$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa File: bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa (raw, json) Hash identifier: CLP/sPbvz7tYutJV31gxBRXqOTqr97zSGSQ4loWmT9A= Subject key identifier: 25:D2:60:F0:19:B7:11:32:63:34:B2:00:4E:E6:46:E3:41:97:D8:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817EF28C915D08C4B07A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7e:f2:8c:91:5d:08:c4:b0:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=70caab88-e340-40c6-9d6f-a9f39c20f423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ba:58:46:d4:c8:f0:98:24:a6:4d:1e:35:fc: ae:0b:ee:09:36:3b:0e:64:16:ed:8a:c0:01:0f:3c: 12:ef:d9:9b:11:1c:02:1e:ce:ee:73:d0:fb:c6:8d: 00:67:12:79:16:ba:91:15:62:03:fa:3f:2c:1b:40: dd:3b:dd:20:3e:2f:26:d0:81:2d:19:cb:e0:4c:7e: 58:85:8f:8c:e3:f0:1e:82:78:fa:89:3f:2c:18:3d: 87:72:13:54:1f:63:f1:78:81:92:de:30:ba:c3:97: 74:9f:de:a7:5d:2e:f4:dd:da:60:48:b2:99:85:4d: 58:1f:47:cb:b9:a0:53:07:44:8b:28:85:5e:63:09: 0d:ee:71:a1:02:12:5a:b4:99:16:59:4d:31:6e:23: fd:73:b2:fe:5f:da:06:25:16:30:84:0d:7e:dd:57: 5e:2c:cc:ae:cc:5a:5a:93:10:bf:99:60:d2:3c:7b: 5e:13:fc:30:13:66:4a:ab:60:bd:19:63:27:49:b0: 63:5d:02:7a:c5:76:bb:ee:db:57:db:64:b9:b4:b7: 19:c3:66:03:13:10:b7:d5:0e:9f:cd:fb:e6:ea:b7: df:f1:29:bb:8f:57:73:6b:55:ed:a9:93:7c:e7:d0: 25:74:3a:2c:cd:5e:15:75:42:41:7c:6b:b4:17:d3: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D2:60:F0:19:B7:11:32:63:34:B2:00:4E:E6:46:E3:41:97:D8:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ef:ad:97:e8:68:13:80:aa:0a:7f:b6:65:e4:94:f2:59:d0: e4:8b:50:f3:83:b8:84:70:f8:f5:ed:f4:c2:f7:a8:f1:79:ab: 73:06:d0:d8:cf:29:74:33:c1:99:f2:b9:d5:21:99:ba:88:e8: e3:09:29:b7:d8:15:c6:8c:e7:61:0e:58:51:d9:1a:c2:fe:22: 91:9a:e1:13:b2:4d:b6:19:c7:ec:36:b9:58:e5:6e:b3:14:00: 03:97:35:7e:e4:01:74:07:74:24:d3:02:ac:09:58:71:0f:29: 56:1b:4a:d1:73:91:1e:31:a8:36:9e:87:fc:60:b8:48:c7:36: 56:2d:c3:f6:aa:f0:ec:3e:f3:b7:1a:14:7f:f6:b6:19:3e:f9: 9d:ae:6e:be:c3:98:27:93:c2:53:5b:31:45:08:8b:ed:df:85: 19:e2:59:b9:26:15:cb:bc:3a:61:61:04:fd:33:93:bb:88:c9: 02:bb:44:00:fd:0d:20:a3:bb:79:39:5b:4f:fd:2f:a0:91:42: 2b:45:68:61:ce:db:b9:5b:0c:7e:6d:0b:78:f1:f5:01:b8:6c: 98:42:3d:60:6b:05:6d:e6:84:16:eb:80:43:fa:c9:1e:fe:7a: 2f:b3:37:72:7e:00:7a:80:74:90:78:41:83:b0:9c:fa:74:bf: b0:a5:6d:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX7yjJFdCMSwegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzBjYWFiODgtZTM0MC00MGM2LTlkNmYtYTlmMzljMjBmNDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibpYRtTI8Jgkpk0eNfyuC+4JNjsOZBbtisAB DzwS79mbERwCHs7uc9D7xo0AZxJ5FrqRFWID+j8sG0DdO90gPi8m0IEtGcvgTH5Y hY+M4/Aegnj6iT8sGD2HchNUH2PxeIGS3jC6w5d0n96nXS703dpgSLKZhU1YH0fL uaBTB0SLKIVeYwkN7nGhAhJatJkWWU0xbiP9c7L+X9oGJRYwhA1+3VdeLMyuzFpa kxC/mWDSPHteE/wwE2ZKq2C9GWMnSbBjXQJ6xXa77ttX22S5tLcZw2YDExC31Q6f zfvm6rff8Sm7j1dza1XtqZN859AldDoszV4VdUJBfGu0F9PYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXSYPAZtxEyYzSyAE7mRuNBl9h3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmQ3ZDBiZGItYTE4My0z YTk1LTlhM2ItNjA3ODc0MjNhYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrvrZfoaBOAqgp/tmXklPJZ0OSLUPODuIRw+PXt9ML3qPF5q3MG0NjP KXQzwZnyudUhmbqI6OMJKbfYFcaM52EOWFHZGsL+IpGa4ROyTbYZx+w2uVjlbrMU AAOXNX7kAXQHdCTTAqwJWHEPKVYbStFzkR4xqDaeh/xguEjHNlYtw/aq8Ow+87ca FH/2thk++Z2ubr7DmCeTwlNbMUUIi+3fhRniWbkmFcu8OmFhBP0zk7uIyQK7RAD9 DSCju3k5W0/9L6CRQitFaGHO27lbDH5tC3jx9QG4bJhCPWBrBW3mhBbrgEP6yR7+ ei+zN3J+AHqAdJB4QYOwnPp0v7ClbVI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:27 2025 by rpki-client