$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b6b95554-41b9-3c48-af9f-dc2f3a2466e8.roa File: b6b95554-41b9-3c48-af9f-dc2f3a2466e8.roa (raw, json) Hash identifier: hCaaSLHHxF7nJFZFNcJ1CzN2zwDN3ni0P4MeXgSzvKI= Subject key identifier: E7:C1:32:07:44:74:1C:D5:C5:5D:F3:87:43:67:E4:C8:98:A4:30:F5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822205310A5DBC8FD3DD35 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b6b95554-41b9-3c48-af9f-dc2f3a2466e8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:22:05:31:0a:5d:bc:8f:d3:dd:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=bd916b17-b5e7-4181-82df-6c880c304712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:9f:14:bb:cb:24:f0:79:24:c6:d7:7a:5c: 2b:57:c2:39:8b:2e:9e:5f:15:fd:31:bd:c5:bf:5e: e5:ee:cb:c9:bd:f8:9c:40:3c:04:90:47:e6:10:14: a6:f2:1d:c7:7d:60:8e:e5:bc:86:c4:86:dd:5f:fb: 60:da:61:78:66:e4:ae:96:06:17:ac:6a:76:bd:36: 8e:e3:e5:aa:f6:6d:13:39:68:95:9a:a5:db:6d:81: 71:0c:48:82:93:5e:b1:f2:94:39:e8:8b:0f:e8:10: 97:03:cc:df:0c:40:04:e4:c6:36:c6:12:4c:89:f1: 7c:23:b4:e2:f8:b7:49:64:00:c6:d6:37:a9:e0:e9: 46:f1:61:b6:6e:d0:89:28:0e:ea:59:7a:ce:5a:14: 00:e3:05:3d:bd:ac:e1:0c:f6:80:40:37:a8:6a:c8: 96:fd:9d:34:83:05:63:1c:33:1b:0c:29:74:01:40: 9f:41:0a:82:0c:a2:26:ed:36:cd:ed:e0:b0:3c:c7: 30:fc:8c:44:24:cf:7c:b4:40:b1:52:c6:06:59:35: 07:4b:54:e7:96:85:0b:0d:d6:5f:82:7e:c4:08:87: a7:13:0e:10:79:d8:cd:a6:2a:c7:60:c8:bd:9d:65: eb:cf:f3:5f:f1:52:e8:04:74:ad:1d:e1:9d:6c:25: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:32:07:44:74:1C:D5:C5:5D:F3:87:43:67:E4:C8:98:A4:30:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b6b95554-41b9-3c48-af9f-dc2f3a2466e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a8:ca:e8:9a:bf:4c:eb:c8:ab:05:ae:10:a5:6b:17:90:18: 36:cc:18:c0:4b:ce:a2:b5:e1:38:c8:c4:4a:6b:21:7d:39:4e: 85:e9:49:7c:58:29:9c:2b:c8:d4:3f:74:2e:03:45:53:95:a5: c2:bd:0d:f5:19:1c:db:10:25:d9:27:25:91:72:a9:5b:2b:fc: 88:77:fd:9b:6f:07:b1:79:51:67:aa:e8:79:a2:19:18:58:e3: d1:cb:8d:fc:7d:f0:32:76:89:be:04:8b:cc:5b:a2:f6:df:88: ac:e9:66:3c:b4:40:42:b1:3d:06:e2:3c:59:95:80:4a:ed:91: b0:1d:c9:82:eb:06:ab:38:79:69:f6:b3:81:2b:28:29:5e:cc: ff:41:0f:d6:32:b4:79:a5:e2:19:f0:9f:a7:70:58:a3:5f:81: e4:7a:22:51:37:4b:ee:d9:38:78:8e:d6:4a:ee:c3:1b:6c:7d: ce:70:48:66:a8:a4:f2:19:3c:0f:a3:c1:e9:62:e8:02:c5:38: 9d:87:21:3a:5a:19:63:16:df:16:dc:57:e3:69:30:3f:f5:ea: d9:5d:47:97:6d:4f:f2:51:92:68:71:4a:8f:28:1d:dc:54:c9: 67:9a:bd:09:49:cf:f1:3e:3c:31:5d:89:a9:14:25:15:6f:52: c3:d8:11:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiIFMQpdvI/T3TUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmQ5MTZiMTctYjVlNy00MTgxLTgyZGYtNmM4ODBjMzA0NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg+fFLvLJPB5JMbXelwrV8I5iy6eXxX9Mb3F v17l7svJvficQDwEkEfmEBSm8h3HfWCO5byGxIbdX/tg2mF4ZuSulgYXrGp2vTaO 4+Wq9m0TOWiVmqXbbYFxDEiCk16x8pQ56IsP6BCXA8zfDEAE5MY2xhJMifF8I7Ti +LdJZADG1jep4OlG8WG2btCJKA7qWXrOWhQA4wU9vazhDPaAQDeoasiW/Z00gwVj HDMbDCl0AUCfQQqCDKIm7TbN7eCwPMcw/IxEJM98tECxUsYGWTUHS1TnloULDdZf gn7ECIenEw4QedjNpirHYMi9nWXrz/Nf8VLoBHStHeGdbCWj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfBMgdEdBzVxV3zh0Nn5MiYpDD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjZiOTU1NTQtNDFiOS0z YzQ4LWFmOWYtZGMyZjNhMjQ2NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaoyuiav0zryKsFrhClaxeQGDbMGMBLzqK14TjIxEprIX05ToXpSXxY KZwryNQ/dC4DRVOVpcK9DfUZHNsQJdknJZFyqVsr/Ih3/ZtvB7F5UWeq6HmiGRhY 49HLjfx98DJ2ib4Ei8xbovbfiKzpZjy0QEKxPQbiPFmVgErtkbAdyYLrBqs4eWn2 s4ErKClezP9BD9YytHml4hnwn6dwWKNfgeR6IlE3S+7ZOHiO1kruwxtsfc5wSGao pPIZPA+jweli6ALFOJ2HITpaGWMW3xbcV+NpMD/16tldR5dtT/JRkmhxSo8oHdxU yWeavQlJz/E+PDFdiakUJRVvUsPYEWo= -----END CERTIFICATE-----Generated at Fri Apr 4 08:28:28 2025 by rpki-client