$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa File: a430c233-1598-3766-bd27-1c26e3178a02.roa (raw, json) Hash identifier: f4Pj5YCtzjPC4pDmk2rVY7t4zlYUQD625Y3APJMTLUY= Subject key identifier: 2A:2A:56:83:45:B0:DB:65:5F:17:64:E8:39:7B:92:4D:BC:0C:20:35 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581899F4E8BECABF4727200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:89:9f:4e:8b:ec:ab:f4:72:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=caf8cdfb-02eb-4425-b2df-054f25f2fbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:af:3c:6f:33:06:2d:38:89:30:fa:10:f3: 5a:53:d9:23:41:99:33:1e:d4:f0:d4:05:9c:d6:8f: e7:64:3d:65:82:d7:08:b3:fa:85:61:65:8e:5d:fe: 85:ed:c1:b1:bf:e9:4e:e7:23:1c:88:94:d2:9f:42: 0d:c0:5c:82:a2:09:0f:44:27:ed:a1:50:b8:75:1f: 9c:de:29:73:8a:1a:ed:f9:92:f0:c5:07:b2:1a:54: 1a:08:f4:a4:66:18:45:2c:70:ea:fc:84:e7:4e:04: 82:cb:18:ae:f8:d4:77:b4:6a:cf:45:38:20:d8:c2: 3e:a4:92:a8:d4:86:0c:66:11:2d:ef:15:45:68:18: 80:6e:ff:0a:79:50:5a:8b:3d:8f:55:39:7a:ad:6a: 83:47:52:7d:4c:31:cd:83:c9:20:0c:34:f8:50:a9: cd:08:ad:9b:2d:ea:03:7d:c5:b3:92:81:a4:35:d5: f3:81:bb:14:bc:62:41:f5:63:2f:83:1e:d5:00:79: 4c:40:2c:41:9c:bc:11:81:e3:fc:0a:22:bb:8b:9e: 74:e1:ab:6a:f9:1b:09:fd:e8:ca:02:7a:5b:34:88: 6a:e3:74:95:a5:df:49:65:dd:c6:7e:4e:24:72:79: 60:5a:ce:6c:48:0a:39:db:48:5a:70:77:bc:9a:8c: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2A:56:83:45:B0:DB:65:5F:17:64:E8:39:7B:92:4D:BC:0C:20:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:36:a8:c3:39:64:ad:dc:9b:c6:12:05:fa:34:db:8e:90:15: c3:71:b4:c1:f5:82:a5:3b:cb:7c:63:db:16:64:06:5b:1f:a5: 71:27:d1:1a:99:3d:bb:0c:9e:d2:f3:c6:52:eb:04:11:40:75: 01:91:c4:4c:d4:11:20:f5:c4:32:42:b2:db:2b:a0:02:4d:57: 6b:d8:a3:74:b9:74:b8:fa:60:21:19:d1:1c:09:85:52:bd:02: 52:fd:93:10:9b:dd:38:5b:59:21:8a:9f:0b:71:2e:9a:12:ff: 57:bc:10:fa:83:20:61:bd:af:1a:b4:65:30:e5:8b:12:cf:eb: a9:59:87:07:fb:6d:82:c3:7d:b8:07:35:7f:65:55:db:81:f3: 99:1e:f1:bd:c8:ad:f8:d2:44:6a:fd:f1:b4:f8:c7:9e:37:09: 70:1e:70:e0:38:55:16:9e:96:5b:4f:a7:6b:ad:06:72:07:23: cd:ad:d6:dd:ff:5d:54:a4:ab:9c:5f:fc:2b:12:01:d1:9d:76: 99:a6:d6:c7:3b:96:30:2c:87:74:46:32:d8:76:4a:7d:1e:9a: 93:78:4d:f0:1f:12:bb:7f:e8:2c:c2:a9:8e:df:2b:8b:0c:eb: 62:ca:70:7b:a9:bf:7d:c8:9b:c1:b9:b3:3c:40:c9:18:ff:b7: 66:cb:7d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYmfTovsq/RycgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2FmOGNkZmItMDJlYi00NDI1LWIyZGYtMDU0ZjI1ZjJmYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSGvPG8zBi04iTD6EPNaU9kjQZkzHtTw1AWc 1o/nZD1lgtcIs/qFYWWOXf6F7cGxv+lO5yMciJTSn0INwFyCogkPRCftoVC4dR+c 3ilzihrt+ZLwxQeyGlQaCPSkZhhFLHDq/ITnTgSCyxiu+NR3tGrPRTgg2MI+pJKo 1IYMZhEt7xVFaBiAbv8KeVBaiz2PVTl6rWqDR1J9TDHNg8kgDDT4UKnNCK2bLeoD fcWzkoGkNdXzgbsUvGJB9WMvgx7VAHlMQCxBnLwRgeP8CiK7i5504atq+RsJ/ejK AnpbNIhq43SVpd9JZd3Gfk4kcnlgWs5sSAo520hacHe8mowcbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoqVoNFsNtlXxdk6Dl7kk28DCA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzMGMyMzMtMTU5OC0z NzY2LWJkMjctMWMyNmUzMTc4YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrcJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw2qMM5ZK3cm8YSBfo0246QFcNxtMH1gqU7y3xj2xZkBlsfpXEn0RqZ PbsMntLzxlLrBBFAdQGRxEzUESD1xDJCstsroAJNV2vYo3S5dLj6YCEZ0RwJhVK9 AlL9kxCb3ThbWSGKnwtxLpoS/1e8EPqDIGG9rxq0ZTDlixLP66lZhwf7bYLDfbgH NX9lVduB85ke8b3IrfjSRGr98bT4x543CXAecOA4VRaelltPp2utBnIHI82t1t3/ XVSkq5xf/CsSAdGddpmm1sc7ljAsh3RGMth2Sn0empN4TfAfErt/6CzCqY7fK4sM 62LKcHupv33Im8G5szxAyRj/t2bLfQg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:42 2025 by rpki-client