$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b88a46-9849-3f2e-a300-a5026564c30f.roa File: c9b88a46-9849-3f2e-a300-a5026564c30f.roa (raw, json) Hash identifier: YT57xm+OMSIWdSHVK9kt8SfGuzvLZug9xd3zzJhWrnw= Subject key identifier: 10:B0:BC:17:47:1C:C3:90:C3:0E:6A:01:EF:83:8A:99:D2:6E:6B:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58228D4A1BB213E29EBE480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b88a46-9849-3f2e-a300-a5026564c30f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.239.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:28:d4:a1:bb:21:3e:29:eb:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=eee523b4-22e5-4d7e-856a-3922d773fe02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:6e:1b:36:cf:8d:c4:68:45:3f:4a:c1:e8: 32:48:81:72:49:d2:40:3e:4d:d2:a1:d6:d1:81:9b: b5:e5:04:7f:ef:08:17:9a:d0:01:6e:c6:a1:dd:f8: 45:12:23:e1:d2:00:14:04:ee:ef:fe:95:59:20:e2: cc:39:53:b9:6f:ad:86:66:c7:4c:43:aa:68:f0:66: ae:71:29:35:fa:a0:37:14:1a:55:b1:d2:cb:85:01: cb:be:29:82:be:3e:83:8e:93:0b:db:7b:fa:0c:fe: 3f:97:eb:5c:a8:76:40:c2:71:d0:9f:e7:e2:e6:34: ea:68:5b:2d:5c:86:5e:b8:96:27:bd:09:f9:a2:c8: f8:44:9a:fa:04:7e:50:08:4e:c4:19:2d:26:df:46: f8:19:13:0f:27:ae:59:84:f0:d7:39:f7:1a:a1:1f: 0f:45:4f:74:b8:c9:27:31:1c:87:04:4a:40:db:a0: 16:32:39:95:28:1c:d0:df:24:41:45:e0:ff:e1:2e: 04:de:ab:c8:c2:6d:32:0e:8c:d8:5a:dc:95:59:ce: d2:8e:f3:4c:61:47:a0:08:2a:bb:44:f2:4d:5a:52: 34:46:7e:9c:62:40:0d:05:f5:4b:14:cf:d5:2a:72: e3:ec:15:3a:9b:a7:d4:97:e9:20:d0:2b:6c:e9:d3: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B0:BC:17:47:1C:C3:90:C3:0E:6A:01:EF:83:8A:99:D2:6E:6B:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b88a46-9849-3f2e-a300-a5026564c30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:81:c9:de:be:74:74:b1:28:33:fb:ec:b8:50:15:8a:d9:ce: 84:02:59:8e:46:f4:69:96:7b:20:d7:76:e5:55:4a:2b:8f:5c: 9e:a9:1e:c6:5c:de:88:e8:fe:5b:1e:8f:ad:09:d0:3d:59:49: ee:26:47:8c:c6:44:9c:57:b8:2e:b6:c3:3a:e5:09:8a:18:ae: d5:94:c6:6d:6a:fb:27:ce:df:0b:fc:d5:f7:3d:3e:8c:46:a5: 8c:3c:b9:7b:0a:d3:82:64:12:a3:72:91:f2:24:c2:5e:10:4a: 21:22:79:31:37:d8:76:43:8d:8a:b0:1e:6b:7d:ac:db:29:a9: 9d:98:65:a1:60:25:83:4b:55:92:6a:c9:09:1f:39:aa:dd:4f: 66:4d:fb:21:ae:40:78:1c:c8:a1:e1:29:e5:4d:02:ab:f0:c4: f2:64:7d:13:d3:ca:e8:b1:b2:e1:ed:84:76:7e:5b:ff:14:9f: 33:ce:07:e8:d5:46:61:76:fb:74:93:e8:2f:5c:80:b3:69:e8: 40:ba:37:8f:78:3b:6e:91:05:94:5b:bb:54:50:01:d4:07:4d: 28:ca:d1:f7:76:d8:92:a8:4d:36:d2:3b:60:2a:3e:d7:ae:70: 57:09:86:ba:16:d6:47:04:6c:62:ff:a4:c3:0c:20:48:d3:f4: ff:9c:33:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgijUobshPinr5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWVlNTIzYjQtMjJlNS00ZDdlLTg1NmEtMzkyMmQ3NzNmZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZpuGzbPjcRoRT9KwegySIFySdJAPk3SodbR gZu15QR/7wgXmtABbsah3fhFEiPh0gAUBO7v/pVZIOLMOVO5b62GZsdMQ6po8Gau cSk1+qA3FBpVsdLLhQHLvimCvj6DjpML23v6DP4/l+tcqHZAwnHQn+fi5jTqaFst XIZeuJYnvQn5osj4RJr6BH5QCE7EGS0m30b4GRMPJ65ZhPDXOfcaoR8PRU90uMkn MRyHBEpA26AWMjmVKBzQ3yRBReD/4S4E3qvIwm0yDozYWtyVWc7SjvNMYUegCCq7 RPJNWlI0Rn6cYkANBfVLFM/VKnLj7BU6m6fUl+kg0Cts6dPeNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCwvBdHHMOQww5qAe+DipnSbmvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzliODhhNDYtOTg0OS0z ZjJlLWEzMDAtYTUwMjY1NjRjMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2Byd6+dHSxKDP77LhQFYrZzoQCWY5G9GmWeyDXduVVSiuPXJ6pHsZc 3ojo/lsej60J0D1ZSe4mR4zGRJxXuC62wzrlCYoYrtWUxm1q+yfO3wv81fc9PoxG pYw8uXsK04JkEqNykfIkwl4QSiEieTE32HZDjYqwHmt9rNspqZ2YZaFgJYNLVZJq yQkfOardT2ZN+yGuQHgcyKHhKeVNAqvwxPJkfRPTyuixsuHthHZ+W/8UnzPOB+jV RmF2+3ST6C9cgLNp6EC6N494O26RBZRbu1RQAdQHTSjK0fd22JKoTTbSO2AqPteu cFcJhroW1kcEbGL/pMMMIEjT9P+cMwU= -----END CERTIFICATE-----Generated at Fri Apr 4 08:27:15 2025 by rpki-client