$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa File: 6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa (raw, json) Hash identifier: u71X7nWZ7RUouYMM9y7PYNWoX+mI10ZNhdrJcyvqvBI= Subject key identifier: 75:64:4D:E7:2B:2D:4B:5A:06:6A:8E:69:01:75:56:0B:8A:09:6B:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58214773CE3F28027914D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 11344 IP address blocks: 209.85.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:14:77:3c:e3:f2:80:27:91:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=010b915e-281c-4daa-8808-70e7a1cb4826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:09:6d:92:33:c9:5a:0f:ec:1e:5d:13:f9: a8:d4:45:83:28:0a:3b:ad:cc:13:7f:70:20:65:5c: 3d:19:44:99:c2:d9:b0:06:58:55:11:33:cd:be:f1: 50:60:49:26:76:ea:10:a8:d1:26:8c:8b:2f:32:92: fc:3f:37:06:85:60:9f:b0:29:c0:be:ef:b7:5f:2a: f7:b0:8a:da:5f:e1:c8:99:10:d3:54:a3:9d:ea:63: 31:a3:8b:42:f4:dd:32:be:d7:c1:2f:d7:3c:b3:ad: e6:ea:c3:53:59:ce:40:e2:6d:f2:96:da:04:29:e8: 6f:b4:3f:8a:7d:b8:02:6f:0c:46:6e:fc:bc:19:44: 46:35:40:f6:b4:48:ce:4c:09:e6:31:b4:3c:88:be: 61:5b:20:d2:58:9d:5b:15:91:68:a2:6d:7d:16:a4: c3:44:2e:5a:d6:18:b6:e4:ab:a5:51:62:43:14:14: ac:6a:a1:8e:a2:47:dc:f9:e7:f3:97:89:d9:08:38: 55:3f:0b:b8:c0:b8:2c:cd:d4:38:7c:ee:19:b6:79: b9:e0:09:f6:4e:5f:dd:96:4f:fd:0f:ca:0b:4b:c5: d6:f3:29:6e:27:49:0b:d3:18:26:a7:6e:29:32:f5: eb:33:00:72:70:a5:ef:cd:9c:33:50:0b:38:5c:fe: 5d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:64:4D:E7:2B:2D:4B:5A:06:6A:8E:69:01:75:56:0B:8A:09:6B:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f1:d0:ff:7d:e5:cb:ef:8c:c3:7b:f8:0c:98:9b:50:c3:f0: 6b:93:12:e2:e3:33:17:21:49:25:64:d6:7f:79:ca:c7:bf:51: 7e:48:5d:b3:9f:a7:3b:2a:ca:4b:8f:f5:b2:d9:b4:29:1d:82: 09:1b:b0:3a:b9:9d:55:90:45:dd:b7:d3:d5:44:68:d4:f8:23: f7:2b:ae:11:0d:d1:25:73:e1:03:6c:aa:ec:30:88:8b:0e:22: 28:5f:a3:67:f2:54:f8:15:50:c0:82:a3:c9:24:fb:2c:7e:9c: dc:33:38:43:19:7d:28:15:df:47:cd:21:a4:71:92:50:9a:b5: 43:8b:08:d4:ba:c6:ef:2d:c2:c8:ec:8f:64:59:f6:dd:2f:68: eb:26:28:28:06:fe:92:71:58:24:46:1e:a0:cd:5c:d3:76:dc: 45:c8:d8:d8:86:8e:03:38:bb:3f:f3:52:99:64:68:37:75:34: 65:83:d8:0b:5d:9f:c1:06:a5:d2:c6:59:f1:58:a5:50:4f:e2: 02:11:35:1b:fe:7e:4d:ce:41:bd:fb:0a:ed:21:9a:d8:23:6a: c2:70:85:83:9e:d6:29:d9:cd:02:1a:23:1b:4b:44:6f:c2:d9: 03:0d:e7:05:1c:44:f2:97:0d:bc:ab:5f:6b:13:86:40:e2:9a: 58:93:c2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghR3POPygCeRTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDEwYjkxNWUtMjgxYy00ZGFhLTg4MDgtNzBlN2ExY2I0ODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4cJbZIzyVoP7B5dE/mo1EWDKAo7rcwTf3Ag ZVw9GUSZwtmwBlhVETPNvvFQYEkmduoQqNEmjIsvMpL8PzcGhWCfsCnAvu+3Xyr3 sIraX+HImRDTVKOd6mMxo4tC9N0yvtfBL9c8s63m6sNTWc5A4m3yltoEKehvtD+K fbgCbwxGbvy8GURGNUD2tEjOTAnmMbQ8iL5hWyDSWJ1bFZFoom19FqTDRC5a1hi2 5KulUWJDFBSsaqGOokfc+efzl4nZCDhVPwu4wLgszdQ4fO4Ztnm54An2Tl/dlk/9 D8oLS8XW8yluJ0kL0xgmp24pMvXrMwBycKXvzZwzUAs4XP5dpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVkTecrLUtaBmqOaQF1VguKCWu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmViMDU4MWQtMTNkYy0z YzlhLTk2OGUtNGU3NWM5MzZiMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPx0P995cvvjMN7+AyYm1DD8GuTEuLjMxchSSVk1n95yse/UX5IXbOf pzsqykuP9bLZtCkdggkbsDq5nVWQRd2309VEaNT4I/crrhEN0SVz4QNsquwwiIsO Iihfo2fyVPgVUMCCo8kk+yx+nNwzOEMZfSgV30fNIaRxklCatUOLCNS6xu8twsjs j2RZ9t0vaOsmKCgG/pJxWCRGHqDNXNN23EXI2NiGjgM4uz/zUplkaDd1NGWD2Atd n8EGpdLGWfFYpVBP4gIRNRv+fk3OQb37Cu0hmtgjasJwhYOe1inZzQIaIxtLRG/C 2QMN5wUcRPKXDbyrX2sThkDimliTwlQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:30 2025 by rpki-client