$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa File: de6a6b49-15fb-3327-a988-9139a73a70b1.roa (raw, json) Hash identifier: IiERXvCjSqiCTmIs4nChCqNoPtsgo+1ThgoItQLGVRM= Subject key identifier: 39:4B:AF:9E:BB:EA:C2:6B:48:4B:93:62:99:D4:C7:09:7B:E4:C5:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5816D5F22694B60BE4FF000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6d:5f:22:69:4b:60:be:4f:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2849c298-35dc-4684-a11e-3e274c8c63dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:08:8c:9c:c1:6d:73:8d:4f:35:86:2b:bb: e3:27:df:19:4d:97:4d:d0:b0:f9:d1:4f:9f:48:18: 1c:83:8f:76:73:ad:f2:6e:f0:fb:a8:ee:43:20:8b: db:23:d8:40:bf:a9:06:74:1b:d5:65:d2:53:44:63: 59:d0:e7:a1:d3:a5:aa:b9:98:f7:8b:b3:23:80:be: 5b:70:2a:e6:80:a8:c4:5f:57:77:0e:0b:8f:47:d7: d5:51:b4:98:1a:15:f9:5d:84:c7:57:2d:b9:79:ac: 90:c1:bd:36:5b:26:98:79:17:2b:56:38:83:d6:85: b9:de:a8:02:d1:0e:05:42:bf:51:bb:fe:0f:18:20: 44:89:82:1d:af:6c:d1:1a:8d:8a:02:0d:b7:32:c7: 69:df:45:40:2f:19:bc:a9:bd:d3:25:2b:82:d3:f6: f4:3c:db:cb:c9:ca:7d:0b:5f:c3:0d:62:cb:b7:69: c5:11:2a:81:42:30:15:02:14:75:2c:89:b6:62:ff: 96:13:91:1b:dd:9e:4f:5a:bb:38:38:a7:1e:88:b3: 33:03:7e:fb:1b:55:dd:33:0a:89:1a:a6:18:11:5a: f9:ea:b6:d6:b1:71:41:c9:10:f1:6c:12:47:2d:4d: 60:2e:87:a9:8f:ab:62:09:3f:f6:78:1f:b3:9e:79: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4B:AF:9E:BB:EA:C2:6B:48:4B:93:62:99:D4:C7:09:7B:E4:C5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:14:0e:e7:47:e3:2b:0d:5a:ad:fc:db:8a:3d:ca:03:44:aa: f5:af:0c:f6:c8:e8:22:f0:5c:19:eb:60:2f:ed:34:92:c2:90: ec:06:e8:34:fe:00:88:28:3a:80:cc:57:6f:8e:47:83:72:b7: 1d:1d:78:95:96:7b:b3:3f:65:06:0f:be:1b:09:84:b3:3a:30: 62:22:9e:52:97:0b:fa:4b:40:53:79:df:99:55:67:89:52:2e: 8b:a4:f6:d6:bc:ce:98:3e:61:2f:de:e1:b2:04:da:9c:4b:18: 7d:cf:65:7a:d3:f1:d8:1d:7b:f4:60:64:5e:2a:5b:f1:e3:67: c0:6e:62:7c:2e:87:1e:0e:5f:f9:39:27:9b:8d:c0:0d:37:61: d5:81:f3:eb:e4:66:a5:ba:c0:7c:a7:af:44:eb:9f:5b:e4:90: a4:a0:4e:3c:15:a0:0a:37:de:08:2c:50:b1:4b:9f:67:99:a0: de:1b:cf:ad:54:9b:cd:25:f1:a0:98:9a:84:87:45:58:45:3e: 4a:8f:ba:40:40:67:e1:7e:c8:88:35:42:a2:d2:b3:d7:b0:53: 62:c2:49:d2:b7:31:0e:e1:e4:73:26:63:49:a7:d0:d7:42:e7: 37:fe:c6:3f:dc:02:92:b8:43:8c:cb:cc:01:30:85:d1:53:c8: 3d:4f:32:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgW1fImlLYL5P8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Mjg0OWMyOTgtMzVkYy00Njg0LWExMWUtM2UyNzRjOGM2M2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBsIjJzBbXONTzWGK7vjJ98ZTZdN0LD50U+f SBgcg492c63ybvD7qO5DIIvbI9hAv6kGdBvVZdJTRGNZ0Oeh06WquZj3i7MjgL5b cCrmgKjEX1d3DguPR9fVUbSYGhX5XYTHVy25eayQwb02WyaYeRcrVjiD1oW53qgC 0Q4FQr9Ru/4PGCBEiYIdr2zRGo2KAg23Msdp30VALxm8qb3TJSuC0/b0PNvLycp9 C1/DDWLLt2nFESqBQjAVAhR1LIm2Yv+WE5Eb3Z5PWrs4OKceiLMzA377G1XdMwqJ GqYYEVr56rbWsXFByRDxbBJHLU1gLoepj6tiCT/2eB+znnn9QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlLr5676sJrSEuTYpnUxwl75MU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGU2YTZiNDktMTVmYi0z MzI3LWE5ODgtOTEzOWE3M2E3MGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQUDudH4ysNWq3824o9ygNEqvWvDPbI6CLwXBnrYC/tNJLCkOwG6DT+ AIgoOoDMV2+OR4Nytx0deJWWe7M/ZQYPvhsJhLM6MGIinlKXC/pLQFN535lVZ4lS Louk9ta8zpg+YS/e4bIE2pxLGH3PZXrT8dgde/RgZF4qW/HjZ8BuYnwuhx4OX/k5 J5uNwA03YdWB8+vkZqW6wHynr0Trn1vkkKSgTjwVoAo33ggsULFLn2eZoN4bz61U m80l8aCYmoSHRVhFPkqPukBAZ+F+yIg1QqLSs9ewU2LCSdK3MQ7h5HMmY0mn0NdC 5zf+xj/cApK4Q4zLzAEwhdFTyD1PMhQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:53 2025 by rpki-client