$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2be4b964-a017-312e-b894-beb314baed0e.roa File: 2be4b964-a017-312e-b894-beb314baed0e.roa (raw, json) Hash identifier: nxOUqZoQuhiSxlXwAH297pmUAxDudPOjEjbz44aZXt8= Subject key identifier: 9F:6D:85:02:1F:A0:A6:E1:5D:7F:A5:AE:DD:59:EC:28:0D:AA:3B:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818A21EC3C88D747031680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2be4b964-a017-312e-b894-beb314baed0e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8a:21:ec:3c:88:d7:47:03:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=9ab58f29-159d-4541-8616-fd27448f235d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:55:34:cb:da:a9:22:1d:12:6d:76:ec:35: 0a:5b:78:a8:59:db:e9:14:a0:d2:ee:fd:f7:9a:36: 50:b1:55:64:2a:b8:38:11:2e:01:88:e4:57:fd:33: 87:26:52:7b:51:3c:ed:84:a5:23:01:08:cc:37:5a: 19:8c:44:8f:e7:aa:71:a8:9c:db:f9:45:99:67:ac: 3b:84:21:d3:b8:b0:30:ec:4b:a9:91:04:c6:2a:46: 7a:77:cb:01:55:e8:44:dc:18:ca:ac:2d:74:18:0a: dc:d5:d5:02:6d:0d:33:cb:82:3c:c8:df:35:21:5a: d2:ef:aa:d3:23:b7:c2:38:76:8a:87:06:3b:9d:89: b4:82:ce:5c:fe:c6:cb:6f:12:a1:a1:e8:57:7a:8d: 7a:78:b6:81:a6:9b:5f:63:a3:d0:ad:32:ef:ff:9b: c3:28:fc:23:f3:39:c3:39:a7:cc:d5:05:49:a1:1a: 92:25:ed:f3:e4:2f:4e:54:cd:16:cd:8e:24:ea:6b: 5d:c1:cc:37:49:c1:e8:3a:34:41:7f:1c:2e:e8:7b: 68:d2:ee:db:4d:2b:82:8c:f9:52:70:ca:c1:5f:8b: cf:7c:a7:4e:fc:21:d2:5d:95:c6:a3:31:65:7f:fe: 84:28:77:38:8d:5d:09:d1:5a:6b:f2:69:ef:54:04: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6D:85:02:1F:A0:A6:E1:5D:7F:A5:AE:DD:59:EC:28:0D:AA:3B:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2be4b964-a017-312e-b894-beb314baed0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:cd:d5:f5:39:8b:ea:1f:a1:a1:2d:2a:b4:aa:88:86:6f:17: 47:f3:74:89:67:8d:68:35:e0:15:29:95:57:49:0a:5f:9e:83: 06:3c:fc:6d:98:6a:c6:73:77:57:4c:50:bc:9a:b1:d7:09:b5: 94:95:b9:f3:e8:b6:a7:6d:db:e2:b4:90:78:09:96:c2:30:0d: ad:de:c5:16:b6:92:f7:48:bb:27:83:ea:22:ad:40:df:91:6b: 69:93:86:ee:27:54:89:c3:e6:63:1f:36:03:2a:fb:34:59:7b: 2c:ec:66:00:db:e2:72:b5:37:16:dc:04:8d:e4:9d:4a:b1:d7: 52:ed:05:b5:7c:56:3b:4e:75:7d:58:ee:ed:e0:4c:a3:de:6c: f4:9d:7c:e7:02:8e:40:55:11:58:16:7c:70:d5:ee:4b:67:1e: 34:cc:2e:5d:92:21:1c:54:b2:49:88:1b:73:de:8e:a3:e3:fa: 9e:45:d0:0b:2a:c3:57:02:9d:33:36:f3:07:7b:ec:99:45:3e: 79:ac:93:cc:44:c0:bb:e0:22:ad:30:ac:ca:88:28:40:84:af: 46:6a:21:17:9f:e7:6d:c2:36:ab:97:63:c4:74:0f:83:5f:0d: eb:35:f9:50:a4:0d:68:60:c8:a2:a3:81:a1:be:5d:d0:cb:87: 2f:5c:a4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYoh7DyI10cDFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OWFiNThmMjktMTU5ZC00NTQxLTg2MTYtZmQyNzQ0OGYyMzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bVVNMvaqSIdEm127DUKW3ioWdvpFKDS7v33 mjZQsVVkKrg4ES4BiORX/TOHJlJ7UTzthKUjAQjMN1oZjESP56pxqJzb+UWZZ6w7 hCHTuLAw7EupkQTGKkZ6d8sBVehE3BjKrC10GArc1dUCbQ0zy4I8yN81IVrS76rT I7fCOHaKhwY7nYm0gs5c/sbLbxKhoehXeo16eLaBpptfY6PQrTLv/5vDKPwj8znD OafM1QVJoRqSJe3z5C9OVM0WzY4k6mtdwcw3ScHoOjRBfxwu6Hto0u7bTSuCjPlS cMrBX4vPfKdO/CHSXZXGozFlf/6EKHc4jV0J0Vpr8mnvVAQg/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9thQIfoKbhXX+lrt1Z7CgNqjtJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmJlNGI5NjQtYTAxNy0z MTJlLWI4OTQtYmViMzE0YmFlZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPN1fU5i+ofoaEtKrSqiIZvF0fzdIlnjWg14BUplVdJCl+egwY8/G2Y asZzd1dMULyasdcJtZSVufPotqdt2+K0kHgJlsIwDa3exRa2kvdIuyeD6iKtQN+R a2mThu4nVInD5mMfNgMq+zRZeyzsZgDb4nK1NxbcBI3knUqx11LtBbV8VjtOdX1Y 7u3gTKPebPSdfOcCjkBVEVgWfHDV7ktnHjTMLl2SIRxUskmIG3PejqPj+p5F0Asq w1cCnTM28wd77JlFPnmsk8xEwLvgIq0wrMqIKECEr0ZqIRef523CNquXY8R0D4Nf Des1+VCkDWhgyKKjgaG+XdDLhy9cpAc= -----END CERTIFICATE-----Generated at Fri Mar 14 08:49:46 2025 by rpki-client