$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa File: 79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa (raw, json) Hash identifier: vSNjXYybF7Sz61x2XounOOe8f4v/MvQEkh1UNT9ZqTE= Subject key identifier: F3:BA:90:67:6A:57:D1:CC:79:46:A3:95:22:3E:E7:BF:6E:30:23:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581805ED5B314E6EEFDF7A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.58.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:80:5e:d5:b3:14:e6:ee:fd:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=97d4e079-af30-4f11-985a-465d44983333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:5d:9a:1d:6a:bb:89:bd:03:c2:ed:27:6e: 26:0e:bb:78:2b:ec:d8:c8:b5:19:1f:16:68:bf:a4: fa:56:33:bc:23:0b:30:30:b6:59:ce:01:7f:b7:58: e5:7e:73:86:51:b6:2c:14:4a:4f:bc:a1:40:bf:9e: 90:b5:60:d0:39:1e:98:5c:b4:f8:9c:97:2a:bc:49: f9:0c:8e:62:a7:01:db:2c:87:45:7c:7e:a6:2d:e2: cc:2f:d5:b1:79:b2:13:30:78:f1:97:b3:3a:65:c6: 91:d4:a3:7f:0c:4c:a0:3f:2e:f0:40:b7:49:dc:72: aa:64:42:a6:13:37:d2:37:ce:31:54:35:16:62:d5: c1:22:35:20:38:6a:3f:99:ff:50:52:b2:9f:26:13: 87:52:16:2e:bf:92:3c:f5:63:11:51:46:30:6f:76: 2d:f7:90:40:ff:19:21:18:4f:9f:f2:ab:73:ff:e8: 04:a1:4c:6c:54:68:95:8a:16:3e:4d:34:2c:83:90: 00:58:5e:64:7d:51:05:b2:67:30:5c:94:3e:0b:24: b2:ae:00:8f:3c:c2:db:88:e4:ea:b1:9c:4c:b4:27: 57:75:0d:40:f0:c0:0c:c8:ed:e0:83:ae:fc:cd:84: d9:0f:ec:e3:9f:ae:0d:01:06:e3:23:02:d8:d7:c1: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BA:90:67:6A:57:D1:CC:79:46:A3:95:22:3E:E7:BF:6E:30:23:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:71:9b:3e:54:48:f5:81:55:f4:49:e5:68:9a:43:b1:44:02: c0:ad:26:d0:b0:db:5a:ce:b6:3a:64:85:66:ba:37:b4:55:9a: 9e:e7:e6:1a:ec:00:23:e8:fa:da:43:c5:22:61:fa:a9:63:08: 22:6a:00:73:34:78:60:19:3f:93:d6:b4:e5:20:ae:d0:c1:49: d6:71:fb:90:e3:9d:ea:c8:bc:e8:ef:a9:41:85:4b:cc:1f:29: 0a:e6:eb:7a:40:48:5f:d3:af:95:15:b4:aa:5a:5c:38:c4:e9: b0:53:e0:86:86:df:64:a8:d0:30:fd:d9:4d:ae:70:e3:88:c0: 57:04:0e:92:f2:18:5b:aa:d9:3b:cc:e4:fc:9a:19:06:51:b4: 85:9b:dd:d4:e2:9c:bc:e2:31:89:1d:55:ed:9e:4f:1e:84:4c: ab:8c:da:52:af:b0:1c:74:bf:51:4f:64:c7:78:a6:52:b2:7e: 5f:fb:5d:ec:50:f6:b1:99:e7:bf:ad:ee:86:50:64:55:ad:cf: 81:80:d4:1b:ff:62:fc:90:6c:0d:84:b9:c0:a0:5e:eb:be:5f: 5d:e0:1d:df:0d:83:13:be:e6:e8:3c:80:b5:7e:9b:b5:8d:81: da:7e:89:65:69:c2:55:17:4b:b3:84:1f:f9:3a:4f:72:09:56: 61:61:be:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYBe1bMU5u7996AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTdkNGUwNzktYWYzMC00ZjExLTk4NWEtNDY1ZDQ0OTgzMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY5dmh1qu4m9A8LtJ24mDrt4K+zYyLUZHxZo v6T6VjO8IwswMLZZzgF/t1jlfnOGUbYsFEpPvKFAv56QtWDQOR6YXLT4nJcqvEn5 DI5ipwHbLIdFfH6mLeLML9WxebITMHjxl7M6ZcaR1KN/DEygPy7wQLdJ3HKqZEKm EzfSN84xVDUWYtXBIjUgOGo/mf9QUrKfJhOHUhYuv5I89WMRUUYwb3Yt95BA/xkh GE+f8qtz/+gEoUxsVGiVihY+TTQsg5AAWF5kfVEFsmcwXJQ+CySyrgCPPMLbiOTq sZxMtCdXdQ1A8MAMyO3gg678zYTZD+zjn64NAQbjIwLY18FQyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO6kGdqV9HMeUajlSI+579uMCNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzliMGMyZTYtMGRkMi0z ZTE3LTg3NDYtNDdhNDFiNWIxMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1xmz5USPWBVfRJ5WiaQ7FEAsCtJtCw21rOtjpkhWa6N7RVmp7n5hrs ACPo+tpDxSJh+qljCCJqAHM0eGAZP5PWtOUgrtDBSdZx+5DjnerIvOjvqUGFS8wf KQrm63pASF/Tr5UVtKpaXDjE6bBT4IaG32So0DD92U2ucOOIwFcEDpLyGFuq2TvM 5PyaGQZRtIWb3dTinLziMYkdVe2eTx6ETKuM2lKvsBx0v1FPZMd4plKyfl/7XexQ 9rGZ57+t7oZQZFWtz4GA1Bv/YvyQbA2EucCgXuu+X13gHd8NgxO+5ug8gLV+m7WN gdp+iWVpwlUXS7OEH/k6T3IJVmFhvv8= -----END CERTIFICATE-----Generated at Fri Apr 4 08:37:34 2025 by rpki-client