$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa File: c77f172a-1df8-31ea-92f6-569d849ec8b9.roa (raw, json) Hash identifier: v8Bnw3UVpxC5R5I6hjjTlbeP+JlKb3xZi/KeKjka6bs= Subject key identifier: 0C:26:B4:E3:0C:3F:28:BE:34:62:99:EE:58:78:A8:66:68:2D:85:D8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581882232890B7D49948380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 209.85.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:88:22:32:89:0b:7d:49:94:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=910af739-435f-4b9c-bde0-1ba918c89be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:78:73:ca:28:3c:1f:8f:68:20:a1:5f:99:9e: 85:b5:df:22:a0:32:f4:68:8d:81:d9:eb:58:bc:1f: 87:01:74:51:5e:5f:15:46:57:94:cc:04:7f:af:34: 16:52:c2:11:d6:8d:82:b6:a3:03:35:ff:5e:52:7a: aa:c0:b0:83:ab:02:22:51:4c:43:50:7c:dd:f5:de: 39:01:7b:5f:7c:fe:24:f5:0b:75:c2:d6:71:03:a7: 0d:73:f6:d8:17:01:a9:fa:ad:59:3b:4a:d1:16:51: 63:ea:14:d7:e9:8f:e4:77:ca:0e:29:9e:75:9a:30: 03:00:64:a3:91:b2:fb:e7:30:11:e7:27:ef:10:da: 65:8d:25:74:4f:fe:5e:e7:fc:5c:d5:14:08:ab:12: 99:1b:99:8d:34:32:e6:7c:a0:f8:95:01:ae:94:19: b3:fa:20:db:37:e1:6d:95:f4:29:70:1e:67:51:1e: 24:67:d6:5d:98:f1:94:03:50:f9:0e:6c:d4:67:5d: 0f:a7:9f:61:0c:d4:a8:cd:6a:ef:7d:89:07:61:f3: 02:52:cf:1c:42:61:34:1e:d7:a7:fa:36:9a:44:23: 07:a4:20:12:09:cd:48:2c:29:40:31:b8:13:64:05: 54:79:5f:1a:4e:05:15:e8:4a:b6:d0:43:e7:72:bc: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:26:B4:E3:0C:3F:28:BE:34:62:99:EE:58:78:A8:66:68:2D:85:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:02:4f:a7:ec:62:64:37:15:ad:b1:94:f2:3f:32:90:02:28: 92:b9:70:14:c0:2e:9d:03:c7:dd:7b:53:ea:ee:5d:63:12:cf: 58:23:f3:e5:a6:98:28:2d:e0:ce:97:13:07:85:23:46:89:64: d9:81:08:06:7d:a2:17:58:60:a3:c8:e3:26:8a:e6:b4:85:10: 4a:be:45:27:71:b4:f3:f6:d8:5a:54:32:73:94:5f:d5:df:ae: 91:41:b0:83:cb:51:bf:ba:8e:c6:42:48:cc:b4:14:ba:34:a5: 76:61:cb:34:f2:28:b3:ba:0d:0f:02:7a:0b:72:3d:f1:3f:61: 5f:42:6c:3e:c9:c6:79:4e:9c:3f:34:89:2b:cb:f5:e5:89:0a: c1:db:3c:d1:b2:eb:71:c6:f7:72:48:0c:94:fd:ef:ed:b3:03: f1:12:f3:a5:f0:2e:99:12:33:a6:4b:22:13:be:89:72:89:90: b9:78:54:74:6a:b8:29:6c:0c:c5:f0:fc:99:82:18:87:9d:5b: 1c:5b:a0:f4:9a:71:a3:1b:29:f7:0a:b3:ef:76:8e:5a:f1:e4: 2f:26:fe:97:6c:97:2b:56:2b:bd:0f:47:5d:24:10:0a:41:48: 12:cb:14:76:83:b9:a1:d0:fa:fd:f3:21:5f:12:b0:00:a4:b1: 9e:f4:fe:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYgiMokLfUmUg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTEwYWY3MzktNDM1Zi00YjljLWJkZTAtMWJhOTE4Yzg5YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnhzyig8H49oIKFfmZ6Ftd8ioDL0aI2B2etY vB+HAXRRXl8VRleUzAR/rzQWUsIR1o2CtqMDNf9eUnqqwLCDqwIiUUxDUHzd9d45 AXtffP4k9Qt1wtZxA6cNc/bYFwGp+q1ZO0rRFlFj6hTX6Y/kd8oOKZ51mjADAGSj kbL75zAR5yfvENpljSV0T/5e5/xc1RQIqxKZG5mNNDLmfKD4lQGulBmz+iDbN+Ft lfQpcB5nUR4kZ9ZdmPGUA1D5DmzUZ10Pp59hDNSozWrvfYkHYfMCUs8cQmE0Hten +jaaRCMHpCASCc1ILClAMbgTZAVUeV8aTgUV6Eq20EPncrxn9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwmtOMMPyi+NGKZ7lh4qGZoLYXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzc3ZjE3MmEtMWRmOC0z MWVhLTkyZjYtNTY5ZDg0OWVjOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsCT6fsYmQ3Fa2xlPI/MpACKJK5cBTALp0Dx917U+ruXWMSz1gj8+Wm mCgt4M6XEweFI0aJZNmBCAZ9ohdYYKPI4yaK5rSFEEq+RSdxtPP22FpUMnOUX9Xf rpFBsIPLUb+6jsZCSMy0FLo0pXZhyzTyKLO6DQ8CegtyPfE/YV9CbD7JxnlOnD80 iSvL9eWJCsHbPNGy63HG93JIDJT97+2zA/ES86XwLpkSM6ZLIhO+iXKJkLl4VHRq uClsDMXw/JmCGIedWxxboPSacaMbKfcKs+92jlrx5C8m/pdslytWK70PR10kEApB SBLLFHaDuaHQ+v3zIV8SsACksZ70/kk= -----END CERTIFICATE-----Generated at Fri Apr 4 08:43:53 2025 by rpki-client