$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d2bfa6d-f368-3589-bda1-46463fd6657c.roa File: 6d2bfa6d-f368-3589-bda1-46463fd6657c.roa (raw, json) Hash identifier: Ys3RxLWppJfMcKnRtMYU41Uu0VG+PT58pDgTrS//82s= Subject key identifier: 3E:25:A2:F9:10:0E:82:0C:CE:89:D0:F5:37:36:C7:E5:F1:9F:F0:C5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822340BF75F5FF18F57800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d2bfa6d-f368-3589-bda1-46463fd6657c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:23:40:bf:75:f5:ff:18:f5:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=bd99776a-cfa8-4b8f-9d36-dce305b60ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:a0:e9:13:f9:73:d4:e9:b1:63:97:c2:64: d9:f9:04:65:3c:c9:38:9c:10:ce:bc:22:98:8f:c2: a0:61:74:3f:c7:d4:b2:c0:fd:ad:90:db:6d:42:28: 48:69:fe:96:76:33:30:b4:f0:a3:fb:50:e1:ac:85: 01:1b:ac:31:57:6f:b4:56:76:48:c9:6f:21:ea:03: 4f:e5:6d:ff:a9:35:70:1a:b5:45:51:cb:6c:27:2b: 69:95:85:85:5b:56:26:31:86:95:57:82:b3:8e:6c: eb:49:d6:94:b2:b7:fc:f9:36:7f:16:f5:a6:7b:9c: 7f:16:4b:72:c3:3f:17:44:5e:3b:60:05:66:0f:7c: 3f:a4:b3:01:09:e4:53:53:ab:1d:8f:ef:bf:27:c5: 2d:1c:d9:06:0d:00:cc:9d:10:af:35:17:49:c6:a7: 71:a0:16:32:08:20:84:13:7a:51:b9:e0:e2:31:36: 85:5a:1b:6b:de:0b:19:0a:15:06:08:b5:e2:93:49: 91:9d:4a:68:68:dc:99:71:b5:c6:3f:2f:d9:0d:17: 45:7f:80:82:ef:ef:30:74:d3:ac:20:23:8a:a5:ea: f3:5c:d6:2b:69:47:47:0f:52:c8:cf:31:d0:b0:e0: b3:a7:06:a2:cd:b0:b4:c2:38:6a:b0:50:79:0a:e6: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:25:A2:F9:10:0E:82:0C:CE:89:D0:F5:37:36:C7:E5:F1:9F:F0:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d2bfa6d-f368-3589-bda1-46463fd6657c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e0:af:63:a7:a8:4a:b5:03:ac:5a:d8:ab:f1:d7:83:7a:d3: ab:f6:68:16:9d:57:0f:c2:93:0c:79:6e:73:b3:58:bb:61:13: 66:7d:b4:b4:dc:99:43:fa:fc:da:28:8b:a9:4c:1a:63:67:b8: 52:11:5a:95:25:04:31:e2:6b:6e:29:f1:75:fb:65:d5:e8:d8: f8:96:5a:52:1c:de:2f:f7:f9:98:1a:ca:49:55:43:d6:b4:b7: 70:b2:04:dd:39:f0:ae:07:a0:31:17:ac:e7:8c:9a:bf:9d:b4: 69:d4:a4:88:54:b4:46:95:ba:e5:60:fe:fc:3a:57:de:aa:81: 5c:10:57:a7:29:7f:c1:88:8c:36:8e:dd:39:6e:ff:93:e3:d1: 8a:41:3e:72:19:04:65:6a:52:fc:4d:b2:d7:f7:90:0d:5e:4a: 09:73:78:02:c6:6e:8d:5e:b3:33:ab:a5:cf:57:02:f8:2b:f5: 30:58:76:1e:60:20:5d:b9:80:0e:20:12:44:99:f3:fa:6e:a5: a7:dd:54:c6:b5:85:67:72:67:46:63:6f:73:ae:e0:ff:72:56: d6:73:1d:06:51:c9:29:17:66:12:60:18:31:e9:42:40:09:f9: a4:4a:1b:8d:c1:3c:d7:a8:a2:7b:65:26:56:7b:b4:f7:32:ff: 0b:58:42:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiNAv3X1/xj1eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmQ5OTc3NmEtY2ZhOC00YjhmLTlkMzYtZGNlMzA1YjYwZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybyg6RP5c9TpsWOXwmTZ+QRlPMk4nBDOvCKY j8KgYXQ/x9SywP2tkNttQihIaf6WdjMwtPCj+1DhrIUBG6wxV2+0VnZIyW8h6gNP 5W3/qTVwGrVFUctsJytplYWFW1YmMYaVV4KzjmzrSdaUsrf8+TZ/FvWme5x/Fkty wz8XRF47YAVmD3w/pLMBCeRTU6sdj++/J8UtHNkGDQDMnRCvNRdJxqdxoBYyCCCE E3pRueDiMTaFWhtr3gsZChUGCLXik0mRnUpoaNyZcbXGPy/ZDRdFf4CC7+8wdNOs ICOKperzXNYraUdHD1LIzzHQsOCzpwaizbC0wjhqsFB5CuZ+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4lovkQDoIMzonQ9Tc2x+Xxn/DFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmQyYmZhNmQtZjM2OC0z NTg5LWJkYTEtNDY0NjNmZDY2NTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrcIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPgr2OnqEq1A6xa2Kvx14N606v2aBadVw/Ckwx5bnOzWLthE2Z9tLTc mUP6/Nooi6lMGmNnuFIRWpUlBDHia24p8XX7ZdXo2PiWWlIc3i/3+ZgayklVQ9a0 t3CyBN058K4HoDEXrOeMmr+dtGnUpIhUtEaVuuVg/vw6V96qgVwQV6cpf8GIjDaO 3Tlu/5Pj0YpBPnIZBGVqUvxNstf3kA1eSglzeALGbo1eszOrpc9XAvgr9TBYdh5g IF25gA4gEkSZ8/pupafdVMa1hWdyZ0Zjb3Ou4P9yVtZzHQZRySkXZhJgGDHpQkAJ +aRKG43BPNeoontlJlZ7tPcy/wtYQsw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:42 2025 by rpki-client