$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f8be572-9350-3fee-b62b-33feb50ca1a0.roa File: 6f8be572-9350-3fee-b62b-33feb50ca1a0.roa (raw, json) Hash identifier: 11t9WFldrcfpnbgn0GHvs0amG6vBRuzWDLKYEFonwAA= Subject key identifier: 36:EB:88:BC:29:25:5E:DB:BB:EE:9A:75:1B:CD:22:DB:0D:C9:11:B1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58181DA563B645564AB7E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f8be572-9350-3fee-b62b-33feb50ca1a0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 209.85.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:81:da:56:3b:64:55:64:ab:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a8d87b58-a27a-488d-9486-a5fb5cd9f853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:b0:40:95:36:b7:e8:10:0a:60:28:b5:ba: 02:fc:81:d2:61:a5:83:2c:eb:7d:c3:46:c3:ef:5b: 38:53:72:e6:e4:24:4c:f0:1b:74:54:53:2c:4d:e3: 8f:16:2b:19:2c:e0:e8:6f:3a:8f:59:c7:89:85:12: ac:0d:dc:c9:82:dc:cb:76:6f:8d:6b:af:a8:cd:e9: 15:cb:70:e9:df:9b:aa:44:d4:11:05:48:83:d7:59: 3a:59:65:20:5d:86:15:9b:52:54:0e:cd:21:8c:82: bb:0b:f8:29:f4:9b:41:c0:dc:0f:4c:16:92:9a:4a: 59:09:3d:36:5b:28:5c:5f:c8:63:c5:a6:0b:fa:06: 63:95:92:0d:8d:5c:84:f6:4e:cc:36:aa:10:1e:36: 02:4f:c5:12:e1:ae:8e:10:14:39:ea:56:e9:3b:2c: ce:4d:33:b1:d7:d3:81:be:28:86:b2:ca:8d:a5:df: 10:79:12:31:8d:da:6a:c9:3b:05:f8:36:2f:cf:40: 74:90:e0:16:00:6e:23:b8:47:cb:0d:f7:24:98:f1: 72:47:2f:4e:69:a3:ff:95:95:24:31:5e:14:4e:e6: af:01:30:c8:29:9a:fa:24:e9:ff:d6:e1:bb:06:58: ed:5f:f2:53:9f:3e:d6:d5:37:97:8c:6c:e1:82:20: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EB:88:BC:29:25:5E:DB:BB:EE:9A:75:1B:CD:22:DB:0D:C9:11:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f8be572-9350-3fee-b62b-33feb50ca1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e0:93:06:10:de:a7:ef:a0:d9:84:d6:8c:e3:1c:32:39:8e: 0a:64:83:a1:69:c0:41:de:1e:8e:1b:ad:6c:68:40:2a:6e:73: 60:94:63:f4:1e:c7:94:d9:71:93:62:ba:a3:03:c9:5d:e8:bd: 81:2b:17:13:c7:20:a2:5d:da:3e:76:23:37:b2:9d:d0:81:ec: 82:b4:39:cb:89:26:93:aa:91:fa:3b:61:a7:1c:5a:4c:87:dd: f8:f1:b3:0a:90:48:0a:4b:1b:aa:ab:cb:99:9d:68:03:cb:ae: 14:45:6a:3b:34:3a:2b:c6:6d:f2:45:4a:cc:db:54:3d:c0:16: 6d:ba:e2:1d:14:ac:95:ef:d3:24:2e:04:0f:9c:2c:9e:3e:7f: 1b:19:50:e9:cd:80:cc:4f:07:2f:e0:2a:cf:87:8e:ae:13:33: b3:92:03:34:5e:ee:b2:61:04:a1:d8:40:94:5a:f4:8b:57:9c: 42:e3:84:5a:76:fe:ac:39:b9:4e:41:08:5e:38:7f:fd:59:13: 08:10:12:3e:3b:6b:87:4d:a6:97:1e:f3:8b:1b:79:54:70:fe: a0:c6:0a:5e:d6:d1:4e:0d:67:cb:7f:e8:fd:3b:00:03:8b:3c: 64:15:7d:16:5c:db:52:d8:fe:b4:a9:ec:71:39:48:a3:f1:1c: 20:da:83:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYHaVjtkVWSrfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YThkODdiNTgtYTI3YS00ODhkLTk0ODYtYTVmYjVjZDlmODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr92wQJU2t+gQCmAotboC/IHSYaWDLOt9w0bD 71s4U3Lm5CRM8Bt0VFMsTeOPFisZLODobzqPWceJhRKsDdzJgtzLdm+Na6+ozekV y3Dp35uqRNQRBUiD11k6WWUgXYYVm1JUDs0hjIK7C/gp9JtBwNwPTBaSmkpZCT02 WyhcX8hjxaYL+gZjlZINjVyE9k7MNqoQHjYCT8US4a6OEBQ56lbpOyzOTTOx19OB viiGssqNpd8QeRIxjdpqyTsF+DYvz0B0kOAWAG4juEfLDfckmPFyRy9OaaP/lZUk MV4UTuavATDIKZr6JOn/1uG7BljtX/JTnz7W1TeXjGzhgiC0wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbriLwpJV7bu+6adRvNItsNyRGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmY4YmU1NzItOTM1MC0z ZmVlLWI2MmItMzNmZWI1MGNhMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbgkwYQ3qfvoNmE1ozjHDI5jgpkg6FpwEHeHo4brWxoQCpuc2CUY/Qe x5TZcZNiuqMDyV3ovYErFxPHIKJd2j52IzeyndCB7IK0OcuJJpOqkfo7YaccWkyH 3fjxswqQSApLG6qry5mdaAPLrhRFajs0OivGbfJFSszbVD3AFm264h0UrJXv0yQu BA+cLJ4+fxsZUOnNgMxPBy/gKs+Hjq4TM7OSAzRe7rJhBKHYQJRa9ItXnELjhFp2 /qw5uU5BCF44f/1ZEwgQEj47a4dNppce84sbeVRw/qDGCl7W0U4NZ8t/6P07AAOL PGQVfRZc21LY/rSp7HE5SKPxHCDag4U= -----END CERTIFICATE-----Generated at Fri Apr 4 08:40:39 2025 by rpki-client