$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa File: 9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa (raw, json) Hash identifier: E8EVGBsDH/wfjTFOYcjJAuhkqIguIDYaFLT0XvWaVCs= Subject key identifier: 70:9A:C2:36:4A:15:DD:25:A0:05:09:7E:88:19:3C:0F:D6:4F:9B:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58185DBF884DDBD8E418F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 209.85.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:85:db:f8:84:dd:bd:8e:41:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=732f7b24-712f-43e0-9e66-23d0a4fea759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:cc:3a:71:e5:a8:be:8c:09:b9:e5:3d:d5: 14:d4:28:33:e6:d2:b3:78:86:1c:07:d1:93:17:eb: 2f:57:73:63:56:e8:b4:96:e6:5f:e5:01:0a:e2:3d: 3d:d1:d0:30:1e:13:80:5d:2a:f7:f0:8f:63:60:7d: a2:67:45:c4:63:fd:d9:f1:c3:6d:68:63:4e:d1:5e: 91:2d:5c:c8:84:31:ad:34:0f:8c:11:23:32:5b:65: ad:7d:59:83:50:b2:50:41:b3:95:33:9c:4f:b4:8c: d7:69:c1:da:f0:91:9b:85:f3:1e:53:66:7d:ad:bb: 0c:1c:6e:aa:de:aa:ea:12:f4:57:4c:01:bb:11:57: 61:41:7c:2b:54:c4:81:3e:97:c7:63:96:c2:3b:2b: 91:46:49:8e:bc:cc:ed:12:a1:f2:1b:d1:b7:b4:20: 41:22:ce:12:4e:11:31:50:7b:fe:a7:dd:1a:c1:6d: 2f:b9:19:c1:7c:b2:39:6d:92:bf:52:dd:29:f2:bc: 11:04:d0:24:09:82:b4:99:ca:a2:a9:98:61:c6:09: 57:dd:84:3e:ad:5e:61:0d:38:0c:4f:a7:e0:8f:27: b6:2a:93:09:79:92:18:8e:4e:a1:74:13:d1:44:b4: 8c:08:c9:31:36:c2:07:e9:ad:7c:90:c8:0d:5b:e4: ca:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9A:C2:36:4A:15:DD:25:A0:05:09:7E:88:19:3C:0F:D6:4F:9B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:1b:7c:15:f6:eb:af:4a:6d:c7:7c:88:d5:f4:96:f5:fc:09: 5c:91:d0:27:1c:62:8f:65:80:3a:00:a2:5d:84:8c:6b:ce:de: fb:47:c8:21:7a:5c:72:8b:e3:09:8c:e8:56:60:77:69:75:c1: 06:5f:ae:ab:4a:29:c6:df:fc:a9:65:57:3d:c3:6c:9a:5f:64: 64:49:65:e1:4d:40:ba:13:2c:09:b3:b4:99:1f:b7:9d:b5:22: 72:a4:50:e8:5c:d1:87:f0:14:78:ae:62:b1:71:ad:b4:9b:23: 9b:fd:19:bf:f7:cb:57:27:84:4c:8d:99:ad:88:8c:e4:e7:49: 23:65:3b:36:44:94:b8:48:05:8a:f7:ab:6e:d2:ef:2b:bc:d4: 6e:61:53:cf:bb:53:a1:f3:23:5a:c4:54:ff:97:3c:df:c4:0e: d1:54:b8:22:31:0d:76:fe:01:be:7b:dc:50:86:29:6d:5d:06: 3d:cf:fa:99:41:e4:6c:87:76:29:49:00:a1:09:4c:08:b8:c3: 5c:cf:b0:e6:c7:d6:0b:c9:f6:2c:73:26:27:3c:70:da:09:25: 0b:5f:19:7d:aa:93:51:26:43:a8:06:1f:a3:34:37:24:a8:ba: bc:01:57:54:ff:bb:be:30:75:a5:03:46:51:fc:a8:06:87:ce: 24:17:d3:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYXb+ITdvY5BjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzMyZjdiMjQtNzEyZi00M2UwLTllNjYtMjNkMGE0ZmVhNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu7MOnHlqL6MCbnlPdUU1Cgz5tKzeIYcB9GT F+svV3NjVui0luZf5QEK4j090dAwHhOAXSr38I9jYH2iZ0XEY/3Z8cNtaGNO0V6R LVzIhDGtNA+MESMyW2WtfVmDULJQQbOVM5xPtIzXacHa8JGbhfMeU2Z9rbsMHG6q 3qrqEvRXTAG7EVdhQXwrVMSBPpfHY5bCOyuRRkmOvMztEqHyG9G3tCBBIs4SThEx UHv+p90awW0vuRnBfLI5bZK/Ut0p8rwRBNAkCYK0mcqiqZhhxglX3YQ+rV5hDTgM T6fgjye2KpMJeZIYjk6hdBPRRLSMCMkxNsIH6a18kMgNW+TKDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCawjZKFd0loAUJfogZPA/WT5tDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWYyMThiZmUtYWI1MS0z YzY0LWFiNmItYmE2NDNmYmFjMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8bfBX2669Kbcd8iNX0lvX8CVyR0CccYo9lgDoAol2EjGvO3vtHyCF6 XHKL4wmM6FZgd2l1wQZfrqtKKcbf/KllVz3DbJpfZGRJZeFNQLoTLAmztJkft521 InKkUOhc0YfwFHiuYrFxrbSbI5v9Gb/3y1cnhEyNma2IjOTnSSNlOzZElLhIBYr3 q27S7yu81G5hU8+7U6HzI1rEVP+XPN/EDtFUuCIxDXb+Ab573FCGKW1dBj3P+plB 5GyHdilJAKEJTAi4w1zPsObH1gvJ9ixzJic8cNoJJQtfGX2qk1EmQ6gGH6M0NySo urwBV1T/u74wdaUDRlH8qAaHziQX0xw= -----END CERTIFICATE-----Generated at Fri Mar 14 11:03:00 2025 by rpki-client