$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa File: d5e70c7e-2fb9-323c-a160-17182970c9ca.roa (raw, json) Hash identifier: aW04dc2TjsRzILYWGBROX9mH0+Dpob36n0/2RfB5M3I= Subject key identifier: 2C:9F:E4:B9:B8:40:5F:29:BD:45:28:C1:68:69:F6:54:9B:E6:0B:C3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818035A5BDEC1B4D9D0D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:80:35:a5:bd:ec:1b:4d:9d:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5fb9c3d6-3454-4c7b-b5d7-64374eb8726a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3f:d2:0c:1b:98:5f:e5:ea:b1:c7:02:33:ec: 1f:ca:53:01:85:6f:44:3d:fc:3e:ee:b3:e6:36:d7: f6:63:e3:be:fd:22:91:ba:3d:d0:05:a8:9c:89:4a: ba:83:aa:59:b7:51:75:77:e4:f5:df:d5:bf:93:22: b2:4a:f8:c4:ae:41:65:bd:f6:09:ca:c3:bb:91:0d: 8c:a4:7f:0e:c6:87:b8:ff:14:42:cb:28:85:91:8d: 3c:2f:3f:c5:a4:9b:94:a8:a0:b4:78:98:13:c5:d8: 69:3f:10:c1:cb:3a:11:77:d7:74:f9:31:d6:86:01: 08:83:02:89:1a:9c:90:d5:c2:1e:f2:62:78:56:eb: 57:7f:ab:fe:07:39:98:11:f3:f9:cf:40:1f:0c:f3: 6e:8c:fd:21:fc:e1:e1:ab:3b:2b:99:7c:0e:19:74: 74:fc:77:fc:82:93:0c:8c:a8:b5:5f:93:a2:20:f3: 8d:7e:20:b0:15:50:64:f6:92:cd:6c:50:9e:06:ea: 26:3b:62:8f:48:0d:a4:b2:01:88:8b:24:dc:b1:b8: 9e:d5:34:0b:13:e9:f1:e1:73:10:02:69:fa:25:20: 7a:9a:62:56:a1:37:24:5a:54:99:d8:80:da:48:18: 2c:be:fd:22:6d:7e:ce:fa:ca:2b:fa:5f:13:4d:29: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9F:E4:B9:B8:40:5F:29:BD:45:28:C1:68:69:F6:54:9B:E6:0B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3a:77:81:7e:d2:c5:24:9f:fc:af:16:9c:0e:17:c7:a9:d5: a7:35:70:54:cf:5f:59:e9:ee:0e:4b:08:27:62:02:f0:7a:90: c4:84:40:30:02:5a:a8:a5:b3:2e:bc:6b:d3:e7:56:c3:08:bc: 46:da:2a:43:3a:5d:99:ec:18:28:52:c4:a1:70:50:92:39:8e: 17:67:9c:fd:f4:f1:c4:6c:0d:d9:13:d5:83:c2:70:8d:b3:2d: 05:d4:84:e1:5f:3c:7d:07:d6:72:96:13:82:96:3a:1d:86:92: 53:70:4e:4d:83:55:3d:62:1a:b6:ae:21:70:eb:fc:6f:fa:57: 67:c0:f7:03:c9:f9:14:66:53:87:fe:13:ff:f4:6b:f1:5a:8f: e6:2b:fb:72:50:d6:83:b8:fd:54:4f:28:eb:2b:dd:18:93:b4: ad:e3:48:d7:0e:e5:e4:b7:84:30:0d:ae:22:81:9c:01:18:c0: 33:96:d0:02:5b:c8:e1:1e:dd:34:ff:d9:90:30:b6:e8:6b:4b: 33:a2:10:72:75:99:77:82:0a:26:d6:42:44:6d:84:cf:ce:a2: 64:d7:da:b2:fd:05:68:8e:ac:48:f4:20:2b:01:dd:25:75:2b: 13:53:a4:84:3d:5f:40:98:74:5c:d3:0d:7e:c3:78:4a:33:77: fb:7f:44:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYA1pb3sG02dDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NWZiOWMzZDYtMzQ1NC00YzdiLWI1ZDctNjQzNzRlYjg3MjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj/SDBuYX+XqsccCM+wfylMBhW9EPfw+7rPm Ntf2Y+O+/SKRuj3QBaiciUq6g6pZt1F1d+T139W/kyKySvjErkFlvfYJysO7kQ2M pH8Oxoe4/xRCyyiFkY08Lz/FpJuUqKC0eJgTxdhpPxDByzoRd9d0+THWhgEIgwKJ GpyQ1cIe8mJ4VutXf6v+BzmYEfP5z0AfDPNujP0h/OHhqzsrmXwOGXR0/Hf8gpMM jKi1X5OiIPONfiCwFVBk9pLNbFCeBuomO2KPSA2ksgGIiyTcsbie1TQLE+nx4XMQ Amn6JSB6mmJWoTckWlSZ2IDaSBgsvv0ibX7O+sor+l8TTSm7mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyf5Lm4QF8pvUUowWhp9lSb5gvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDVlNzBjN2UtMmZiOS0z MjNjLWExNjAtMTcxODI5NzBjOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA6d4F+0sUkn/yvFpwOF8ep1ac1cFTPX1np7g5LCCdiAvB6kMSEQDAC Wqilsy68a9PnVsMIvEbaKkM6XZnsGChSxKFwUJI5jhdnnP308cRsDdkT1YPCcI2z LQXUhOFfPH0H1nKWE4KWOh2GklNwTk2DVT1iGrauIXDr/G/6V2fA9wPJ+RRmU4f+ E//0a/Faj+Yr+3JQ1oO4/VRPKOsr3RiTtK3jSNcO5eS3hDANriKBnAEYwDOW0AJb yOEe3TT/2ZAwtuhrSzOiEHJ1mXeCCibWQkRthM/OomTX2rL9BWiOrEj0ICsB3SV1 KxNTpIQ9X0CYdFzTDX7DeEozd/t/RJM= -----END CERTIFICATE-----Generated at Fri Mar 14 09:00:17 2025 by rpki-client