$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa File: b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa (raw, json) Hash identifier: pFvu2ZBEhuYv2dWZaK+VD5SMmYwZAAb4JVpcjmYR8R4= Subject key identifier: 1F:04:F8:52:4B:EB:AF:CB:D0:58:3E:C6:7B:A9:D2:EC:0A:03:37:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581722EC5D1A188A0E73140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.58.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:72:2e:c5:d1:a1:88:a0:e7:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4ca0e7c6-4341-46e2-a965-9474655b70fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:34:fc:97:74:09:63:1f:a0:d3:65:8b:0b: 9c:5e:a5:a2:f9:9d:06:e7:23:d2:53:9a:bf:e2:1c: 16:fd:49:f3:38:8e:bb:6d:62:25:c4:8a:a5:7e:0e: f8:75:55:88:34:75:f2:31:5a:a4:76:b2:2e:ed:2a: 27:ca:a2:d9:b1:a9:a9:43:1e:6f:b0:08:74:84:e7: e9:87:77:3b:bb:be:4e:19:98:a8:69:a1:8a:c2:2d: 1e:b0:3b:78:09:56:da:a9:ba:7d:2c:d2:1a:76:c2: 02:f8:7c:fd:92:2e:11:67:a5:c3:ba:f1:c9:3f:c9: e4:fc:e2:0f:76:5b:f7:c2:ba:71:79:a3:61:26:a9: 03:57:b4:20:e9:81:98:26:ec:fa:1b:6d:6d:6d:29: 28:c7:0b:dd:84:dd:db:dd:73:cd:8b:05:96:bc:b5: 8c:86:c2:37:1e:3f:9a:b8:53:50:f2:e9:2a:64:b5: 20:9d:41:b6:77:22:6f:10:34:19:7a:d5:b3:f3:71: 11:d6:69:a7:52:bb:d7:b6:30:b8:9f:c0:4c:a2:85: 59:8c:1c:1c:89:49:97:66:b1:f5:48:60:7e:01:5c: c6:ff:d9:d9:d5:71:52:96:89:ec:8e:be:eb:c5:ee: a9:6f:d2:d1:5c:76:87:83:65:b4:d7:e8:5c:13:0a: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:04:F8:52:4B:EB:AF:CB:D0:58:3E:C6:7B:A9:D2:EC:0A:03:37:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0b:c2:eb:27:04:2b:02:22:ae:da:7d:d9:72:58:0e:29:ac: 26:1c:3e:fe:18:09:d1:9c:e6:12:a8:d0:6c:9f:96:04:e4:d1: 04:91:f0:b1:b8:cb:08:a0:61:25:f5:15:9c:6e:b8:f9:ca:f6: 86:22:ae:91:cd:ad:76:7c:62:23:5f:b6:d6:0f:b4:85:d9:0e: 37:0c:f3:db:42:be:28:35:d2:77:0c:37:2d:1a:0d:22:fb:78: 3c:6b:b5:36:20:65:64:58:d7:94:3d:b6:7e:87:60:32:a1:68: 31:3c:1f:be:c3:4c:1b:30:a0:3d:ee:81:34:19:6f:07:0d:65: fa:5e:f2:66:a1:e8:58:4b:5d:ba:6a:d6:ec:49:f0:35:ae:e4: a9:8f:80:01:a0:a6:68:93:5b:dd:c0:80:6e:a9:9c:f1:33:40: a9:7a:48:fa:cc:fd:d7:82:e2:72:84:ae:4c:7a:55:21:2b:a8: 43:29:72:97:2f:a5:1a:9e:75:3b:ac:50:7c:97:0d:b7:17:46: ba:1e:cf:ac:19:d2:62:1e:15:02:07:7b:07:88:38:ee:83:3e: b7:79:6f:d1:a4:6e:7e:e9:ae:40:a3:44:a4:ad:54:5c:83:48: ec:3e:42:2b:95:cb:46:dc:70:94:bc:c6:ba:80:2e:ca:c0:8a: 03:86:d6:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXIuxdGhiKDnMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NGNhMGU3YzYtNDM0MS00NmUyLWE5NjUtOTQ3NDY1NWI3MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuc0/Jd0CWMfoNNliwucXqWi+Z0G5yPSU5q/ 4hwW/UnzOI67bWIlxIqlfg74dVWINHXyMVqkdrIu7SonyqLZsampQx5vsAh0hOfp h3c7u75OGZioaaGKwi0esDt4CVbaqbp9LNIadsIC+Hz9ki4RZ6XDuvHJP8nk/OIP dlv3wrpxeaNhJqkDV7Qg6YGYJuz6G21tbSkoxwvdhN3b3XPNiwWWvLWMhsI3Hj+a uFNQ8ukqZLUgnUG2dyJvEDQZetWz83ER1mmnUrvXtjC4n8BMooVZjBwciUmXZrH1 SGB+AVzG/9nZ1XFSlonsjr7rxe6pb9LRXHaHg2W01+hcEwpkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8E+FJL66/L0Fg+xnup0uwKAzdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjFmZDE1ZTctZWE5MC0z NmY2LWFjNDEtNjg3Y2NiMTg3ZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAULwusnBCsCIq7afdlyWA4prCYcPv4YCdGc5hKo0GyflgTk0QSR8LG4 ywigYSX1FZxuuPnK9oYirpHNrXZ8YiNfttYPtIXZDjcM89tCvig10ncMNy0aDSL7 eDxrtTYgZWRY15Q9tn6HYDKhaDE8H77DTBswoD3ugTQZbwcNZfpe8mah6FhLXbpq 1uxJ8DWu5KmPgAGgpmiTW93AgG6pnPEzQKl6SPrM/deC4nKErkx6VSErqEMpcpcv pRqedTusUHyXDbcXRroez6wZ0mIeFQIHeweIOO6DPrd5b9Gkbn7prkCjRKStVFyD SOw+QiuVy0bccJS8xrqALsrAigOG1ic= -----END CERTIFICATE-----Generated at Fri Apr 4 08:31:41 2025 by rpki-client