$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa File: 538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa (raw, json) Hash identifier: ZyzkI5d8b8JCmXK16YwdjRmt2E5ejXBGal8iH9cnWhY= Subject key identifier: C1:01:B7:C6:AB:20:A4:3D:03:88:99:35:D6:F7:62:C7:33:1C:A0:87 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817A81BE61CE9E26A93764 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7a:81:be:61:ce:9e:26:a9:37:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8dafaaf0-c93f-42a4-b994-631b44a7a2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d9:cb:41:d2:de:59:c5:c5:8e:7f:a5:be:1b: 80:a7:b0:9d:44:ae:c2:7c:46:3e:52:fc:b4:97:a8: 83:62:02:cd:de:95:88:60:ad:be:c6:95:00:f9:da: 84:96:fa:94:1c:11:41:e6:f0:81:39:5d:0f:9a:f8: ad:0c:cf:17:de:64:c3:38:b7:fb:a2:4b:64:b8:19: f3:ff:42:1f:06:51:18:da:e6:84:3c:1a:0b:05:ed: bf:96:a1:f3:5b:b9:b6:0f:d8:e5:18:84:ae:fa:24: ea:e4:f2:24:35:27:f1:28:2e:b8:14:e1:31:75:b6: b4:3d:71:19:64:9a:5b:61:28:12:0f:23:b3:38:b4: f5:53:2d:28:b4:9f:58:41:af:55:a0:ae:01:76:2e: fb:9b:db:80:3c:ea:35:74:48:98:4f:62:26:04:ab: 22:f0:61:b8:74:e5:55:6c:43:71:df:d3:61:6b:3a: e0:47:37:ad:51:28:f8:71:15:0d:10:08:74:14:f2: ab:ea:d0:60:e7:dd:72:9d:aa:ea:97:b3:f9:a6:1d: c3:c6:1a:99:ac:1b:99:5d:bb:74:19:c9:6a:fd:25: a8:c9:d1:0b:8a:a1:74:09:b9:99:05:76:3b:a3:2c: 3d:36:10:55:db:5d:cd:32:d1:9c:82:7b:34:a0:ce: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:01:B7:C6:AB:20:A4:3D:03:88:99:35:D6:F7:62:C7:33:1C:A0:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:bb:bf:3c:06:4c:94:6c:7f:d9:c8:b1:6b:84:d9:77:24:6c: c8:0e:80:8c:dc:fe:82:2f:23:c8:db:28:54:cb:21:64:17:2e: 7e:e4:44:61:62:5e:75:b0:7d:3c:7a:62:c7:ab:f4:98:bf:0f: 25:e2:45:04:1c:4c:8a:52:07:32:23:b7:d4:be:dc:2c:3e:93: 83:31:82:fc:08:d1:56:ae:43:76:3f:a9:b6:2d:51:b6:86:b4: 9b:66:25:73:0f:c2:1d:00:1d:f0:2a:47:3b:75:61:11:59:de: 87:ac:9b:13:76:73:56:10:a7:e3:7b:d5:e0:7d:c4:6e:61:b7: a6:bb:2e:9c:d7:cb:db:2c:c9:00:a3:22:60:38:98:45:e6:02: 38:76:08:31:ee:8d:2a:58:bc:c4:f5:10:53:8e:da:30:93:39: f3:02:0c:cb:fd:85:d0:d5:28:01:80:64:6e:35:6c:88:9f:ab: 03:04:77:0a:60:f5:8d:3d:39:29:e1:94:b8:e3:01:f5:b5:15: 0b:66:44:16:61:e2:1c:09:88:25:c1:f0:9f:cf:aa:54:5e:ac: f8:1b:ae:61:a6:0c:fe:17:62:26:61:f2:20:5d:7f:86:19:78: cc:10:30:7b:64:75:24:6b:fa:b9:d5:cc:9c:00:3f:88:ef:c7: f1:1d:a9:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXqBvmHOniapN2QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGRhZmFhZjAtYzkzZi00MmE0LWI5OTQtNjMxYjQ0YTdhMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdnLQdLeWcXFjn+lvhuAp7CdRK7CfEY+Uvy0 l6iDYgLN3pWIYK2+xpUA+dqElvqUHBFB5vCBOV0PmvitDM8X3mTDOLf7oktkuBnz /0IfBlEY2uaEPBoLBe2/lqHzW7m2D9jlGISu+iTq5PIkNSfxKC64FOExdba0PXEZ ZJpbYSgSDyOzOLT1Uy0otJ9YQa9VoK4Bdi77m9uAPOo1dEiYT2ImBKsi8GG4dOVV bENx39NhazrgRzetUSj4cRUNEAh0FPKr6tBg591ynarql7P5ph3DxhqZrBuZXbt0 Gclq/SWoydELiqF0CbmZBXY7oyw9NhBV213NMtGcgns0oM5FJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEBt8arIKQ9A4iZNdb3YsczHKCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTM4NjEwZjEtMWQ0MS0z OWY4LWFhOWMtYzVkYjFkMWRiZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO7vzwGTJRsf9nIsWuE2XckbMgOgIzc/oIvI8jbKFTLIWQXLn7kRGFi XnWwfTx6Yser9Ji/DyXiRQQcTIpSBzIjt9S+3Cw+k4MxgvwI0VauQ3Y/qbYtUbaG tJtmJXMPwh0AHfAqRzt1YRFZ3oesmxN2c1YQp+N71eB9xG5ht6a7LpzXy9ssyQCj ImA4mEXmAjh2CDHujSpYvMT1EFOO2jCTOfMCDMv9hdDVKAGAZG41bIifqwMEdwpg 9Y09OSnhlLjjAfW1FQtmRBZh4hwJiCXB8J/PqlRerPgbrmGmDP4XYiZh8iBdf4YZ eMwQMHtkdSRr+rnVzJwAP4jvx/Edqfo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:25 2025 by rpki-client