$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa File: 4788700d-5f68-32af-b8a9-fbb0558d4b24.roa (raw, json) Hash identifier: IvO/T9YA5yVIB+h4eVVmZgRI/m0gUkjWF9YbTKomurY= Subject key identifier: A8:3E:9A:E1:6D:8F:DB:B9:CF:EC:50:26:49:9E:1C:E0:1C:DB:E0:9B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582140A3F65A1562FE853A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:14:0a:3f:65:a1:56:2f:e8:53:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2c5425c4-fbf7-4af8-ad6d-43d61ec14bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:24:17:c2:46:b1:1d:35:29:40:48:46:c1: 44:6f:ff:fd:37:2c:db:84:c8:3a:87:89:95:f3:08: 3f:24:ea:1f:c3:b8:03:0b:b4:c1:ba:34:b3:38:a2: 67:65:03:e3:15:fc:5e:89:be:b1:c6:33:79:62:c8: 5b:69:ef:d0:7a:8d:1f:b7:0c:14:73:99:ef:d8:64: 7f:6b:6e:0e:00:0d:1a:42:63:0f:86:4e:20:1a:24: 75:b8:7c:5d:59:78:ba:fe:e2:f4:15:e4:b8:f2:0a: e7:09:0c:3b:90:c6:69:5c:c1:22:a5:d7:1b:46:eb: f7:9e:4a:ba:ba:29:15:37:9a:d5:31:d9:ad:58:cf: d2:01:97:b4:5c:02:90:f7:0b:22:7f:d5:ea:e8:f5: 59:06:7a:db:4f:f7:bb:e4:45:3b:13:ba:ae:2e:f2: a1:c6:03:76:b3:04:22:ee:68:44:6a:0c:08:9d:40: f5:c8:d5:5b:82:e0:ab:de:b1:83:91:c2:ac:79:cc: 18:58:62:e5:95:d2:30:f2:1a:42:db:40:0a:6d:f5: 89:12:ca:61:8e:7f:af:6b:61:d4:c8:54:50:a8:62: bd:cd:1e:e7:f5:73:14:fb:a7:9d:72:80:f8:31:47: c9:6d:2b:aa:be:40:98:14:d7:b6:81:c8:15:9e:cb: 89:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3E:9A:E1:6D:8F:DB:B9:CF:EC:50:26:49:9E:1C:E0:1C:DB:E0:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f8:66:b3:d8:fa:3d:58:f1:d4:8e:66:cb:60:d8:25:5f:7b: 9e:d2:1f:21:66:32:bb:79:97:7b:3b:18:b8:f2:d6:ea:b4:5d: 14:7a:d8:61:be:66:4f:e7:b7:fb:2b:87:0b:35:84:97:96:73: 10:9b:20:98:d1:ab:a3:4b:03:8f:2b:e6:bd:1c:3f:00:e0:41: 26:b4:11:06:73:96:39:2c:e1:e0:e2:04:81:71:e1:84:49:fe: 8c:27:4d:d2:d9:e7:ce:f7:62:1c:7b:05:d0:70:fd:25:93:b5: f6:05:54:07:5c:55:62:4f:6b:1e:2c:dc:96:71:6f:8d:88:7b: c3:76:2c:f3:09:f9:3c:6d:4c:b8:4b:2d:3d:d5:13:88:ff:89: 2c:78:c1:6c:07:a6:49:ba:2f:68:47:30:1f:60:76:42:eb:68: 38:15:3e:89:3a:d0:b6:f9:bc:a0:63:17:d3:34:53:a1:ed:1b: 7d:a1:e2:2a:d3:8b:b5:ff:3c:f5:3d:9b:9f:82:38:5f:70:a3: 6d:41:7a:af:c7:26:69:67:3a:f6:25:40:5a:c6:db:ac:27:ce: ed:10:fc:87:90:9f:6c:8f:2c:3a:5a:45:7b:c9:e3:a2:b8:94: f0:7d:85:6a:ea:3c:80:09:ae:33:d0:91:6e:59:92:0e:1f:03: 82:3f:e7:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghQKP2WhVi/oU6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmM1NDI1YzQtZmJmNy00YWY4LWFkNmQtNDNkNjFlYzE0YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTEkF8JGsR01KUBIRsFEb//9NyzbhMg6h4mV 8wg/JOofw7gDC7TBujSzOKJnZQPjFfxeib6xxjN5Yshbae/Qeo0ftwwUc5nv2GR/ a24OAA0aQmMPhk4gGiR1uHxdWXi6/uL0FeS48grnCQw7kMZpXMEipdcbRuv3nkq6 uikVN5rVMdmtWM/SAZe0XAKQ9wsif9Xq6PVZBnrbT/e75EU7E7quLvKhxgN2swQi 7mhEagwInUD1yNVbguCr3rGDkcKsecwYWGLlldIw8hpC20AKbfWJEsphjn+va2HU yFRQqGK9zR7n9XMU+6edcoD4MUfJbSuqvkCYFNe2gcgVnsuJtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg+muFtj9u5z+xQJkmeHOAc2+CbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDc4ODcwMGQtNWY2OC0z MmFmLWI4YTktZmJiMDU1OGQ0YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT4ZrPY+j1Y8dSOZstg2CVfe57SHyFmMrt5l3s7GLjy1uq0XRR62GG+ Zk/nt/srhws1hJeWcxCbIJjRq6NLA48r5r0cPwDgQSa0EQZzljks4eDiBIFx4YRJ /ownTdLZ5873Yhx7BdBw/SWTtfYFVAdcVWJPax4s3JZxb42Ie8N2LPMJ+TxtTLhL LT3VE4j/iSx4wWwHpkm6L2hHMB9gdkLraDgVPok60Lb5vKBjF9M0U6HtG32h4irT i7X/PPU9m5+COF9wo21Beq/HJmlnOvYlQFrG26wnzu0Q/IeQn2yPLDpaRXvJ46K4 lPB9hWrqPIAJrjPQkW5Zkg4fA4I/57M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:28 2025 by rpki-client