$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99ddb48b-994b-3f85-8378-3b1b708fe6fb.roa File: 99ddb48b-994b-3f85-8378-3b1b708fe6fb.roa (raw, json) Hash identifier: wJu4heNDfIl3YcBfjj2Byv+j5VxExMtmTRTVkdhjrDE= Subject key identifier: B3:AB:20:7F:43:EF:78:97:9E:75:97:3C:5A:4B:0C:DA:31:CC:0C:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820DE96822D8A5266CE720 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99ddb48b-994b-3f85-8378-3b1b708fe6fb.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0d:e9:68:22:d8:a5:26:6c:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d5275568-6f70-48bd-bb23-9f612dab5554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1a:6b:87:6c:36:36:ca:7f:21:3f:f3:31:30: c2:a4:66:6d:c7:43:46:dd:ea:6f:08:d8:a6:df:30: cc:7d:e2:01:db:3f:de:c2:dd:b1:b0:88:60:dd:ea: c0:00:68:33:a0:62:19:5e:02:e6:38:64:33:03:30: 2d:9f:f1:db:08:0e:51:fe:9e:fe:d6:d4:cb:82:4b: 5f:b4:c2:50:15:91:ba:97:fd:ff:97:7b:1f:35:0b: e5:25:d8:18:43:ae:1e:4b:d5:fb:87:df:d2:8a:82: c8:92:5d:7f:f4:db:3d:dc:42:ea:12:0b:5a:5b:6a: bf:3a:be:56:51:58:96:22:5d:0b:62:10:f4:55:2d: c8:15:ce:7c:f6:26:ee:7c:b6:86:29:e8:6c:70:6f: de:d6:f2:d0:56:dc:96:e5:a5:7b:d6:ab:8d:5b:27: 38:4c:f7:1a:49:62:81:90:f6:89:a5:c0:22:e2:0d: c8:6a:5b:71:0d:36:4f:1c:68:cb:08:57:14:91:65: 36:6e:4f:17:3b:71:de:26:24:56:15:5b:08:11:e8: 95:9c:1a:df:f1:ac:98:0a:78:03:e7:cc:e7:b9:ff: 85:a7:8e:46:cb:9d:03:15:99:8c:61:b5:da:9b:ed: ad:58:f4:5e:f4:10:ac:21:aa:0f:d5:3c:ef:8e:5d: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AB:20:7F:43:EF:78:97:9E:75:97:3C:5A:4B:0C:DA:31:CC:0C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99ddb48b-994b-3f85-8378-3b1b708fe6fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1b:23:08:0b:9c:bd:be:35:1e:ea:68:f2:03:b1:13:2e:41: bb:fa:e8:68:cc:51:b3:17:da:bd:45:84:08:1b:41:2e:d5:0e: 20:f6:b1:51:f0:c4:38:f8:78:2c:45:70:4b:39:43:16:c7:9b: ad:d1:7b:63:d9:df:2c:0e:97:30:70:ef:7f:ff:11:ed:03:9c: 94:92:ed:95:d8:57:ed:00:57:d5:5e:4b:26:5a:f3:de:f9:b3: 54:9f:eb:ed:06:2b:4a:62:2c:a5:85:99:06:24:22:d0:07:c5: 85:50:07:78:55:2e:c3:14:a5:ae:7b:0e:94:7c:90:c9:04:68: df:e6:a3:d6:e1:7d:45:7f:5b:c8:56:ed:67:3e:92:2c:97:01: 16:46:d3:d8:47:16:43:61:2c:3e:3c:3e:57:3b:2a:5a:5b:66: 11:17:c0:af:c0:c8:0c:28:d0:7d:16:fe:ce:9f:70:f9:51:3b: 58:89:a1:b6:03:e3:f0:b8:22:4c:2f:7a:63:92:e4:28:4e:b5: 77:6b:8b:26:a4:2b:a9:83:9e:71:2c:a8:55:2c:51:67:7c:da: 68:85:e7:9d:63:2b:12:6c:2c:2e:2a:4f:12:57:47:36:63:ed: e7:16:b0:e5:95:2e:6c:70:df:42:0d:6b:7a:7c:9f:3e:1a:96: 24:1d:52:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgg3paCLYpSZs5yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDUyNzU1NjgtNmY3MC00OGJkLWJiMjMtOWY2MTJkYWI1NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBprh2w2Nsp/IT/zMTDCpGZtx0NG3epvCNim 3zDMfeIB2z/ewt2xsIhg3erAAGgzoGIZXgLmOGQzAzAtn/HbCA5R/p7+1tTLgktf tMJQFZG6l/3/l3sfNQvlJdgYQ64eS9X7h9/SioLIkl1/9Ns93ELqEgtaW2q/Or5W UViWIl0LYhD0VS3IFc589ibufLaGKehscG/e1vLQVtyW5aV71quNWyc4TPcaSWKB kPaJpcAi4g3IaltxDTZPHGjLCFcUkWU2bk8XO3HeJiRWFVsIEeiVnBrf8ayYCngD 58znuf+Fp45Gy50DFZmMYbXam+2tWPRe9BCsIaoP1Tzvjl03ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOrIH9D73iXnnWXPFpLDNoxzAxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTlkZGI0OGItOTk0Yi0z Zjg1LTgzNzgtM2IxYjcwOGZlNmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkbIwgLnL2+NR7qaPIDsRMuQbv66GjMUbMX2r1FhAgbQS7VDiD2sVHw xDj4eCxFcEs5QxbHm63Re2PZ3ywOlzBw73//Ee0DnJSS7ZXYV+0AV9VeSyZa8975 s1Sf6+0GK0piLKWFmQYkItAHxYVQB3hVLsMUpa57DpR8kMkEaN/mo9bhfUV/W8hW 7Wc+kiyXARZG09hHFkNhLD48Plc7KlpbZhEXwK/AyAwo0H0W/s6fcPlRO1iJobYD 4/C4IkwvemOS5ChOtXdriyakK6mDnnEsqFUsUWd82miF551jKxJsLC4qTxJXRzZj 7ecWsOWVLmxw30INa3p8nz4aliQdUgk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:13 2025 by rpki-client