$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4e582a38-3647-3d56-a2d8-48b5b24640d5.roa File: 4e582a38-3647-3d56-a2d8-48b5b24640d5.roa (raw, json) Hash identifier: lecbqr2JtALf6QYygXvZ6zdAr7dS4G91K1lBTQL8p/o= Subject key identifier: E1:4E:14:A1:34:D3:8C:B4:5D:25:FE:C6:D5:43:EE:96:95:DE:9F:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C0AD3540E6A9869B30480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4e582a38-3647-3d56-a2d8-48b5b24640d5.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 64.233.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0a:d3:54:0e:6a:98:69:b3:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=f89e37ac-4611-4814-92f1-579d72244b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:1c:7f:a2:16:f5:1e:34:7c:7d:08:84:6f: ab:17:5e:1d:c8:27:7d:db:02:63:a5:a7:0f:45:4f: ea:86:46:4e:d4:e5:5f:0d:7d:d2:42:0f:d6:46:ae: 36:27:5b:57:bc:c4:aa:f4:2f:46:b1:3d:20:6b:56: 17:34:a0:e2:f2:41:df:75:cb:40:9f:e9:9c:b7:94: 24:7e:99:8a:71:53:c5:c7:fd:81:34:91:f3:99:61: c6:d5:94:3d:6a:e6:38:b7:30:dc:2f:87:43:5e:17: b6:5d:6c:7f:cc:a0:c6:dc:35:29:eb:7f:7d:92:fd: 07:0f:0f:cc:a8:1b:bd:b0:66:3f:cf:c3:73:0b:eb: ce:a9:07:cd:94:7d:ee:ae:71:c5:d3:c6:d7:3e:dc: 70:ab:25:54:02:96:ff:48:8a:e0:a8:92:a2:3d:5a: 1f:2a:4d:6b:ca:c3:c4:57:9e:bb:c8:be:5e:b7:5b: 5e:b1:b3:da:01:95:e9:92:25:b3:31:2e:0b:a6:6b: 99:67:56:c7:a7:f4:55:ce:39:c1:44:3d:8f:a2:2c: 11:94:00:05:8e:a0:2c:65:c4:99:22:80:a3:cb:1c: e1:b3:61:f8:5f:04:a1:b3:96:e9:64:b4:53:59:2d: 24:cf:17:24:8c:71:0a:a0:0f:84:bc:1e:85:78:4a: c8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4E:14:A1:34:D3:8C:B4:5D:25:FE:C6:D5:43:EE:96:95:DE:9F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4e582a38-3647-3d56-a2d8-48b5b24640d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b4:2c:ff:4e:1d:52:a6:c7:7e:11:27:87:91:39:3a:91:91: 1e:d0:1a:8c:d9:86:b0:da:c0:61:8a:fb:96:43:f3:8e:26:ce: 83:28:db:a3:4d:20:3a:88:14:b5:02:74:82:b6:70:ba:4c:7e: 45:b1:14:77:ca:c9:69:de:4e:d7:35:88:a6:1d:8c:4f:83:ed: 8f:d5:51:3d:bd:b4:12:ce:db:e9:4f:b0:db:2b:e5:56:8e:46: dc:36:6a:20:56:40:fd:ae:9a:7a:e9:db:95:08:24:2d:e3:45: ab:c2:d2:fe:3d:17:2c:ad:9f:27:2b:c7:76:5d:69:f4:ed:d9: 11:80:f9:12:f5:87:c6:4a:1c:3f:6f:ed:70:60:83:2e:fd:3f: 8f:20:6f:5c:3a:f5:40:77:34:96:70:13:ba:61:e5:66:36:d8: c7:dc:5a:c5:c3:f0:6f:35:cb:87:89:b9:60:10:57:f9:1b:c5: ba:17:6f:08:77:6a:90:3b:e7:e9:48:b0:d5:4a:57:07:dd:7c: bf:b9:24:46:8f:2a:1d:4b:f2:70:d0:98:8d:4e:03:d7:d6:7b: c8:a2:5e:e8:bd:ca:b1:43:ef:15:48:1f:1e:f6:b4:0d:a8:86: 6e:0d:97:04:92:20:3d:e9:c0:ac:78:b2:2a:ac:c6:51:75:77: f6:75:35:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITArTVA5qmGmzBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Zjg5ZTM3YWMtNDYxMS00ODE0LTkyZjEtNTc5ZDcyMjQ0YjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndAcf6IW9R40fH0IhG+rF14dyCd92wJjpacP RU/qhkZO1OVfDX3SQg/WRq42J1tXvMSq9C9GsT0ga1YXNKDi8kHfdctAn+mct5Qk fpmKcVPFx/2BNJHzmWHG1ZQ9auY4tzDcL4dDXhe2XWx/zKDG3DUp6399kv0HDw/M qBu9sGY/z8NzC+vOqQfNlH3urnHF08bXPtxwqyVUApb/SIrgqJKiPVofKk1rysPE V567yL5et1tesbPaAZXpkiWzMS4LpmuZZ1bHp/RVzjnBRD2PoiwRlAAFjqAsZcSZ IoCjyxzhs2H4XwShs5bpZLRTWS0kzxckjHEKoA+EvB6FeErIXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFOFKE004y0XSX+xtVD7paV3p/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGU1ODJhMzgtMzY0Ny0z ZDU2LWEyZDgtNDhiNWIyNDY0MGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq0LP9OHVKmx34RJ4eROTqRkR7QGozZhrDawGGK+5ZD844mzoMo26NN IDqIFLUCdIK2cLpMfkWxFHfKyWneTtc1iKYdjE+D7Y/VUT29tBLO2+lPsNsr5VaO Rtw2aiBWQP2umnrp25UIJC3jRavC0v49Fyytnycrx3ZdafTt2RGA+RL1h8ZKHD9v 7XBggy79P48gb1w69UB3NJZwE7ph5WY22MfcWsXD8G81y4eJuWAQV/kbxboXbwh3 apA75+lIsNVKVwfdfL+5JEaPKh1L8nDQmI1OA9fWe8iiXui9yrFD7xVIHx72tA2o hm4NlwSSID3pwKx4siqsxlF1d/Z1Nas= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:26 2025 by rpki-client