$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa File: a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa (raw, json) Hash identifier: yZTjDNHXeQjVo463WZ4ox1oskRUscblG3M+3gFLO1L0= Subject key identifier: A3:BA:DD:35:79:20:66:27:23:E5:55:D8:40:32:88:99:62:34:E3:4D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58219217D273527A8D2D680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.239.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:19:21:7d:27:35:27:a8:d2:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=52177482-1311-4ed6-b0da-5921f8e37b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:10:fb:f0:d1:e3:63:9e:ba:29:b3:fc:48:ca: 36:61:bd:0f:b4:fd:cc:7a:58:e1:e3:7c:ed:25:af: 34:f2:fa:70:0b:92:1c:1a:e3:d6:79:b6:87:03:be: df:d6:b0:ce:47:7c:17:b7:06:3b:25:d3:73:db:c7: 1e:c4:13:43:95:23:52:5d:40:50:82:01:38:82:b5: c7:06:97:6f:b6:ec:d0:9b:cd:6c:3a:a9:d0:79:71: 08:0d:c1:da:61:d3:56:8c:83:fa:fd:4a:d8:61:50: e8:62:bb:a6:bd:2a:78:0c:c2:8c:5b:16:f8:ea:90: f5:8b:ac:b6:49:71:63:ad:7b:05:bb:f8:a3:cc:74: 28:02:aa:67:79:6b:fd:84:94:60:6f:36:25:f4:4c: c2:f8:fb:31:c5:bf:03:cd:fe:48:d1:94:7d:75:47: 64:fe:21:93:e6:7a:26:81:c9:03:50:00:62:fe:6f: 07:41:6c:6c:8b:02:7e:3c:e8:e1:ab:98:68:da:a0: 65:96:44:71:a0:ac:87:18:a5:d4:15:c7:05:85:37: e4:28:72:ff:79:c4:48:ea:b5:1a:92:03:ff:4e:df: fc:cb:17:e0:c7:83:d7:b2:66:df:18:1a:f8:48:04: 13:f0:99:4d:51:1d:a3:74:91:55:e1:34:d5:61:ef: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BA:DD:35:79:20:66:27:23:E5:55:D8:40:32:88:99:62:34:E3:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4c:3b:2d:4c:b8:06:bb:33:31:b2:50:0c:02:79:76:94:2a: f8:bd:24:21:1e:4c:5f:79:ac:df:5c:b0:46:e1:81:18:dd:e1: c5:e9:33:52:c6:17:38:75:88:07:02:f8:bc:27:a7:20:67:58: 25:34:0c:ce:65:d9:33:8a:9d:0b:b7:01:54:54:2f:70:48:b1: 30:eb:7c:cd:72:0d:9a:90:d8:00:e6:68:67:d4:71:81:58:2c: 71:1f:9c:1a:28:c6:98:aa:64:54:00:73:95:b2:b2:a5:23:83: 3c:7a:d0:c9:cc:20:86:9e:69:25:97:b3:57:5f:4e:7f:a4:f6: 3e:f9:83:fc:a1:a9:96:a5:8e:89:2d:65:c8:62:41:12:c2:9a: 6e:15:13:a2:66:fa:ca:5e:16:9e:d4:c3:3c:0f:c4:d4:72:f9: cd:81:7b:47:d6:66:da:d0:19:a5:77:e8:6f:55:5b:1f:a0:ed: d6:f9:97:e1:fc:0e:7d:1f:12:ae:6a:69:b4:45:9e:88:e7:9a: 2b:c8:6b:f9:bf:f7:5d:a2:9f:20:32:b9:37:c9:21:72:f3:3f: de:e1:20:e7:a0:b9:b6:b5:7f:35:dc:69:89:bf:b9:d1:a1:29: ca:3e:29:59:ae:c1:81:66:8b:a7:a5:63:b8:46:04:5f:e0:13: 8a:48:0b:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghkhfSc1J6jS1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTIxNzc0ODItMTMxMS00ZWQ2LWIwZGEtNTkyMWY4ZTM3YjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxD78NHjY566KbP8SMo2Yb0PtP3Meljh43zt Ja808vpwC5IcGuPWebaHA77f1rDOR3wXtwY7JdNz28cexBNDlSNSXUBQggE4grXH BpdvtuzQm81sOqnQeXEIDcHaYdNWjIP6/UrYYVDoYrumvSp4DMKMWxb46pD1i6y2 SXFjrXsFu/ijzHQoAqpneWv9hJRgbzYl9EzC+Psxxb8Dzf5I0ZR9dUdk/iGT5nom gckDUABi/m8HQWxsiwJ+POjhq5ho2qBllkRxoKyHGKXUFccFhTfkKHL/ecRI6rUa kgP/Tt/8yxfgx4PXsmbfGBr4SAQT8JlNUR2jdJFV4TTVYe++SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO63TV5IGYnI+VV2EAyiJliNONNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTVhMjhmZTgtMjMwYi0z ZmRkLTliZmMtNWZiYjY2MTQ4NDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFMOy1MuAa7MzGyUAwCeXaUKvi9JCEeTF95rN9csEbhgRjd4cXpM1LG Fzh1iAcC+LwnpyBnWCU0DM5l2TOKnQu3AVRUL3BIsTDrfM1yDZqQ2ADmaGfUcYFY LHEfnBooxpiqZFQAc5WysqUjgzx60MnMIIaeaSWXs1dfTn+k9j75g/yhqZaljokt ZchiQRLCmm4VE6Jm+speFp7UwzwPxNRy+c2Be0fWZtrQGaV36G9VWx+g7db5l+H8 Dn0fEq5qabRFnojnmivIa/m/912inyAyuTfJIXLzP97hIOeguba1fzXcaYm/udGh Kco+KVmuwYFmi6elY7hGBF/gE4pIC5s= -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:36 2025 by rpki-client