$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a2f56374-2f9c-377b-b457-6696c5db2bae.roa File: a2f56374-2f9c-377b-b457-6696c5db2bae.roa (raw, json) Hash identifier: IOgiuFiEuN4deI8+uZy7Yr10szQmCyjIbomIbt4E3Fk= Subject key identifier: 66:2E:62:A7:B9:3F:5F:2E:8B:DF:26:65:C9:30:1F:8F:1E:F3:0B:B1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822FC6B9ECADDC75B5A000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a2f56374-2f9c-377b-b457-6696c5db2bae.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:2f:c6:b9:ec:ad:dc:75:b5:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a3a90fbb-d4c4-4c2c-a530-49352620759c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:40:a7:43:fd:54:80:7b:22:55:b8:40:f5:ed: ef:d4:6c:0a:f4:c8:8f:c2:bc:e6:86:9c:87:58:23: 16:08:e3:d5:c9:d6:d8:ea:55:e9:0b:bb:e3:31:62: 89:34:23:d9:20:e3:36:ca:28:a1:2d:0f:07:33:20: 26:d2:b1:e1:97:0b:de:8a:35:3d:ab:ab:63:0c:8c: 16:c9:50:40:75:a7:3f:0a:d8:a7:89:57:e6:11:ee: 7f:bf:9f:3b:dc:26:23:14:28:6e:1c:75:25:b3:38: fb:d9:8d:ba:f3:1a:e2:ae:11:e4:b1:83:fd:7a:95: 68:b9:d9:9b:c9:8f:fe:37:eb:85:f7:26:74:14:ab: 63:53:4a:ac:76:2e:66:40:2d:52:ea:e0:64:81:03: ac:82:bf:48:f9:a8:0d:83:09:4e:73:a0:d8:c9:c3: 8e:ff:6d:51:cc:c1:c1:5f:5f:cc:f1:48:68:cc:c8: 63:1a:0b:1a:6c:77:eb:b9:37:ff:64:49:84:a3:07: bd:bf:f9:11:d7:25:ff:65:45:f3:21:1e:cd:8b:27: 15:9f:22:b7:49:1a:64:53:47:43:35:37:03:b6:e7: 9f:05:70:62:84:ce:55:2c:a9:d2:4a:19:14:c4:8a: da:64:0e:54:5d:6f:b0:8a:2c:71:b7:7b:08:7e:bb: b1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2E:62:A7:B9:3F:5F:2E:8B:DF:26:65:C9:30:1F:8F:1E:F3:0B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a2f56374-2f9c-377b-b457-6696c5db2bae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:31:e8:68:26:6a:b2:de:32:dc:35:77:c3:d9:4c:9a:8a:90: a9:9d:b5:2f:a2:73:ba:39:ba:c4:f1:fa:67:c9:f8:ad:e6:f1: f3:0e:c4:bc:61:a8:46:46:43:ba:3a:8a:52:21:93:10:0f:55: 83:19:dd:4c:7a:e2:e9:ec:28:7d:84:0e:1f:72:d8:23:a0:6f: 0b:e8:de:b4:7b:2a:8e:b0:c0:37:31:29:7a:77:18:8a:14:b8: 84:e4:fe:aa:79:86:12:dc:d1:f4:62:e5:a1:d0:6c:45:b9:d8: bf:34:ee:1c:c1:1a:ee:5d:48:14:90:c4:ce:63:4e:86:28:43: 31:c6:a8:59:3c:98:07:3d:0e:59:1d:bb:1a:1c:97:b3:24:c2: 31:23:13:ed:2c:d0:34:a7:64:07:06:5f:a3:b2:ec:59:de:a9: 40:aa:66:fb:51:00:c8:08:ce:fe:94:77:d4:8c:5e:49:14:81: 48:cd:85:48:6a:99:e2:d5:0c:c9:f7:ba:39:23:94:8b:e9:6f: 26:2e:28:33:82:c7:0a:2a:01:92:7b:6c:b5:9b:ac:68:e5:59: c9:95:59:4a:71:6b:c4:63:b1:c2:ec:0d:1f:42:3f:9b:26:58: 9f:dc:95:57:46:e0:53:61:f9:40:dd:2f:53:50:6c:16:f2:17: 4a:e9:cd:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgi/Gueyt3HW1oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTNhOTBmYmItZDRjNC00YzJjLWE1MzAtNDkzNTI2MjA3NTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0CnQ/1UgHsiVbhA9e3v1GwK9MiPwrzmhpyH WCMWCOPVydbY6lXpC7vjMWKJNCPZIOM2yiihLQ8HMyAm0rHhlwveijU9q6tjDIwW yVBAdac/CtiniVfmEe5/v5873CYjFChuHHUlszj72Y268xrirhHksYP9epVoudmb yY/+N+uF9yZ0FKtjU0qsdi5mQC1S6uBkgQOsgr9I+agNgwlOc6DYycOO/21RzMHB X1/M8UhozMhjGgsabHfruTf/ZEmEowe9v/kR1yX/ZUXzIR7NiycVnyK3SRpkU0dD NTcDtuefBXBihM5VLKnSShkUxIraZA5UXW+wiixxt3sIfrux2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYuYqe5P18ui98mZckwH48e8wuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTJmNTYzNzQtMmY5Yy0z NzdiLWI0NTctNjY5NmM1ZGIyYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0x6GgmarLeMtw1d8PZTJqKkKmdtS+ic7o5usTx+mfJ+K3m8fMOxLxh qEZGQ7o6ilIhkxAPVYMZ3Ux64unsKH2EDh9y2COgbwvo3rR7Ko6wwDcxKXp3GIoU uITk/qp5hhLc0fRi5aHQbEW52L807hzBGu5dSBSQxM5jToYoQzHGqFk8mAc9Dlkd uxocl7MkwjEjE+0s0DSnZAcGX6Oy7FneqUCqZvtRAMgIzv6Ud9SMXkkUgUjNhUhq meLVDMn3ujkjlIvpbyYuKDOCxwoqAZJ7bLWbrGjlWcmVWUpxa8RjscLsDR9CP5sm WJ/clVdG4FNh+UDdL1NQbBbyF0rpzeg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:31 2025 by rpki-client