$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb6babfc-cad7-30e8-87c8-a7ae9b188767.roa File: bb6babfc-cad7-30e8-87c8-a7ae9b188767.roa (raw, json) Hash identifier: 0Yqbtz2npqzK81xdnDa37uApl/GX0oWr0+qsrpJZPDo= Subject key identifier: 28:55:01:A6:DE:38:17:57:DC:75:40:3E:8C:DD:18:9D:CC:6E:CD:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582280B8440C1E0618C9F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb6babfc-cad7-30e8-87c8-a7ae9b188767.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:28:0b:84:40:c1:e0:61:8c:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f727a948-7a8a-4d12-baab-a8b4b0967593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:b9:e7:c8:6f:00:d0:f0:5b:99:b8:7a:f3: 07:55:cf:5b:53:83:0f:be:70:b6:19:ba:c9:3f:ac: 1a:2c:bc:16:bb:e6:fc:c1:ab:f9:95:70:a9:0b:c2: ec:7d:ad:b9:1c:c0:e5:06:76:8f:b7:9a:0a:69:c2: c7:ed:75:69:37:06:b5:97:ff:c8:21:48:36:c2:3b: 67:46:ec:55:25:08:31:62:9c:42:a7:11:21:63:1b: 54:f6:5b:26:b4:a0:43:30:12:94:6c:65:cf:de:2c: 71:5c:32:64:54:bc:8e:32:9f:82:2a:d5:7c:81:a3: 76:1a:be:86:0e:0a:89:91:6f:3a:15:81:df:f6:90: 1d:1d:d7:cf:27:45:78:4a:f1:08:f6:9f:37:5d:7b: 7a:22:58:a8:91:a7:b9:ea:ba:26:2e:94:c0:b3:91: 28:c2:42:72:e2:ba:2d:42:5f:bc:57:9b:1b:0f:3b: 3d:d1:46:37:c0:b9:99:16:82:66:9b:ca:25:64:0b: bd:65:a3:5e:e8:ea:38:6a:78:97:ab:3e:21:85:d9: 20:5e:55:64:99:57:f6:c9:c3:e7:35:66:83:10:32: 07:dd:14:f5:9d:a1:97:de:e6:7f:ba:75:64:f9:a7: ff:af:fb:5c:8e:fa:32:ce:03:9a:9c:98:ea:34:62: 48:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:55:01:A6:DE:38:17:57:DC:75:40:3E:8C:DD:18:9D:CC:6E:CD:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb6babfc-cad7-30e8-87c8-a7ae9b188767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:91:78:82:eb:6a:4b:16:5b:9d:e5:bf:4c:4c:74:5c:64:0e: 6d:8f:eb:57:bc:78:5c:65:0b:43:b1:a4:9d:ae:87:55:c4:03: 88:16:ae:40:03:1d:c2:d8:15:4a:1b:98:55:70:e7:e2:60:58: a3:6b:d1:54:aa:b4:40:59:8b:03:65:bf:ac:47:c3:17:43:ce: e1:32:27:db:2c:88:ea:df:c1:d3:09:5c:b4:5d:03:69:b2:fb: 01:1d:47:3d:51:0f:6d:f4:b8:65:a5:fd:10:8e:8b:16:26:65: 3b:b4:b7:a1:0d:15:30:53:29:8c:19:6c:7d:76:a7:1e:cf:bc: 53:a5:0b:1c:e3:23:9e:75:df:42:48:e1:11:05:4f:3a:2a:f7: 88:fa:08:3b:58:84:79:86:52:0a:c0:c3:a8:83:11:5e:be:de: ac:08:83:f5:90:9c:fe:c3:30:c6:fd:2e:54:e6:27:0c:ee:87: c9:32:61:1f:44:7e:6f:48:5a:21:64:b4:a5:58:5e:9c:43:28: 9d:42:47:f1:78:a5:b1:6a:77:51:7a:c3:11:83:6a:79:df:ae: 8b:df:ba:c1:95:4c:a4:be:62:9c:8d:f5:2d:1e:1e:e8:47:6d: ae:61:ac:6e:b6:2e:46:f6:fe:69:2e:dd:0a:12:2a:56:7a:12: 80:e6:9e:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgigLhEDB4GGMn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjcyN2E5NDgtN2E4YS00ZDEyLWJhYWItYThiNGIwOTY3NTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtza558hvANDwW5m4evMHVc9bU4MPvnC2GbrJ P6waLLwWu+b8wav5lXCpC8Lsfa25HMDlBnaPt5oKacLH7XVpNwa1l//IIUg2wjtn RuxVJQgxYpxCpxEhYxtU9lsmtKBDMBKUbGXP3ixxXDJkVLyOMp+CKtV8gaN2Gr6G DgqJkW86FYHf9pAdHdfPJ0V4SvEI9p83XXt6Iliokae56romLpTAs5EowkJy4rot Ql+8V5sbDzs90UY3wLmZFoJmm8olZAu9ZaNe6Oo4aniXqz4hhdkgXlVkmVf2ycPn NWaDEDIH3RT1naGX3uZ/unVk+af/r/tcjvoyzgOanJjqNGJIDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChVAabeOBdX3HVAPozdGJ3Mbs1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmI2YmFiZmMtY2FkNy0z MGU4LTg3YzgtYTdhZTliMTg4NzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaReILraksWW53lv0xMdFxkDm2P61e8eFxlC0OxpJ2uh1XEA4gWrkAD HcLYFUobmFVw5+JgWKNr0VSqtEBZiwNlv6xHwxdDzuEyJ9ssiOrfwdMJXLRdA2my +wEdRz1RD230uGWl/RCOixYmZTu0t6ENFTBTKYwZbH12px7PvFOlCxzjI55130JI 4REFTzoq94j6CDtYhHmGUgrAw6iDEV6+3qwIg/WQnP7DMMb9LlTmJwzuh8kyYR9E fm9IWiFktKVYXpxDKJ1CR/F4pbFqd1F6wxGDannfrovfusGVTKS+YpyN9S0eHuhH ba5hrG62Lkb2/mku3QoSKlZ6EoDmnhU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:25 2025 by rpki-client