$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce3f64b-ad95-39ba-a3eb-92526b31b3cc.roa File: 3ce3f64b-ad95-39ba-a3eb-92526b31b3cc.roa (raw, json) Hash identifier: 77vAEZQjRmLxO5nH+p7cDtOc6eQDQMtc4d85XZXXRXg= Subject key identifier: 2A:67:3E:EA:95:9A:18:30:A7:F6:6E:86:B2:D4:63:F0:CE:CE:44:15 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58208FFC02E3F2EAD877880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce3f64b-ad95-39ba-a3eb-92526b31b3cc.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:08:ff:c0:2e:3f:2e:ad:87:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=79fe88df-9904-4623-b53c-825bab7ba81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:bb:a9:54:77:b6:63:da:0f:72:7d:ae:a6: 5a:23:1d:1c:66:a6:74:b1:b6:1b:d9:70:8a:a1:f4: bb:04:ec:22:12:a2:d1:87:e6:74:d0:ca:dd:12:8c: 98:c2:1e:1b:a2:8a:96:13:0a:e0:1e:4c:e4:7b:5a: 0d:ff:69:4e:b2:39:95:f9:b2:65:cc:05:dc:53:82: 10:f0:ed:34:71:9e:8a:6f:81:e6:f9:a0:3c:be:86: 98:88:ad:7d:0a:0e:65:19:e1:f2:4d:bf:ba:ce:66: d4:9e:20:4b:71:56:94:f6:3b:e5:13:8b:dc:fd:ec: d4:50:7f:16:9e:d7:81:41:24:fd:6a:39:0e:3f:4a: 7a:78:9d:64:e2:b8:96:6c:ea:9e:9a:b7:e5:15:e8: 57:e7:9e:bb:af:8d:57:0f:aa:15:38:fe:5b:38:e7: e7:f7:e1:74:dc:33:b0:78:4c:49:7f:bc:6d:1b:7a: 5e:eb:4e:cb:d6:94:9b:d4:11:70:82:e3:8a:94:26: d4:e7:4a:2c:d4:fa:cc:6f:4a:eb:90:67:97:79:80: 46:fa:dd:56:90:a4:0c:25:ff:81:ed:5c:e7:56:cf: 54:19:18:bd:1a:d8:88:2f:66:6b:76:32:16:70:e9: 85:cb:c2:22:f4:6a:58:0d:84:9e:8c:48:57:ef:21: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:67:3E:EA:95:9A:18:30:A7:F6:6E:86:B2:D4:63:F0:CE:CE:44:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce3f64b-ad95-39ba-a3eb-92526b31b3cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8d:d1:ca:1d:0b:02:61:bc:8f:d2:8d:fa:9e:ea:1c:94:f0: 21:bd:41:5f:d0:ca:25:43:f5:2a:29:33:56:2c:38:f4:df:5d: 5e:0c:27:23:ad:52:fd:30:41:c2:2a:9f:ca:2f:7b:f8:a4:d6: 9b:55:b7:0f:c9:df:bf:52:ba:21:6f:f9:9c:92:3d:e6:45:db: 76:ed:a0:b0:c6:29:9b:cb:c1:9f:70:43:98:f9:71:4f:79:b5: 9a:a7:c8:b4:4d:8e:ee:48:75:d9:25:49:4b:13:bb:8d:ba:12: 84:62:0e:f4:5c:37:45:b8:5a:d1:08:b3:34:48:58:80:b7:ef: 31:8f:59:6c:1a:da:ed:0b:40:bb:b3:ff:1d:7a:52:fd:c8:94: 70:27:b3:05:c2:75:79:0d:fe:9a:c1:68:9f:21:28:f4:fd:8a: e9:50:0d:c9:6a:ee:2c:05:fe:d9:a2:de:45:f2:c9:d3:57:e8: 56:d5:a7:57:73:bd:c5:24:05:18:6f:22:9e:b1:9e:85:25:1f: 18:42:7d:54:16:46:c2:df:1f:bb:d6:84:c2:aa:a8:15:ed:ed: 1d:aa:83:2a:32:f7:eb:e0:9f:c5:21:41:be:53:62:4f:78:08: 9d:48:88:da:ad:ce:3c:d0:3d:aa:51:c4:7e:9f:44:b1:9c:18: 3d:8c:fa:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggj/wC4/Lq2HeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzlmZTg4ZGYtOTkwNC00NjIzLWI1M2MtODI1YmFiN2JhODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaK7qVR3tmPaD3J9rqZaIx0cZqZ0sbYb2XCK ofS7BOwiEqLRh+Z00MrdEoyYwh4booqWEwrgHkzke1oN/2lOsjmV+bJlzAXcU4IQ 8O00cZ6Kb4Hm+aA8voaYiK19Cg5lGeHyTb+6zmbUniBLcVaU9jvlE4vc/ezUUH8W nteBQST9ajkOP0p6eJ1k4riWbOqemrflFehX5567r41XD6oVOP5bOOfn9+F03DOw eExJf7xtG3pe607L1pSb1BFwguOKlCbU50os1PrMb0rrkGeXeYBG+t1WkKQMJf+B 7VznVs9UGRi9GtiIL2ZrdjIWcOmFy8Ii9GpYDYSejEhX7yEnSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpnPuqVmhgwp/ZuhrLUY/DOzkQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2NlM2Y2NGItYWQ5NS0z OWJhLWEzZWItOTI1MjZiMzFiM2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuN0codCwJhvI/Sjfqe6hyU8CG9QV/QyiVD9SopM1YsOPTfXV4MJyOt Uv0wQcIqn8ove/ik1ptVtw/J379SuiFv+ZySPeZF23btoLDGKZvLwZ9wQ5j5cU95 tZqnyLRNju5IddklSUsTu426EoRiDvRcN0W4WtEIszRIWIC37zGPWWwa2u0LQLuz /x16Uv3IlHAnswXCdXkN/prBaJ8hKPT9iulQDclq7iwF/tmi3kXyydNX6FbVp1dz vcUkBRhvIp6xnoUlHxhCfVQWRsLfH7vWhMKqqBXt7R2qgyoy9+vgn8UhQb5TYk94 CJ1IiNqtzjzQPapRxH6fRLGcGD2M+gM= -----END CERTIFICATE-----Generated at Fri Apr 4 08:31:40 2025 by rpki-client