$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68bb21ce-82b3-3eb4-af6d-a4aaf728d60c.roa File: 68bb21ce-82b3-3eb4-af6d-a4aaf728d60c.roa (raw, json) Hash identifier: 3YiSErxRwzIUeaMBoCRrlJ6Vx2/tq5TmMtcfA69NgBo= Subject key identifier: D8:6E:27:02:30:15:00:9D:A5:71:D8:5B:D2:BD:3B:9A:B1:A7:E0:9F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822CF75472E16204BEDEC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68bb21ce-82b3-3eb4-af6d-a4aaf728d60c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:2c:f7:54:72:e1:62:04:be:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=de1343ff-fb8e-4641-8e5f-fb3772dff5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6a:10:bb:83:4c:da:a5:1a:58:ac:74:60:aa: 26:d6:0d:41:b1:c7:01:1b:49:a3:87:22:06:7a:a7: 54:2a:8e:cc:8b:d2:24:2b:66:b7:10:b7:41:05:d5: 6c:9f:cc:43:18:51:80:c0:77:a3:c9:85:de:17:23: b3:1a:1b:0d:dc:3a:f3:bf:56:a8:9b:ae:19:34:ec: d3:e6:48:08:0b:ed:e5:f2:bd:78:27:78:06:44:4a: 61:4e:97:3a:33:af:1c:a6:17:d1:5e:f8:42:26:94: b1:68:ac:f1:f4:59:2a:e7:4b:52:3c:a0:00:f3:2b: 4f:a6:4a:ae:bf:38:e5:80:73:61:b6:81:1c:f9:09: 54:4f:bd:72:ae:d9:69:a0:32:4c:cf:77:ab:94:b5: 86:5c:ab:ec:eb:35:92:ec:ba:07:60:3e:11:0d:69: 9b:48:2d:6c:24:57:61:73:91:e5:4a:c5:54:0a:d6: b0:50:d0:5e:34:a2:77:89:9b:94:b6:f5:37:5a:68: 91:bd:4d:3b:65:88:87:9a:0b:f0:b9:de:48:f6:25: b8:43:76:4d:eb:54:9b:b0:1b:78:47:84:ed:4b:52: 0e:77:b9:07:2e:0b:31:d0:43:36:d9:b7:90:fd:59: d2:1a:27:59:95:bc:50:a5:49:68:8c:4b:6f:06:15: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6E:27:02:30:15:00:9D:A5:71:D8:5B:D2:BD:3B:9A:B1:A7:E0:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68bb21ce-82b3-3eb4-af6d-a4aaf728d60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d6:3b:0f:c9:0b:05:0e:a9:30:03:9e:fa:21:38:ec:d2:94: 41:16:87:bf:e4:93:40:aa:bc:95:dd:2e:f0:2c:ff:ad:82:f9: 85:89:aa:d0:d0:cd:02:17:b0:b9:7d:98:d4:51:ec:ee:70:a0: bc:db:01:c3:e9:4f:02:22:1a:66:92:0f:bb:88:65:46:8c:f7: 15:8a:c7:dc:d4:df:07:9a:41:58:08:79:2d:4f:16:ba:55:fa: bd:33:70:4f:0e:d5:77:4f:d7:8a:00:51:21:6f:af:eb:37:1b: 61:1f:22:43:f1:81:17:d3:54:aa:11:1e:ac:4f:38:b5:9b:3f: e5:37:92:a5:19:72:cd:8c:5a:87:ea:a4:2c:54:b0:79:41:7b: 76:58:ec:db:7c:7d:ba:da:37:44:ba:57:11:71:d1:b4:5e:6a: 6c:58:90:95:1c:50:c5:27:ac:f8:d5:d1:72:fc:ef:4f:20:c8: 02:fc:a3:11:98:09:45:4d:b1:6f:56:98:21:c6:1a:c6:6e:bf: e4:3a:f1:5b:67:7a:37:6f:e5:f2:1e:12:fb:58:67:69:74:6b: 1c:6f:c8:30:a2:b8:1f:86:20:19:97:4c:33:8b:80:9c:f6:e3: 08:94:85:97:71:c8:05:ea:24:76:92:0f:40:19:64:ac:31:8c: e0:cc:bb:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiz3VHLhYgS+3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGUxMzQzZmYtZmI4ZS00NjQxLThlNWYtZmIzNzcyZGZmNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2oQu4NM2qUaWKx0YKom1g1BsccBG0mjhyIG eqdUKo7Mi9IkK2a3ELdBBdVsn8xDGFGAwHejyYXeFyOzGhsN3Drzv1aom64ZNOzT 5kgIC+3l8r14J3gGREphTpc6M68cphfRXvhCJpSxaKzx9Fkq50tSPKAA8ytPpkqu vzjlgHNhtoEc+QlUT71yrtlpoDJMz3erlLWGXKvs6zWS7LoHYD4RDWmbSC1sJFdh c5HlSsVUCtawUNBeNKJ3iZuUtvU3WmiRvU07ZYiHmgvwud5I9iW4Q3ZN61SbsBt4 R4TtS1IOd7kHLgsx0EM22beQ/VnSGidZlbxQpUlojEtvBhVJVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhuJwIwFQCdpXHYW9K9O5qxp+CfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhiYjIxY2UtODJiMy0z ZWI0LWFmNmQtYTRhYWY3MjhkNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnWOw/JCwUOqTADnvohOOzSlEEWh7/kk0CqvJXdLvAs/62C+YWJqtDQ zQIXsLl9mNRR7O5woLzbAcPpTwIiGmaSD7uIZUaM9xWKx9zU3weaQVgIeS1PFrpV +r0zcE8O1XdP14oAUSFvr+s3G2EfIkPxgRfTVKoRHqxPOLWbP+U3kqUZcs2MWofq pCxUsHlBe3ZY7Nt8fbraN0S6VxFx0bReamxYkJUcUMUnrPjV0XL8708gyAL8oxGY CUVNsW9WmCHGGsZuv+Q68Vtnejdv5fIeEvtYZ2l0axxvyDCiuB+GIBmXTDOLgJz2 4wiUhZdxyAXqJHaSD0AZZKwxjODMuwA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:01 2025 by rpki-client