$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa File: ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa (raw, json) Hash identifier: bYhVuqbRyFV2lzETjHUWNMCXkZaFmY95sF13RN+Jlpw= Subject key identifier: 74:C5:7D:33:95:3F:78:9C:6C:6C:97:61:67:30:AE:DE:34:E9:A2:98 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820EB7FC6F4C4F04950980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.58.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0e:b7:fc:6f:4c:4f:04:95:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=43b73bf1-9c59-42c5-9021-42a2ccc406a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:65:5d:28:53:02:c9:81:51:41:3b:95:7d: bb:fb:a9:4e:25:27:f4:73:05:e1:f9:22:2e:18:aa: 40:5a:95:45:b5:37:f0:b4:ef:0a:b9:e4:05:af:29: bd:fb:71:2b:c0:2f:96:ff:c9:64:f7:a9:68:48:73: b4:ad:0d:c0:09:3e:41:55:a5:dc:8a:54:6f:34:0f: a1:99:a2:18:1f:d7:9f:f0:69:1b:b1:cb:51:e7:f7: d1:81:01:96:ad:14:a7:4e:fa:21:e5:21:28:49:83: 6f:3a:e8:07:46:ed:33:79:01:4f:ce:6a:bc:86:fe: 9d:02:10:e0:5f:1a:60:92:59:90:7c:58:cc:f5:08: 60:04:96:3e:27:d1:a7:35:96:0c:42:4a:4e:f8:65: cb:0a:ad:d3:37:ed:37:95:80:82:c7:59:09:29:eb: e5:b5:b8:ef:f2:21:7e:6d:e0:ed:bd:da:5c:0e:e9: 84:b7:e2:10:05:e5:ad:60:11:96:32:ac:23:f4:8b: c1:e3:07:37:e4:24:72:87:d4:b5:50:c2:9e:3b:45: c6:aa:3f:03:79:9a:4b:09:78:e8:cc:15:ac:b5:7e: 1c:5c:32:3f:5f:ae:d6:cf:3d:38:8f:3c:6d:83:a3: a6:eb:ee:a7:08:7d:5f:fa:92:a1:82:73:59:72:fc: c9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C5:7D:33:95:3F:78:9C:6C:6C:97:61:67:30:AE:DE:34:E9:A2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:38:9b:ff:0e:3e:02:f3:4e:99:ff:34:b1:20:a0:76:75:81: a6:19:00:16:8a:f8:8d:d9:0a:52:9b:97:8c:98:1e:24:a9:c3: 32:3b:75:ae:4e:83:38:d6:db:98:23:5b:14:05:83:b7:8b:ff: a6:c9:3a:d0:d3:9f:ae:f1:3e:4e:62:c1:99:75:a4:f4:5f:4c: f0:ed:48:77:2d:80:55:f1:bc:b7:f3:a1:a9:ef:db:11:ac:22: c5:40:2b:f8:16:42:f3:c6:86:6e:db:5d:eb:c4:89:e8:65:f3: de:68:4d:0c:56:14:5f:9b:a6:df:31:f0:e7:a7:f0:84:46:e5: 97:3d:6d:0e:35:52:25:8b:94:f0:b9:c7:f7:37:86:8f:21:6a: a4:a1:44:d7:ec:50:d6:ca:4a:72:db:6d:d2:29:59:4e:5c:8e: cb:e0:51:9a:92:b8:18:50:4e:6a:fe:4f:34:82:1a:57:53:96: f7:6e:e2:b4:89:e4:11:f0:5f:f6:7a:03:a8:1d:72:69:73:41: 8e:76:06:a7:e5:4a:a0:89:2a:49:07:6f:c5:9a:03:f2:67:b8: 32:10:dd:18:0c:d3:8e:b0:a6:d6:2d:bd:50:1b:d8:5a:7d:6f: 07:5c:f1:2e:e6:b6:1f:7c:9f:e9:e5:03:08:9a:da:43:95:45: 09:46:3c:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgg63/G9MTwSVCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDNiNzNiZjEtOWM1OS00MmM1LTkwMjEtNDJhMmNjYzQwNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojxlXShTAsmBUUE7lX27+6lOJSf0cwXh+SIu GKpAWpVFtTfwtO8KueQFrym9+3ErwC+W/8lk96loSHO0rQ3ACT5BVaXcilRvNA+h maIYH9ef8GkbsctR5/fRgQGWrRSnTvoh5SEoSYNvOugHRu0zeQFPzmq8hv6dAhDg XxpgklmQfFjM9QhgBJY+J9GnNZYMQkpO+GXLCq3TN+03lYCCx1kJKevltbjv8iF+ beDtvdpcDumEt+IQBeWtYBGWMqwj9IvB4wc35CRyh9S1UMKeO0XGqj8DeZpLCXjo zBWstX4cXDI/X67Wzz04jzxtg6Om6+6nCH1f+pKhgnNZcvzJOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTFfTOVP3icbGyXYWcwrt406aKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2UyYzViOTItYTA5Ni0z Yzg0LTg0YjItOWE2MzM5Y2QzMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE4m/8OPgLzTpn/NLEgoHZ1gaYZABaK+I3ZClKbl4yYHiSpwzI7da5O gzjW25gjWxQFg7eL/6bJOtDTn67xPk5iwZl1pPRfTPDtSHctgFXxvLfzoanv2xGs IsVAK/gWQvPGhm7bXevEiehl895oTQxWFF+bpt8x8Oen8IRG5Zc9bQ41UiWLlPC5 x/c3ho8haqShRNfsUNbKSnLbbdIpWU5cjsvgUZqSuBhQTmr+TzSCGldTlvdu4rSJ 5BHwX/Z6A6gdcmlzQY52BqflSqCJKkkHb8WaA/JnuDIQ3RgM046wptYtvVAb2Fp9 bwdc8S7mth98n+nlAwia2kOVRQlGPDI= -----END CERTIFICATE-----Generated at Fri Apr 4 08:39:09 2025 by rpki-client