$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa File: d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa (raw, json) Hash identifier: J897UgT3Zeb6USjAfXmHktwGEzW3O/5AkDsfqE7gGMc= Subject key identifier: F8:7F:13:00:98:A9:8E:BD:1A:10:2B:73:1C:78:5A:52:B1:E1:8E:9A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820D67D81F52FAAC11D120 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.58.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0d:67:d8:1f:52:fa:ac:11:d1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c836dafd-bb29-427d-94a6-dc0ce729dd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:ac:5f:14:55:64:00:bf:e9:e8:4b:64:79: a0:54:1a:d3:c5:1a:10:ad:dc:e4:d1:4b:36:3e:68: 81:7a:5f:05:59:01:e5:dc:78:68:d8:ca:b9:5c:80: 33:b1:4d:8a:58:1f:1d:01:84:6b:84:0c:5f:25:2c: 50:b8:f6:9d:c9:cf:86:15:c1:12:e5:77:ee:6c:14: 31:4e:25:26:db:0e:99:23:98:8a:13:15:51:5a:39: d3:3c:8f:29:9e:50:8a:06:5f:90:7a:fb:28:bd:27: f5:90:c1:8d:62:4b:d7:d4:06:99:19:db:f7:75:56: 26:58:72:57:b2:68:ee:9b:6a:2a:9c:a9:36:10:5a: 0e:0c:c2:b8:50:23:00:3d:8e:67:6d:31:23:ac:74: 94:12:10:fc:6f:c7:f4:bb:30:bc:bd:3a:d7:03:2c: 58:11:db:17:94:d7:df:58:76:b8:e8:46:d4:c9:02: 0b:b3:20:94:d4:9c:f1:da:2c:74:41:9c:ef:87:b8: f9:b5:cc:69:7f:63:1e:0e:91:25:85:3e:a1:27:a1: 2f:98:61:58:2e:29:a1:93:1d:b7:66:a6:75:31:44: f0:1c:53:94:3e:91:da:ce:f4:7e:88:6c:31:94:f8: c1:96:f5:58:46:4d:08:e0:58:d8:72:f5:90:82:a4: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7F:13:00:98:A9:8E:BD:1A:10:2B:73:1C:78:5A:52:B1:E1:8E:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3f:30:26:08:f3:d2:40:b2:0d:f5:5b:6e:27:ff:4c:f5:e3: 53:ad:21:46:9f:e6:a3:96:3e:10:22:b9:c2:9d:6d:79:51:aa: 8e:71:4e:19:63:4d:cf:89:6b:d0:1b:91:c7:d7:fc:4a:64:df: c5:ef:8d:51:25:68:e6:f4:02:84:28:58:d1:8b:43:23:8d:6b: 84:8b:06:ef:b0:01:15:ef:b1:ac:74:d9:4b:e9:1f:0d:c1:e2: f5:a5:86:1b:a9:d6:c8:2b:dd:c8:45:1f:02:a3:f1:dd:8c:22: 10:90:ce:2d:e2:0c:f5:32:09:e8:8d:9f:e4:c1:57:40:58:04: 1e:cc:de:56:ad:c3:7b:43:00:58:e9:22:ac:a5:1f:88:f2:e8: c1:87:08:2e:3f:22:06:5f:94:48:2d:16:46:e1:c9:4a:72:ea: a4:1a:e3:6e:f4:60:ab:35:0e:e2:0c:68:db:ae:dc:f7:be:bc: 13:7f:28:d7:8b:09:25:2d:d2:b2:ef:8b:0e:0d:3e:91:c2:5c: 2d:84:08:89:f7:02:16:a0:bd:df:a9:33:cd:4c:81:f6:88:fc: 0c:eb:43:da:21:f6:33:e8:db:84:a2:4e:93:66:de:0d:90:5b: 13:6b:78:d5:f5:2c:48:53:7f:64:9e:ad:c7:d0:64:d7:8c:99: c8:c2:19:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgg1n2B9S+qwR0SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzgzNmRhZmQtYmIyOS00MjdkLTk0YTYtZGMwY2U3MjlkZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq2sXxRVZAC/6ehLZHmgVBrTxRoQrdzk0Us2 PmiBel8FWQHl3Hho2Mq5XIAzsU2KWB8dAYRrhAxfJSxQuPadyc+GFcES5XfubBQx TiUm2w6ZI5iKExVRWjnTPI8pnlCKBl+QevsovSf1kMGNYkvX1AaZGdv3dVYmWHJX smjum2oqnKk2EFoODMK4UCMAPY5nbTEjrHSUEhD8b8f0uzC8vTrXAyxYEdsXlNff WHa46EbUyQILsyCU1Jzx2ix0QZzvh7j5tcxpf2MeDpElhT6hJ6EvmGFYLimhkx23 ZqZ1MUTwHFOUPpHazvR+iGwxlPjBlvVYRk0I4FjYcvWQgqR+UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh/EwCYqY69GhArcxx4WlKx4Y6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhmZWM3NGYtYTBiZS0z YzJlLWI2NzUtZDA1ZWQ3ZTY0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk/MCYI89JAsg31W24n/0z141OtIUaf5qOWPhAiucKdbXlRqo5xThlj Tc+Ja9AbkcfX/Epk38XvjVElaOb0AoQoWNGLQyONa4SLBu+wARXvsax02UvpHw3B 4vWlhhup1sgr3chFHwKj8d2MIhCQzi3iDPUyCeiNn+TBV0BYBB7M3latw3tDAFjp IqylH4jy6MGHCC4/IgZflEgtFkbhyUpy6qQa4270YKs1DuIMaNuu3Pe+vBN/KNeL CSUt0rLviw4NPpHCXC2ECIn3Ahagvd+pM81MgfaI/AzrQ9oh9jPo24SiTpNm3g2Q WxNreNX1LEhTf2SercfQZNeMmcjCGc0= -----END CERTIFICATE-----Generated at Fri Apr 4 08:30:29 2025 by rpki-client