$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d38dc57f-2981-3b2c-9030-22e62e506079.roa File: d38dc57f-2981-3b2c-9030-22e62e506079.roa (raw, json) Hash identifier: +zOXv4S25xMIgEe/PAUEcGDy2TS46glb1jL5cEJ9peQ= Subject key identifier: D6:39:F0:FB:BC:7D:7D:2E:99:A9:7E:9A:3D:05:C6:60:62:62:5F:21 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822667EC8CF8846BEFEF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d38dc57f-2981-3b2c-9030-22e62e506079.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.58.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:26:67:ec:8c:f8:84:6b:ef:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d3ade083-165b-46ba-bfba-1a322b253659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5a:7d:91:1f:ec:95:e9:6e:8a:52:14:0a:e7: 59:ce:3a:75:25:0e:b1:6f:a2:f7:b1:0b:53:55:4d: e8:99:fb:7c:92:bd:62:2a:01:e1:bf:a3:29:1c:bb: 36:76:a9:c0:4d:5c:53:98:25:87:28:85:f4:b1:a6: 2c:ff:37:30:61:ed:53:22:dc:9e:40:4a:9c:c8:bd: 95:13:59:4a:8c:a9:a3:66:f0:40:1c:80:a3:ce:69: 1d:3d:cd:46:5b:95:ca:6d:86:95:ec:a0:91:ee:48: be:94:a4:48:95:74:85:04:7c:17:85:4d:2f:93:cf: b6:7e:bf:e3:1e:8c:94:cf:a7:0a:0f:37:b7:be:bc: 53:cc:74:2e:68:2e:8c:08:37:17:08:6d:d7:3e:01: 1c:14:42:24:c3:82:ca:b8:f9:85:b5:91:1c:2b:4e: a5:a1:6a:90:0b:c5:e7:65:de:f8:6e:cb:89:d1:75: 0c:68:2f:04:ce:6f:92:b1:01:4c:75:f5:4c:80:5a: 2f:28:33:e5:41:fc:9c:e5:46:b3:9e:d6:37:0b:bc: 2f:b0:51:a8:b7:e3:72:d3:a4:04:61:7d:7a:d0:f1: 81:54:45:ae:5b:b8:f0:dc:98:2f:3e:07:b5:2a:43: 5d:cd:ea:fc:58:2e:09:da:c5:fd:6a:93:5d:d0:b4: f7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:39:F0:FB:BC:7D:7D:2E:99:A9:7E:9A:3D:05:C6:60:62:62:5F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d38dc57f-2981-3b2c-9030-22e62e506079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:90:e9:a3:be:9e:14:41:48:02:fa:8d:c3:9e:05:70:70:d3: e2:28:9f:b6:84:1a:7a:9d:ff:74:6b:98:54:a2:29:73:16:b4: 63:01:0b:1c:4e:2e:ee:8f:65:c4:20:7c:7b:17:f3:96:6f:fa: 7d:14:99:74:62:28:0e:d2:9a:2d:82:94:e7:02:b5:ef:7a:15: 87:81:d2:8e:28:c7:87:ca:64:28:32:da:d5:45:4c:23:8d:26: 95:55:5d:85:ba:5a:33:b7:08:c1:4d:41:88:d0:c2:13:3d:7c: e3:51:6b:b3:0c:87:2c:56:e4:6e:6d:4f:d4:4d:8c:30:db:be: 7c:4a:b3:ed:95:1a:66:6b:cb:23:2f:e0:b8:7c:27:f5:e0:80: dd:11:57:a5:f3:18:d1:c8:ff:ab:e0:06:a6:98:b8:7d:6e:99: 0d:5f:a1:20:ed:50:3f:1b:f0:02:23:f3:c3:7f:01:eb:b0:d8: c3:44:ff:40:0b:e4:33:a9:47:1a:d5:aa:7d:62:c6:3c:ba:47: a1:15:5a:08:64:72:f3:60:f0:bf:91:fa:15:03:b7:2a:a9:7d: e9:79:d8:ee:b1:5d:af:16:ff:66:66:d5:2e:60:4e:37:b2:6c: a6:9a:78:14:4f:cf:45:74:c5:a5:ed:ce:46:76:cc:a6:24:e7: 2c:4c:ef:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiZn7Iz4hGvv7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDNhZGUwODMtMTY1Yi00NmJhLWJmYmEtMWEzMjJiMjUzNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFp9kR/sleluilIUCudZzjp1JQ6xb6L3sQtT VU3omft8kr1iKgHhv6MpHLs2dqnATVxTmCWHKIX0saYs/zcwYe1TItyeQEqcyL2V E1lKjKmjZvBAHICjzmkdPc1GW5XKbYaV7KCR7ki+lKRIlXSFBHwXhU0vk8+2fr/j HoyUz6cKDze3vrxTzHQuaC6MCDcXCG3XPgEcFEIkw4LKuPmFtZEcK06loWqQC8Xn Zd74bsuJ0XUMaC8Ezm+SsQFMdfVMgFovKDPlQfyc5UazntY3C7wvsFGot+Ny06QE YX160PGBVEWuW7jw3JgvPge1KkNdzer8WC4J2sX9apNd0LT3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY58Pu8fX0umal+mj0FxmBiYl8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDM4ZGM1N2YtMjk4MS0z YjJjLTkwMzAtMjJlNjJlNTA2MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmQ6aO+nhRBSAL6jcOeBXBw0+Ion7aEGnqd/3RrmFSiKXMWtGMBCxxO Lu6PZcQgfHsX85Zv+n0UmXRiKA7Smi2ClOcCte96FYeB0o4ox4fKZCgy2tVFTCON JpVVXYW6WjO3CMFNQYjQwhM9fONRa7MMhyxW5G5tT9RNjDDbvnxKs+2VGmZryyMv 4Lh8J/XggN0RV6XzGNHI/6vgBqaYuH1umQ1foSDtUD8b8AIj88N/Aeuw2MNE/0AL 5DOpRxrVqn1ixjy6R6EVWghkcvNg8L+R+hUDtyqpfel52O6xXa8W/2Zm1S5gTjey bKaaeBRPz0V0xaXtzkZ2zKYk5yxM7+M= -----END CERTIFICATE-----Generated at Fri Apr 4 08:40:38 2025 by rpki-client