$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a45181d0-cad5-3496-a96e-0c58def6e09e.roa File: a45181d0-cad5-3496-a96e-0c58def6e09e.roa (raw, json) Hash identifier: 5Emp/fVTH+pGB1AEiHFTIn7Uczct7ZvHmvYuTk4p4II= Subject key identifier: 57:05:63:70:CA:6C:02:A9:E6:37:14:C7:C9:F9:46:35:75:2C:F8:80 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58200EF709BCA7981E65E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a45181d0-cad5-3496-a96e-0c58def6e09e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:00:ef:70:9b:ca:79:81:e6:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c1f82e72-3eb2-43c9-9f66-6cd6e8155bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:19:2f:4c:a1:0b:a4:b9:08:96:f6:6f:19: 97:db:7a:99:e7:9f:9f:0e:e4:b7:56:7a:4f:38:3a: c0:b6:ad:ba:72:ad:8d:64:82:38:70:1b:fe:07:7a: d5:72:0b:88:c8:4b:d8:48:c5:46:56:b8:bc:b2:54: de:d0:54:b4:8e:ae:2e:ce:ae:a7:b0:e6:67:10:7b: 3f:6c:fb:69:2a:70:cc:9d:3d:60:c2:0f:3c:39:8e: 13:4c:d6:75:1f:58:b6:44:85:52:7f:b4:11:49:ea: 3d:47:18:c2:31:f7:ef:e8:98:b1:77:06:d9:d9:a9: 65:25:72:9d:00:50:ed:9e:6e:8a:5d:07:51:13:d1: 5a:ae:a9:af:e7:c9:6c:99:bc:b2:05:60:e9:1d:fc: 36:33:11:7b:49:f1:12:df:29:5f:33:c3:cb:c7:a9: f0:af:f0:0e:36:3e:76:25:f8:91:36:fb:4d:56:b1: 57:f2:67:51:32:ab:ef:18:71:48:4e:ff:ee:6c:92: 1d:5f:e0:c9:3e:7a:84:36:67:e3:4f:78:c3:23:80: f8:97:17:53:66:b5:8f:08:b5:82:8c:24:55:4e:df: e8:46:59:49:1e:8f:0e:e9:c8:aa:4b:1d:a8:d3:7b: 28:1d:2e:2f:2e:dd:97:80:9f:6b:3d:2d:05:31:0b: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:05:63:70:CA:6C:02:A9:E6:37:14:C7:C9:F9:46:35:75:2C:F8:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a45181d0-cad5-3496-a96e-0c58def6e09e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:08:5a:bb:ff:6b:ab:4c:ac:2b:a5:4d:0e:fb:94:55:83:b1: 32:81:93:65:4f:fc:56:b3:b1:09:4d:72:cc:ee:ba:f4:8b:89: 75:18:40:6b:94:7e:c8:09:db:dc:f4:a6:79:f7:df:f6:f6:ac: 97:3c:ae:91:4d:dc:98:da:5b:bd:9b:5d:b0:33:ac:15:e8:14: c4:2d:31:04:33:31:63:b4:2c:e2:cd:74:02:ca:1e:ae:18:e8: c3:af:62:e1:a7:5f:9b:b4:1d:14:23:cd:a8:58:d5:55:c4:e3: 79:a3:e7:ad:2e:a6:14:27:f2:d6:d2:11:ea:ca:60:57:cc:b0: ae:00:09:6f:8f:07:e0:08:0a:22:d4:36:31:fc:07:3d:e8:4a: 44:f9:ab:69:7f:54:47:7b:05:52:1b:c2:a0:fd:91:8d:0f:8d: 40:c1:7a:ee:0f:77:06:1c:3d:e1:73:bd:d4:00:b0:df:bb:9b: 2c:04:5f:1b:bc:28:34:45:fe:b2:4e:c0:02:a1:53:90:0e:d2: 3a:e0:18:2c:f0:ef:a9:08:b2:07:0e:46:9b:d6:0f:8f:f6:77: b0:df:a1:94:b9:12:63:b2:0e:37:c6:53:43:34:df:dd:57:e4: 5a:9e:13:20:8e:47:41:8c:95:15:25:2a:48:23:8f:ce:d5:58: 7d:a3:69:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggDvcJvKeYHmXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzFmODJlNzItM2ViMi00M2M5LTlmNjYtNmNkNmU4MTU1YmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNwZL0yhC6S5CJb2bxmX23qZ55+fDuS3VnpP ODrAtq26cq2NZII4cBv+B3rVcguIyEvYSMVGVri8slTe0FS0jq4uzq6nsOZnEHs/ bPtpKnDMnT1gwg88OY4TTNZ1H1i2RIVSf7QRSeo9RxjCMffv6JixdwbZ2allJXKd AFDtnm6KXQdRE9Farqmv58lsmbyyBWDpHfw2MxF7SfES3ylfM8PLx6nwr/AONj52 JfiRNvtNVrFX8mdRMqvvGHFITv/ubJIdX+DJPnqENmfjT3jDI4D4lxdTZrWPCLWC jCRVTt/oRllJHo8O6ciqSx2o03soHS4vLt2XgJ9rPS0FMQvTawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcFY3DKbAKp5jcUx8n5RjV1LPiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQ1MTgxZDAtY2FkNS0z NDk2LWE5NmUtMGM1OGRlZjZlMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMIWrv/a6tMrCulTQ77lFWDsTKBk2VP/FazsQlNcszuuvSLiXUYQGuU fsgJ29z0pnn33/b2rJc8rpFN3JjaW72bXbAzrBXoFMQtMQQzMWO0LOLNdALKHq4Y 6MOvYuGnX5u0HRQjzahY1VXE43mj560uphQn8tbSEerKYFfMsK4ACW+PB+AICiLU NjH8Bz3oSkT5q2l/VEd7BVIbwqD9kY0PjUDBeu4PdwYcPeFzvdQAsN+7mywEXxu8 KDRF/rJOwAKhU5AO0jrgGCzw76kIsgcORpvWD4/2d7DfoZS5EmOyDjfGU0M0391X 5FqeEyCOR0GMlRUlKkgjj87VWH2jaSc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:17 2025 by rpki-client