyzCdxhmFZODpmZzUTtziKtDL9KPwAJJlkE vo7aUL7Hr1YxDchNWG6z2KM1VVVarOKT4OWM/vXpBhccpquqiQYSYjceYi/9Q1mD rL3sXl7DV2ANl18kZvNN3NNAPEhfTQs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:39 2025 by rpki-client