$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa File: 414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa (raw, json) Hash identifier: McKRI8tTlH3jLFJMatrh9w7PTxOwovzUM6IxX9ZJgsY= Subject key identifier: 09:43:EB:41:41:C9:DB:26:DA:DC:01:2C:AD:20:87:70:23:E3:A3:B8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58176F0E03E36F356040300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:76:f0:e0:3e:36:f3:56:04:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=20462bf8-d4a5-4c7c-870c-0ad9fca85fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:f5:8c:75:6f:01:6e:62:b6:20:cf:1e:57: 4b:a8:05:2b:d6:b2:51:f3:41:f7:8d:2a:9c:25:32: c0:e0:dd:43:73:6b:ff:ce:81:51:4a:04:5c:a2:7c: 28:f6:91:f3:b2:08:10:70:95:29:16:19:00:c1:15: a2:71:c0:4e:cd:dc:ad:dc:12:04:b3:46:e8:b8:22: 7c:0b:74:89:93:fe:7f:d3:cf:60:38:d7:ec:4d:05: d5:93:74:08:74:87:90:b9:1b:c3:c6:58:68:ee:72: 75:14:f3:4c:f5:04:f7:1a:cc:01:04:6e:51:36:cb: 49:a7:94:bf:ce:53:49:1b:1a:d6:7b:d9:31:05:9c: 93:29:73:bf:f4:9e:af:6f:90:e9:00:7f:a9:1f:3d: 81:9d:e8:79:37:54:f3:4c:92:01:e3:9d:f9:5d:da: 8e:ec:c3:5f:9e:3f:8b:1f:ed:4f:47:6a:af:ff:f7: 7b:7d:11:bb:21:7d:17:10:06:7f:2a:b8:ed:2c:bb: c4:87:88:2c:ed:0c:6a:d3:d4:c2:b8:30:27:d0:75: 52:84:e6:af:8e:c3:21:82:e2:d8:59:78:c1:14:ab: 2b:e7:89:20:43:8b:a9:ff:97:5f:e0:8a:74:0c:48: d1:e8:7a:16:a5:69:e3:24:04:8e:9d:f9:2a:85:a3: d9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:43:EB:41:41:C9:DB:26:DA:DC:01:2C:AD:20:87:70:23:E3:A3:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/414b9eaf-0cfc-36c7-abf2-7e144dcb19c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:31:33:2d:05:22:91:ba:99:19:5e:04:91:74:65:df:71:58: 94:4b:67:78:59:86:dc:22:cd:e7:b3:6c:91:c6:60:3b:8d:44: 05:c7:eb:40:d5:35:25:fa:2f:0b:5f:e9:29:56:15:f5:ba:16: 28:52:09:f6:27:f8:17:50:13:b8:e2:65:4b:60:3a:58:23:a0: b3:f2:5b:43:df:2c:26:72:6f:da:16:48:aa:5a:59:29:10:33: 3f:c2:fc:46:00:25:d6:3b:62:38:b9:57:a0:cb:18:76:46:58: 99:65:5b:f9:fe:93:bf:ec:0f:c6:13:1c:19:a9:f6:78:a3:31: df:27:c6:2e:41:58:96:b8:09:ba:34:79:1e:e9:8d:6e:1c:d7: 83:3e:a4:db:fb:bb:be:75:d4:37:ac:fc:d6:b0:7a:bd:dd:3f: 1e:a3:88:3c:94:d4:df:99:42:7e:4e:2f:eb:21:de:0b:aa:d7: 5b:13:60:cb:ce:6c:e1:07:40:9c:0d:f6:4b:c8:1a:39:0a:e0: fe:81:9d:a7:39:26:d3:a8:09:78:9f:cf:35:4f:f7:4f:bb:ce: 3b:24:ce:6b:49:2b:74:b1:4e:b1:0b:9c:89:7b:66:5a:a2:52: 64:b3:1c:9a:1c:a4:b1:89:19:13:77:46:7b:58:51:83:82:5c: de:09:04:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXbw4D4281YEAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjA0NjJiZjgtZDRhNS00YzdjLTg3MGMtMGFkOWZjYTg1ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZb1jHVvAW5itiDPHldLqAUr1rJR80H3jSqc JTLA4N1Dc2v/zoFRSgRconwo9pHzsggQcJUpFhkAwRWiccBOzdyt3BIEs0bouCJ8 C3SJk/5/089gONfsTQXVk3QIdIeQuRvDxlho7nJ1FPNM9QT3GswBBG5RNstJp5S/ zlNJGxrWe9kxBZyTKXO/9J6vb5DpAH+pHz2Bneh5N1TzTJIB4535XdqO7MNfnj+L H+1PR2qv//d7fRG7IX0XEAZ/KrjtLLvEh4gs7Qxq09TCuDAn0HVShOavjsMhguLY WXjBFKsr54kgQ4up/5df4Ip0DEjR6HoWpWnjJASOnfkqhaPZmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlD60FBydsm2twBLK0gh3Aj46O4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDE0YjllYWYtMGNmYy0z NmM3LWFiZjItN2UxNDRkY2IxOWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcI/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkxMy0FIpG6mRleBJF0Zd9xWJRLZ3hZhtwizeezbJHGYDuNRAXH60DV NSX6Lwtf6SlWFfW6FihSCfYn+BdQE7jiZUtgOlgjoLPyW0PfLCZyb9oWSKpaWSkQ Mz/C/EYAJdY7Yji5V6DLGHZGWJllW/n+k7/sD8YTHBmp9nijMd8nxi5BWJa4Cbo0 eR7pjW4c14M+pNv7u7511Des/Nawer3dPx6jiDyU1N+ZQn5OL+sh3guq11sTYMvO bOEHQJwN9kvIGjkK4P6Bnac5JtOoCXifzzVP90+7zjskzmtJK3SxTrELnIl7Zlqi UmSzHJocpLGJGRN3RntYUYOCXN4JBEQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:33 2025 by rpki-client