$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa File: 85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa (raw, json) Hash identifier: hbcYuCfLj0xRA2I87l9W9FJWgGACHnbgb/viLZmj3eQ= Subject key identifier: 64:DE:A8:4E:39:F9:9B:26:75:5B:D9:AD:0B:0F:44:17:B7:87:B7:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582125B4DD00B04E865A800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 209.85.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:12:5b:4d:d0:0b:04:e8:65:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=341a8f46-7d2b-4b1c-aee1-20dc66185e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:87:dc:28:b5:fe:33:52:8e:ef:23:65:97: c7:aa:e5:a3:d2:7e:95:2a:0a:2d:6a:7c:79:f8:61: 1a:cc:2b:c3:05:78:a0:43:a9:74:4b:d3:99:2e:c8: 0b:1c:98:c7:a9:54:fd:68:a3:8f:5b:ed:77:e9:5c: 5e:a6:63:f8:11:e5:78:e9:d1:2c:77:08:a1:9c:2d: 1b:df:b8:bb:ff:45:ad:83:44:25:c5:03:87:09:66: 00:09:d7:69:f1:96:44:20:63:5a:cf:f8:55:95:c7: a4:25:45:91:99:0d:4d:0b:76:47:56:28:b5:29:70: 47:e1:71:d9:d8:a3:15:65:ca:66:64:9c:ad:5e:78: 85:33:e6:17:a1:1e:e1:1b:f5:ab:65:84:90:1d:20: 54:83:59:38:b9:66:34:be:67:99:e2:b6:d7:19:3c: bf:88:34:db:bd:39:d8:6e:6e:6d:4e:ef:2e:17:12: 56:8a:41:10:a5:2d:de:0e:2e:77:8b:5c:36:ff:e4: b8:68:79:4b:71:4c:43:fa:ae:3f:51:a7:cb:ff:7a: 47:bd:a7:ed:c2:95:01:34:5d:77:b0:77:6c:66:bf: 0f:bf:3c:5e:49:e3:a2:6e:0f:4c:85:ab:7e:22:cc: e8:9b:68:10:cb:15:82:b6:de:fe:e2:1f:38:8e:f4: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DE:A8:4E:39:F9:9B:26:75:5B:D9:AD:0B:0F:44:17:B7:87:B7:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:44:47:df:fa:3f:df:4f:b8:12:76:39:52:41:f3:11:d6:ee: 78:d8:29:bb:70:43:4f:e1:f9:10:d9:8e:d3:af:fc:9a:dd:05: f4:78:f9:2f:e3:14:9f:5f:da:3f:03:16:06:4b:e7:f7:da:ed: fe:4a:9f:c9:17:52:52:f9:f1:52:95:c9:8d:eb:8c:47:8e:cd: 34:64:f8:a8:64:94:a3:9b:75:07:0f:97:0f:a6:95:15:e8:d7: 3c:52:cb:d3:97:ef:21:e0:e7:b9:47:f7:e4:3b:79:9a:95:1b: 17:19:4e:75:ba:9e:16:49:9f:f3:41:45:a0:2f:e5:4c:8a:11: 83:88:55:ba:a1:8a:29:b7:39:c7:fb:e7:6a:70:b1:6c:db:54: a4:59:6b:42:62:21:ba:b8:85:1c:89:bd:6f:c2:b0:c1:41:26: a9:e5:68:f8:e4:13:e0:c9:6f:86:99:c3:56:e9:83:14:c0:07: ba:6f:ae:b1:09:89:67:6f:27:6e:78:4c:77:86:e6:1c:dc:d8: c7:e6:01:c2:05:65:bc:cd:a1:f6:f4:4d:3e:60:be:fc:e6:72: d4:25:9f:8f:15:36:0a:dc:1a:69:66:35:2a:5c:78:e3:c6:b0: fb:f7:28:4a:da:eb:ce:c4:db:ac:f1:92:a6:66:dd:33:1c:5d: 9c:bd:0e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghJbTdALBOhlqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzQxYThmNDYtN2QyYi00YjFjLWFlZTEtMjBkYzY2MTg1ZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1WH3Ci1/jNSju8jZZfHquWj0n6VKgotanx5 +GEazCvDBXigQ6l0S9OZLsgLHJjHqVT9aKOPW+136VxepmP4EeV46dEsdwihnC0b 37i7/0Wtg0QlxQOHCWYACddp8ZZEIGNaz/hVlcekJUWRmQ1NC3ZHVii1KXBH4XHZ 2KMVZcpmZJytXniFM+YXoR7hG/WrZYSQHSBUg1k4uWY0vmeZ4rbXGTy/iDTbvTnY bm5tTu8uFxJWikEQpS3eDi53i1w2/+S4aHlLcUxD+q4/UafL/3pHvaftwpUBNF13 sHdsZr8PvzxeSeOibg9Mhat+Iszom2gQyxWCtt7+4h84jvS9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTeqE45+ZsmdVvZrQsPRBe3h7d/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODVlOTgzNzMtNzJhNy0z YmI4LThjODItYjJmNmZmNDc4Y2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1ER9/6P99PuBJ2OVJB8xHW7njYKbtwQ0/h+RDZjtOv/JrdBfR4+S/j FJ9f2j8DFgZL5/fa7f5Kn8kXUlL58VKVyY3rjEeOzTRk+KhklKObdQcPlw+mlRXo 1zxSy9OX7yHg57lH9+Q7eZqVGxcZTnW6nhZJn/NBRaAv5UyKEYOIVbqhiim3Ocf7 52pwsWzbVKRZa0JiIbq4hRyJvW/CsMFBJqnlaPjkE+DJb4aZw1bpgxTAB7pvrrEJ iWdvJ254THeG5hzc2MfmAcIFZbzNofb0TT5gvvzmctQln48VNgrcGmlmNSpceOPG sPv3KEra687E26zxkqZm3TMcXZy9DjE= -----END CERTIFICATE-----Generated at Fri Apr 4 08:40:40 2025 by rpki-client