$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4445321-e206-3ee9-9f5b-556cede5293f.roa File: e4445321-e206-3ee9-9f5b-556cede5293f.roa (raw, json) Hash identifier: 6/q0FskEkMygAgWipawTERQAVBRJE6TPjJ6ut6W6C2o= Subject key identifier: F6:30:8F:16:ED:C1:CE:4C:B9:87:AF:09:65:43:04:AF:F9:83:E4:1E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12B18DC0397DC4DD75820 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4445321-e206-3ee9-9f5b-556cede5293f.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 173.194.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2b:18:dc:03:97:dc:4d:d7:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=46a29859-78ff-4c6a-aa3d-1ac1a5af3afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:de:d9:b6:f4:fe:2a:67:14:a6:10:23:f4: cb:3b:c2:84:dd:39:0c:50:ef:e6:25:75:60:1b:e4: ed:eb:97:3e:8f:d8:fe:e0:ee:1a:3c:41:4f:d7:73: 22:d1:fe:46:58:04:7f:47:e2:1e:ad:52:c2:56:39: c1:5c:2c:dd:e9:c9:2b:c5:c2:57:d8:10:4f:5e:8c: da:18:f9:07:87:ee:94:de:69:14:7d:a6:08:2d:fc: 17:ee:e1:e3:16:29:8d:45:dd:0b:9e:1c:12:12:1f: 7e:91:3f:a0:62:67:6a:31:be:0b:4a:38:c1:2b:f0: 19:e0:ca:05:c7:87:40:55:08:ab:9c:2c:5c:2c:94: 1d:da:33:75:f8:9f:4a:15:a8:df:3a:99:39:e4:3d: b9:a9:88:d4:9a:33:15:1f:10:89:fe:bf:a6:a8:34: a0:ff:85:08:a4:d7:9d:7d:ba:47:a7:37:4c:65:ab: 6b:44:3b:af:df:36:ba:d7:b3:46:0a:ab:5f:4d:21: 18:ee:c1:d2:7b:c8:e0:d6:bd:55:a8:a9:c4:4e:dd: 80:ce:03:88:ba:49:9f:19:5e:07:6f:29:33:f4:42: 6d:69:2c:5c:9d:27:ba:20:9e:46:63:71:cd:38:53: b1:2a:e5:96:43:60:c2:1c:75:f4:6b:95:83:f9:a0: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:30:8F:16:ED:C1:CE:4C:B9:87:AF:09:65:43:04:AF:F9:83:E4:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4445321-e206-3ee9-9f5b-556cede5293f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:84:65:df:71:51:03:91:38:15:d6:1f:86:a7:bd:fa:85:39: 1a:d1:14:36:7f:69:bd:36:83:f1:df:b8:27:94:46:83:eb:b2: 77:09:2f:0f:37:cf:5a:0b:8b:89:eb:f8:a0:ca:ec:1f:f6:f2: d2:7a:94:ce:61:63:5d:24:91:7a:03:96:07:9d:6b:42:f8:67: f7:41:7d:77:2c:92:fa:1d:db:a7:13:36:dc:82:25:a0:d3:e6: 55:a8:c9:69:3d:26:2e:94:10:19:ff:3f:00:34:50:82:0c:a1: 6b:08:88:08:81:dc:6a:e7:99:27:bf:8b:6a:32:84:bf:a4:7c: cc:bc:05:d8:4a:0c:36:70:f4:25:48:30:71:7a:2e:e9:2f:ab: 63:3d:73:80:7a:3f:3e:48:a7:f5:29:0e:59:d2:0c:88:79:e7: d1:6a:af:77:ad:98:a1:83:c9:06:71:8c:d5:0a:04:46:9c:95: 03:c9:4a:a3:ed:74:64:05:6d:37:27:9b:47:ad:56:64:01:0a: 02:c2:d6:fb:5f:dc:7e:f3:13:61:6c:b1:c0:a1:9a:f1:15:d4: 9b:74:ec:25:32:8c:f6:00:b3:77:4d:0b:0e:32:76:da:e6:10: e0:22:5a:dd:87:42:19:89:3a:0a:2a:bc:0e:57:22:5b:34:d2: 48:1f:5e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSsY3AOX3E3XWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NDZhMjk4NTktNzhmZi00YzZhLWFhM2QtMWFjMWE1YWYzYWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfXe2bb0/ipnFKYQI/TLO8KE3TkMUO/mJXVg G+Tt65c+j9j+4O4aPEFP13Mi0f5GWAR/R+IerVLCVjnBXCzd6ckrxcJX2BBPXoza GPkHh+6U3mkUfaYILfwX7uHjFimNRd0LnhwSEh9+kT+gYmdqMb4LSjjBK/AZ4MoF x4dAVQirnCxcLJQd2jN1+J9KFajfOpk55D25qYjUmjMVHxCJ/r+mqDSg/4UIpNed fbpHpzdMZatrRDuv3za617NGCqtfTSEY7sHSe8jg1r1VqKnETt2AzgOIukmfGV4H bykz9EJtaSxcnSe6IJ5GY3HNOFOxKuWWQ2DCHHX0a5WD+aDBtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYwjxbtwc5MuYevCWVDBK/5g+QeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTQ0NDUzMjEtZTIwNi0z ZWU5LTlmNWItNTU2Y2VkZTUyOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGEZd9xUQOROBXWH4anvfqFORrRFDZ/ab02g/HfuCeURoPrsncJLw83 z1oLi4nr+KDK7B/28tJ6lM5hY10kkXoDlgeda0L4Z/dBfXcskvod26cTNtyCJaDT 5lWoyWk9Ji6UEBn/PwA0UIIMoWsIiAiB3GrnmSe/i2oyhL+kfMy8BdhKDDZw9CVI MHF6Lukvq2M9c4B6Pz5Ip/UpDlnSDIh559Fqr3etmKGDyQZxjNUKBEaclQPJSqPt dGQFbTcnm0etVmQBCgLC1vtf3H7zE2FsscChmvEV1Jt07CUyjPYAs3dNCw4ydtrm EOAiWt2HQhmJOgoqvA5XIls00kgfXt0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:30 2025 by rpki-client