$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dc0f45a-13da-31fa-b80a-ac0f582becaf.roa File: 9dc0f45a-13da-31fa-b80a-ac0f582becaf.roa (raw, json) Hash identifier: tQdbyWr4r89rGKFlE6+V59t8yU8Mb3xr+R29blcK5pU= Subject key identifier: 1E:EB:A8:9B:CC:62:BD:09:1B:42:04:49:88:D6:BE:FB:DD:57:5C:0E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12F29B3FDBB6A21D71C40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dc0f45a-13da-31fa-b80a-ac0f582becaf.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 173.194.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2f:29:b3:fd:bb:6a:21:d7:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=b10b2b05-2dd4-4cf8-ba5a-d407dabb9284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:69:21:09:5b:05:a4:36:4e:bc:3e:9d:b0:e9: 4c:34:f0:e4:67:77:1d:f4:5f:17:40:14:4b:56:e6: be:ae:66:84:1e:be:5d:5f:20:b5:36:2e:38:b6:a8: 59:21:da:9d:c4:14:d5:27:f8:2a:80:1b:37:80:80: ae:30:5b:5e:4e:5a:39:23:53:a0:a3:aa:2b:74:dc: 4e:62:06:a1:06:f5:a8:08:5b:44:3b:22:43:aa:c0: f9:d0:96:73:45:07:00:09:19:c3:21:b4:cd:e4:09: cb:f0:6a:00:3a:76:53:06:aa:ee:3c:24:0e:ef:b2: ef:0c:a6:98:42:36:3b:29:09:19:aa:78:1b:96:40: 28:bb:a1:2b:0c:dc:4f:92:72:d2:ce:59:e2:a2:b7: ee:5e:b6:d0:ec:e0:c6:41:5b:12:c0:42:38:37:bb: 9b:e5:fb:92:d2:cf:eb:a2:85:7f:11:44:64:77:65: b5:0f:6c:9e:36:52:60:fa:19:56:34:93:86:f1:16: 0c:fb:15:be:6b:d2:50:c6:57:42:d5:e2:23:7e:a2: c9:9e:06:8f:ff:81:07:82:f1:a7:d7:cb:dd:18:3a: a8:0c:88:c6:90:ca:d8:ec:1e:ec:12:a6:2c:45:ad: 90:5a:92:f6:65:1b:af:46:21:2d:62:84:73:7a:5d: 8a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EB:A8:9B:CC:62:BD:09:1B:42:04:49:88:D6:BE:FB:DD:57:5C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dc0f45a-13da-31fa-b80a-ac0f582becaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4f:9b:4f:35:e6:0b:b3:04:11:66:4a:e7:fa:69:ac:4e:1d: 6e:cd:1c:ad:bb:a3:ef:29:52:af:a9:0d:09:fc:7e:ac:bd:ae: 70:16:2c:38:36:90:57:ed:fd:c0:d9:a9:3a:a1:44:e3:94:45: dd:89:55:fb:bb:d2:ee:37:f7:1e:25:98:36:83:0d:27:58:e6: f1:e6:87:85:e1:24:ed:99:c7:63:25:03:fe:43:5b:7c:12:a4: 5d:6e:f7:02:0a:9d:f1:91:24:07:a4:54:ab:db:2c:f0:16:13: 82:45:ca:15:da:af:e0:01:ab:bd:97:8d:81:18:fe:9a:fb:de: cf:8b:a2:8e:65:f9:ba:6c:e8:18:d3:13:44:83:33:47:d1:46: 51:23:04:3a:45:b6:91:8c:10:74:30:66:fb:88:62:54:49:66: 19:98:07:c9:fd:29:d3:a5:b6:ff:07:bc:b6:ce:c2:35:4f:66: 95:d1:a5:92:a7:04:55:a4:61:86:bb:71:c4:1c:bd:c7:61:84: 81:5c:0f:c9:08:be:39:28:91:fb:ff:40:4c:95:e4:f9:f5:ee: b0:fc:40:3d:2a:a2:e3:2c:7d:b8:5d:ac:f3:68:7c:a8:4f:d7: bf:c2:0c:4b:cd:d0:3c:5c:ab:99:38:dc:32:61:2a:6d:c5:ac: 9d:9b:c4:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS8ps/27aiHXHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk YjEwYjJiMDUtMmRkNC00Y2Y4LWJhNWEtZDQwN2RhYmI5Mjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2khCVsFpDZOvD6dsOlMNPDkZ3cd9F8XQBRL Vua+rmaEHr5dXyC1Ni44tqhZIdqdxBTVJ/gqgBs3gICuMFteTlo5I1Ogo6ordNxO YgahBvWoCFtEOyJDqsD50JZzRQcACRnDIbTN5AnL8GoAOnZTBqruPCQO77LvDKaY QjY7KQkZqngblkAou6ErDNxPknLSzlniorfuXrbQ7ODGQVsSwEI4N7ub5fuS0s/r ooV/EURkd2W1D2yeNlJg+hlWNJOG8RYM+xW+a9JQxldC1eIjfqLJngaP/4EHgvGn 18vdGDqoDIjGkMrY7B7sEqYsRa2QWpL2ZRuvRiEtYoRzel2KVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7rqJvMYr0JG0IESYjWvvvdV1wOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWRjMGY0NWEtMTNkYS0z MWZhLWI4MGEtYWMwZjU4MmJlY2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdPm0815guzBBFmSuf6aaxOHW7NHK27o+8pUq+pDQn8fqy9rnAWLDg2 kFft/cDZqTqhROOURd2JVfu70u439x4lmDaDDSdY5vHmh4XhJO2Zx2MlA/5DW3wS pF1u9wIKnfGRJAekVKvbLPAWE4JFyhXar+ABq72XjYEY/pr73s+Loo5l+bps6BjT E0SDM0fRRlEjBDpFtpGMEHQwZvuIYlRJZhmYB8n9KdOltv8HvLbOwjVPZpXRpZKn BFWkYYa7ccQcvcdhhIFcD8kIvjkokfv/QEyV5Pn17rD8QD0qouMsfbhdrPNofKhP 17/CDEvN0Dxcq5k43DJhKm3FrJ2bxFM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:56 2025 by rpki-client