$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/580b9816-8c67-31a2-89f3-fe77a1cc383f.roa File: 580b9816-8c67-31a2-89f3-fe77a1cc383f.roa (raw, json) Hash identifier: 2z/XViDTQAlCRErZEHGw/W3xoUqQdDPb3+0CZKGjrc8= Subject key identifier: 4D:BF:DD:9E:CB:7E:D6:CE:83:2F:9C:AF:2A:7D:99:D9:C9:53:6D:B2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5816E15CFDFD85944A8A400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/580b9816-8c67-31a2-89f3-fe77a1cc383f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6e:15:cf:df:d8:59:44:a8:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2299e89c-ce9d-4a39-9928-d359a5eb699c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c7:fc:c2:e9:e4:fd:01:45:3b:4a:f0:58:5f: 0f:76:97:78:91:81:aa:8c:f7:53:68:b4:25:54:87: b6:be:23:c7:a1:a2:5f:1d:1e:39:ab:12:e0:c8:43: f6:bf:59:b1:f4:6c:93:00:29:70:7a:4c:36:1f:38: cb:ba:ab:56:b5:0a:fe:da:12:98:a3:9f:ec:25:22: 83:7c:20:49:f3:6b:40:63:cd:12:4d:cf:99:1f:71: 82:3c:2f:ce:54:eb:b5:a2:62:82:96:b2:ac:93:ac: 5e:9e:ee:7b:3d:02:9c:80:6d:22:76:e2:53:0c:3f: 92:ff:5a:86:db:96:70:19:52:12:0e:64:13:a4:ca: 06:dd:7a:81:36:9a:7a:95:24:f0:96:d4:bc:f5:3b: 99:db:66:c0:b7:ed:bb:0b:cb:7b:3a:8b:00:4a:04: 81:45:f0:29:41:41:25:bf:21:d5:07:1f:7f:2e:ac: 03:3d:17:ad:de:f2:a1:e1:68:06:8a:2c:3b:80:84: b5:51:92:4c:88:9e:3a:ce:d5:35:e3:29:95:84:e5: 1a:fe:b0:42:6d:08:af:c0:b7:90:d4:5e:cb:92:8b: 09:87:b9:de:29:f5:7f:22:9c:ee:99:f1:cb:9e:70: 46:9d:25:fd:ee:65:89:d4:e1:72:91:b8:f7:1c:12: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BF:DD:9E:CB:7E:D6:CE:83:2F:9C:AF:2A:7D:99:D9:C9:53:6D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/580b9816-8c67-31a2-89f3-fe77a1cc383f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e8:de:ef:37:3c:30:e3:57:03:31:71:db:d3:23:5c:44:e9: 03:41:c2:95:1e:31:c9:e9:31:29:24:27:d8:6c:0d:8c:1e:4a: 00:7c:e1:d6:8c:d6:bb:22:81:5b:e6:13:2a:a6:f8:86:9f:a6: ea:98:56:72:ff:44:02:76:43:a6:3b:3d:4e:d6:9c:e4:72:99: 64:cc:c4:6f:96:b9:f1:7d:28:41:51:78:71:aa:cc:43:37:e3: b8:52:8f:3d:83:24:79:00:06:bd:68:20:96:2c:65:53:2c:78: a5:c3:5d:eb:f3:13:13:88:d4:ce:14:63:f9:31:ff:61:e6:5e: 5a:74:2c:78:60:21:c8:d1:88:18:0a:0f:5e:26:16:f6:9a:15: 26:aa:7b:1d:4c:7b:ba:78:cc:d4:b9:4b:1b:5d:bf:8a:cf:70: ea:06:54:b8:ee:22:5c:3a:49:c9:09:8b:a5:6e:ad:1e:88:c8: 96:8d:6f:e9:65:32:b1:36:d3:c4:6e:03:e2:66:9b:d0:2e:84: a5:df:c4:16:54:99:ed:50:ee:d9:1c:3b:51:84:ae:e2:a8:83: f0:11:e2:4d:08:91:3f:ad:8e:18:c7:12:db:ac:1d:69:88:9f: 20:6e:db:e5:aa:7e:44:eb:f2:c0:3c:71:a6:1e:88:4f:1a:a2: 98:3a:c7:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgW4Vz9/YWUSopAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjI5OWU4OWMtY2U5ZC00YTM5LTk5MjgtZDM1OWE1ZWI2OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMf8wunk/QFFO0rwWF8Pdpd4kYGqjPdTaLQl VIe2viPHoaJfHR45qxLgyEP2v1mx9GyTAClwekw2HzjLuqtWtQr+2hKYo5/sJSKD fCBJ82tAY80STc+ZH3GCPC/OVOu1omKClrKsk6xenu57PQKcgG0iduJTDD+S/1qG 25ZwGVISDmQTpMoG3XqBNpp6lSTwltS89TuZ22bAt+27C8t7OosASgSBRfApQUEl vyHVBx9/LqwDPRet3vKh4WgGiiw7gIS1UZJMiJ46ztU14ymVhOUa/rBCbQivwLeQ 1F7LkosJh7neKfV/IpzumfHLnnBGnSX97mWJ1OFykbj3HBKzcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2/3Z7LftbOgy+cryp9mdnJU22yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTgwYjk4MTYtOGM2Ny0z MWEyLTg5ZjMtZmU3N2ExY2MzODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADro3u83PDDjVwMxcdvTI1xE6QNBwpUeMcnpMSkkJ9hsDYweSgB84daM 1rsigVvmEyqm+IafpuqYVnL/RAJ2Q6Y7PU7WnORymWTMxG+WufF9KEFReHGqzEM3 47hSjz2DJHkABr1oIJYsZVMseKXDXevzExOI1M4UY/kx/2HmXlp0LHhgIcjRiBgK D14mFvaaFSaqex1Me7p4zNS5Sxtdv4rPcOoGVLjuIlw6SckJi6VurR6IyJaNb+ll MrE208RuA+Jmm9AuhKXfxBZUme1Q7tkcO1GEruKog/AR4k0IkT+tjhjHEtusHWmI nyBu2+WqfkTr8sA8caYeiE8aopg6x6A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:15 2025 by rpki-client