$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa File: 3576a8b7-6506-398c-8b78-2430a514e1f2.roa (raw, json) Hash identifier: s8CiPshkYrucJtX+XRwJLx/3YZusM18QRu9uLINh+7Q= Subject key identifier: 01:29:67:B6:01:70:32:05:3E:9D:88:9D:D2:16:C4:25:6B:20:D5:A4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C2135DCF6210DEA1E4C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 64.233.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:21:35:dc:f6:21:0d:ea:1e:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4dc8410c-f639-4625-ba92-6f1c0242b8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:75:da:4d:31:9e:5b:cd:fd:38:1a:2d:dc: 49:c3:35:eb:6f:da:d5:09:27:67:47:ae:1e:2f:34: 8b:72:e4:f0:13:d0:65:96:3a:6b:08:17:55:34:de: 79:1b:0a:e7:46:d9:98:d0:67:1a:05:44:8f:32:9e: 9d:05:52:e8:e3:80:2a:69:c9:3a:9d:f7:13:a0:3d: 7b:47:ff:17:2c:8c:2d:62:96:e7:c7:41:d6:cb:8b: 87:ee:ed:9f:e0:e6:f4:d8:c5:02:38:8f:39:95:3e: 9b:63:7e:85:45:1a:52:d5:d2:32:be:25:df:96:3c: 7b:47:8c:df:52:19:7b:00:af:83:69:9a:95:5b:e8: ca:60:86:12:45:e6:ce:5e:6f:94:da:ca:27:a9:bd: 04:72:eb:80:4d:05:26:9a:45:76:57:98:bd:8d:2e: f9:b4:bd:85:d6:1c:72:08:05:58:08:50:c4:f7:10: e4:0e:65:de:91:ef:90:47:59:c5:a7:2a:c5:67:e5: 00:ea:84:5a:e4:34:0b:a9:f1:97:ca:f4:70:58:0c: e2:f4:6b:1f:14:58:e7:a7:2d:dc:58:f2:fe:4b:f6: f1:a4:d9:db:a1:6e:00:50:e3:06:ae:79:69:0b:9e: 5d:86:7c:47:73:ae:63:0d:ac:54:77:0c:ae:25:67: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:29:67:B6:01:70:32:05:3E:9D:88:9D:D2:16:C4:25:6B:20:D5:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a3:6d:4d:45:ed:6d:ab:86:72:c7:cf:70:2f:21:59:9b:fb: 54:b2:14:b7:13:2c:a3:13:51:f0:af:7f:40:e2:ad:aa:9d:ff: d8:ac:23:77:6e:6c:de:4b:d6:8b:7c:8d:58:9e:c7:04:60:07: ed:14:cf:55:48:f1:35:5d:0e:a5:c9:af:d9:d2:3e:a5:01:61: a4:3b:64:7e:ed:e8:28:40:6e:bd:87:0d:57:b2:3f:86:c2:4c: 67:35:df:ee:a7:7e:2f:87:a1:1d:45:7e:8e:94:79:fc:72:a0: 3e:9f:49:a5:3a:b3:16:db:38:e3:75:eb:d5:d8:c9:ba:f3:ae: 96:06:f4:d2:88:54:7a:90:41:f9:92:e9:19:4c:0c:ad:be:79: e8:6d:b8:97:e4:f0:16:31:bf:e0:da:84:b5:bd:8e:bb:69:4f: 3b:ec:5b:cc:1b:d5:93:60:bc:68:32:3a:5e:cf:cb:44:02:6c: b1:77:1a:30:98:89:69:50:53:c3:1a:99:33:ea:eb:d1:11:b2: 29:41:b9:25:e1:ae:92:4d:10:94:b7:19:27:01:c0:5a:fa:c5: 06:89:1c:3e:7d:b7:04:e1:27:be:25:42:9b:ec:0b:3c:26:d8: de:4f:76:24:df:25:3c:25:1c:17:dd:b2:88:e5:54:98:a5:76: d9:7a:87:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITCE13PYhDeoeTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGRjODQxMGMtZjYzOS00NjI1LWJhOTItNmYxYzAyNDJiOGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVF12k0xnlvN/TgaLdxJwzXrb9rVCSdnR64e LzSLcuTwE9BlljprCBdVNN55GwrnRtmY0GcaBUSPMp6dBVLo44Aqack6nfcToD17 R/8XLIwtYpbnx0HWy4uH7u2f4Ob02MUCOI85lT6bY36FRRpS1dIyviXfljx7R4zf Uhl7AK+DaZqVW+jKYIYSRebOXm+U2sonqb0EcuuATQUmmkV2V5i9jS75tL2F1hxy CAVYCFDE9xDkDmXeke+QR1nFpyrFZ+UA6oRa5DQLqfGXyvRwWAzi9GsfFFjnpy3c WPL+S/bxpNnboW4AUOMGrnlpC55dhnxHc65jDaxUdwyuJWeJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEpZ7YBcDIFPp2IndIWxCVrINWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzU3NmE4YjctNjUwNi0z OThjLThiNzgtMjQzMGE1MTRlMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWjbU1F7W2rhnLHz3AvIVmb+1SyFLcTLKMTUfCvf0Diraqd/9isI3du bN5L1ot8jViexwRgB+0Uz1VI8TVdDqXJr9nSPqUBYaQ7ZH7t6ChAbr2HDVeyP4bC TGc13+6nfi+HoR1Ffo6UefxyoD6fSaU6sxbbOON169XYybrzrpYG9NKIVHqQQfmS 6RlMDK2+eehtuJfk8BYxv+DahLW9jrtpTzvsW8wb1ZNgvGgyOl7Py0QCbLF3GjCY iWlQU8MamTPq69ERsilBuSXhrpJNEJS3GScBwFr6xQaJHD59twThJ74lQpvsCzwm 2N5PdiTfJTwlHBfdsojlVJildtl6h8E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:44 2025 by rpki-client