$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68dab11e-d192-3f30-83b6-9ea314f94268.roa File: 68dab11e-d192-3f30-83b6-9ea314f94268.roa (raw, json) Hash identifier: eVFPT7Oq5WglnTG/MVFa19TBOtPvxkqbqV46x2p0fv4= Subject key identifier: 38:B9:B9:FD:A3:7C:EE:D2:A3:59:E3:31:05:A6:4A:34:0D:52:B6:42 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5816F7C255B859DBA3F9900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68dab11e-d192-3f30-83b6-9ea314f94268.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6f:7c:25:5b:85:9d:ba:3f:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=19c8966d-2cc8-4faa-bd01-543767cc1a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:18:94:76:94:a8:97:21:da:fb:bc:b2:09:3d: 12:2a:72:89:1a:9a:3f:91:bb:c6:9f:4e:a6:5e:16: 0e:36:b6:60:00:85:36:99:6f:d0:e1:98:c8:3d:04: 8f:28:35:3b:a8:cd:47:ac:fb:87:0b:97:f5:a8:f3: b5:3e:a3:fe:90:1a:89:61:a6:75:50:5c:bf:08:7b: 8a:6c:a5:86:22:1e:b4:21:4d:bc:15:f4:94:9e:7c: 43:49:d1:dc:91:ec:0a:a6:e4:d7:f7:2a:6f:b2:a6: 63:d1:62:dc:39:83:1c:b3:59:c9:fa:9e:a8:2b:a9: 72:cf:76:a2:20:3c:38:0d:ef:10:cc:32:eb:6a:9f: 2d:03:00:5d:91:66:72:66:38:55:b3:f1:c6:d9:3e: 2b:1a:74:74:e1:7e:35:4e:16:68:92:18:a8:9d:bc: a2:dd:bb:89:d3:4d:82:81:d4:d6:16:fd:ba:f7:ca: 7e:d0:bd:a3:b1:e7:61:fd:52:67:28:ef:e6:43:fc: b4:b1:5c:de:98:59:96:32:44:b4:24:3a:80:62:ce: 3c:57:99:19:1c:fa:ed:a5:41:d4:c7:0f:6a:64:a4: 31:7f:14:fb:ce:c5:00:32:2c:ca:50:bb:3c:5f:2d: e6:87:cc:f7:44:ee:b9:49:f7:1e:52:2d:b4:ea:e0: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B9:B9:FD:A3:7C:EE:D2:A3:59:E3:31:05:A6:4A:34:0D:52:B6:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68dab11e-d192-3f30-83b6-9ea314f94268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:04:be:7a:02:36:26:f9:b2:76:0f:cf:ee:a2:07:c3:54:62: 4c:bd:75:05:9d:9a:85:d1:3e:c3:78:70:51:6c:c5:15:71:35: 63:11:9f:48:ca:24:a5:68:84:e5:63:8a:97:51:81:21:07:61: 85:2f:68:ee:60:37:e2:ae:5c:14:28:34:a7:97:a4:89:41:7f: ce:20:7f:9e:23:06:0f:fc:a8:22:a6:62:c1:89:aa:92:d4:6f: 4d:f3:a8:0a:1b:23:04:75:7b:ef:1c:60:18:0d:df:21:5c:46: b0:a2:ca:77:a8:c5:f1:be:34:a7:a0:98:33:36:67:0b:cb:1c: 0f:53:fe:31:4b:41:6f:5c:21:24:af:7e:54:0b:88:c1:96:6b: 01:b9:1d:60:31:67:32:bd:d2:51:b9:23:8a:29:5d:d1:ff:a0: 5f:e9:75:1f:b4:da:41:f2:21:0e:be:96:97:3d:a3:ad:7f:45: 8d:09:aa:90:c7:8e:be:78:81:3d:2e:5f:bb:de:55:16:66:6f: 65:6d:07:d2:78:44:b8:bc:ce:aa:a3:50:95:c2:aa:3c:cb:0f: 74:4f:a2:59:5a:dc:d5:d2:a2:4a:bb:92:32:40:49:1d:7e:64: 84:8a:c2:9b:4b:cf:14:a0:5d:d7:47:60:99:2c:3c:11:c7:46: 02:17:a9:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgW98JVuFnbo/mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTljODk2NmQtMmNjOC00ZmFhLWJkMDEtNTQzNzY3Y2MxYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBiUdpSolyHa+7yyCT0SKnKJGpo/kbvGn06m XhYONrZgAIU2mW/Q4ZjIPQSPKDU7qM1HrPuHC5f1qPO1PqP+kBqJYaZ1UFy/CHuK bKWGIh60IU28FfSUnnxDSdHckewKpuTX9ypvsqZj0WLcOYMcs1nJ+p6oK6lyz3ai IDw4De8QzDLrap8tAwBdkWZyZjhVs/HG2T4rGnR04X41ThZokhionbyi3buJ002C gdTWFv2698p+0L2jsedh/VJnKO/mQ/y0sVzemFmWMkS0JDqAYs48V5kZHPrtpUHU xw9qZKQxfxT7zsUAMizKULs8Xy3mh8z3RO65SfceUi206uCyqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi5uf2jfO7So1njMQWmSjQNUrZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhkYWIxMWUtZDE5Mi0z ZjMwLTgzYjYtOWVhMzE0Zjk0MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwEvnoCNib5snYPz+6iB8NUYky9dQWdmoXRPsN4cFFsxRVxNWMRn0jK JKVohOVjipdRgSEHYYUvaO5gN+KuXBQoNKeXpIlBf84gf54jBg/8qCKmYsGJqpLU b03zqAobIwR1e+8cYBgN3yFcRrCiyneoxfG+NKegmDM2ZwvLHA9T/jFLQW9cISSv flQLiMGWawG5HWAxZzK90lG5I4opXdH/oF/pdR+02kHyIQ6+lpc9o61/RY0JqpDH jr54gT0uX7veVRZmb2VtB9J4RLi8zqqjUJXCqjzLD3RPolla3NXSokq7kjJASR1+ ZISKwptLzxSgXddHYJksPBHHRgIXqS8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:15 2025 by rpki-client