$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa File: 82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa (raw, json) Hash identifier: Q6WjNs6i6svObNedgA/9GXtnUw/cPYPP5SNcQkwmFbE= Subject key identifier: 41:F9:80:B5:EA:1B:FC:42:24:8D:73:45:84:71:01:58:86:09:CE:9A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817A3D7A26393CC2C37500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 209.85.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7a:3d:7a:26:39:3c:c2:c3:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=110a3d99-abd5-4424-a348-c12b2a08dc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3f:ea:0e:b1:99:19:fd:9e:8d:36:5c:74:0d: 94:32:e5:29:4a:01:0f:cc:78:9d:aa:fb:ad:f9:6b: 13:6c:1d:2d:c0:5c:af:38:a1:da:5c:1d:f4:c0:ef: 17:03:94:35:a5:e6:bc:e4:54:5f:b4:be:b8:ee:55: 55:57:95:31:f3:fe:5b:46:c2:49:f5:99:1d:b2:55: 5a:33:ce:b6:83:91:7a:a1:ca:45:a9:0a:9e:e0:dd: ed:c4:07:05:ce:66:64:9e:7a:fc:0b:90:d4:04:bf: a8:11:25:56:df:cd:c7:09:1c:49:0f:5c:dd:f3:18: 42:f2:dc:3f:cd:9f:98:a4:4e:0b:d3:3f:4f:a3:37: 41:be:65:cd:61:73:e2:23:0b:9b:f5:e1:4a:19:f7: 6a:cb:ec:5f:74:d2:c5:22:cf:7f:e1:54:60:50:b0: 29:ec:ce:bb:b6:48:ef:96:91:8f:60:f9:01:1b:d7: c7:40:24:b1:a8:da:49:ee:0c:8d:20:86:6c:35:c1: 15:c7:94:19:1d:21:79:4d:ad:5a:e3:2e:9b:a1:69: c5:1e:f3:9e:72:32:29:d6:70:7e:07:bf:9f:b0:02: 38:ce:cb:73:b1:bc:c3:18:b1:8f:6d:36:ed:a2:c4: 90:0d:f5:5d:e1:a1:94:8d:ce:22:47:0d:68:dc:8f: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F9:80:B5:EA:1B:FC:42:24:8D:73:45:84:71:01:58:86:09:CE:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:1f:b2:95:67:91:20:8d:be:82:46:84:9b:52:7d:e2:28:80: b5:d2:ff:de:ab:a1:a5:93:4e:ca:16:78:57:bc:6b:ad:3b:77: c6:56:2b:72:c2:53:66:7e:5b:43:b0:ae:df:0f:49:ce:ca:0d: ba:d7:ba:05:6e:60:52:96:85:f0:44:07:70:e8:0a:d5:ab:aa: cd:bc:f7:33:29:f0:5b:d3:da:39:e5:88:55:a2:90:50:24:34: 24:ea:37:6b:b6:d3:89:77:ac:3c:42:47:10:74:91:f2:2d:dc: 41:e2:6c:f1:52:81:4c:52:bf:8d:44:67:00:8a:b3:2d:5a:d1: 5a:88:a4:4c:ef:70:d2:5e:e1:6a:fe:ec:85:f6:b4:59:10:7f: ec:11:78:6d:46:e0:d9:50:ce:c1:0a:bd:d9:71:3a:4f:4b:02: a8:5c:a3:45:90:86:bc:94:95:9f:28:67:3d:41:04:ae:95:a5: 26:8d:52:0e:77:b4:2f:b5:f9:f3:7b:b7:f1:72:15:a6:97:37: 4c:62:5b:83:12:9d:89:5d:cb:b0:e0:56:8a:86:09:dd:2d:c6: fd:36:31:71:21:b7:c6:3d:8f:45:37:2e:be:8e:42:6a:4f:f5: 51:20:4d:64:76:b9:fa:48:8e:bf:8f:f3:35:24:8d:d5:25:be: 73:f5:2a:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXo9eiY5PMLDdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTEwYTNkOTktYWJkNS00NDI0LWEzNDgtYzEyYjJhMDhkYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT/qDrGZGf2ejTZcdA2UMuUpSgEPzHidqvut +WsTbB0twFyvOKHaXB30wO8XA5Q1pea85FRftL647lVVV5Ux8/5bRsJJ9ZkdslVa M862g5F6ocpFqQqe4N3txAcFzmZknnr8C5DUBL+oESVW383HCRxJD1zd8xhC8tw/ zZ+YpE4L0z9PozdBvmXNYXPiIwub9eFKGfdqy+xfdNLFIs9/4VRgULAp7M67tkjv lpGPYPkBG9fHQCSxqNpJ7gyNIIZsNcEVx5QZHSF5Ta1a4y6boWnFHvOecjIp1nB+ B7+fsAI4zstzsbzDGLGPbTbtosSQDfVd4aGUjc4iRw1o3I+MzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH5gLXqG/xCJI1zRYRxAViGCc6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODJiYjhlNGItOGU2OC0z MDNkLTlmZjEtOTNmNWY2Njg4ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwfspVnkSCNvoJGhJtSfeIogLXS/96roaWTTsoWeFe8a607d8ZWK3LC U2Z+W0Owrt8PSc7KDbrXugVuYFKWhfBEB3DoCtWrqs289zMp8FvT2jnliFWikFAk NCTqN2u204l3rDxCRxB0kfIt3EHibPFSgUxSv41EZwCKsy1a0VqIpEzvcNJe4Wr+ 7IX2tFkQf+wReG1G4NlQzsEKvdlxOk9LAqhco0WQhryUlZ8oZz1BBK6VpSaNUg53 tC+1+fN7t/FyFaaXN0xiW4MSnYldy7DgVoqGCd0txv02MXEht8Y9j0U3Lr6OQmpP 9VEgTWR2ufpIjr+P8zUkjdUlvnP1KhU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:01 2025 by rpki-client