$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa File: f32520e4-c5ed-3c6e-8a5c-f42032642839.roa (raw, json) Hash identifier: KEqJkcEHrkJ/fBRN9mkUmLKjEEy7T1ztFOB8S5WA8KU= Subject key identifier: AE:AC:5E:B4:C6:37:1F:8A:B4:7C:6E:8E:18:F1:9A:8F:A6:1E:B6:8F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820A72885F54C5893B7220 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.58.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0a:72:88:5f:54:c5:89:3b:72:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d0b30599-61e7-4dff-ba33-8478dfcb2630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:d2:36:d9:db:ce:62:93:fe:59:b1:7c:2c: b1:e3:d7:38:d2:79:d6:bc:52:ce:1e:f0:73:b8:c5: 63:bd:02:27:a4:58:88:15:1a:43:5a:10:66:0e:30: d6:a0:bf:4b:1b:27:9d:e4:65:9a:f7:02:ef:95:02: 7b:cc:db:76:02:d8:c0:52:77:af:0b:7a:3f:eb:9f: 61:93:95:07:a4:f1:09:13:b5:dc:d6:10:94:96:03: b9:a3:cf:a1:69:1d:96:55:ba:cf:8b:71:42:0c:c2: bc:8c:b2:2f:9a:b9:13:b7:4f:e9:b8:1b:db:fa:f2: 2e:62:16:f4:dd:32:d4:ed:de:4d:5c:4a:0f:96:1c: e8:b8:bd:3f:e9:d3:17:eb:cc:98:c7:3e:72:3c:5a: 17:65:96:f6:96:74:f4:fa:ae:58:1d:2e:80:e0:91: b1:e2:b1:e5:ba:e3:ff:57:09:ba:08:0d:ba:38:34: 1f:d4:13:13:5c:3e:b4:0e:ae:97:ec:b8:f2:c8:ec: cc:aa:34:c6:60:2f:8a:6d:3c:ec:ef:8a:c3:be:cb: d1:41:15:4c:c0:24:8d:b1:44:e1:41:ca:6b:6e:bb: 24:e1:7d:7e:25:cb:76:51:79:df:25:d7:e6:ee:c5: 9e:65:86:87:f6:5f:3f:86:2a:56:d6:93:17:ee:fd: 78:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AC:5E:B4:C6:37:1F:8A:B4:7C:6E:8E:18:F1:9A:8F:A6:1E:B6:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:35:eb:79:e2:71:b6:a2:8e:42:43:65:ca:d7:87:c7:ef:b0: ec:92:4f:df:b6:17:64:02:07:98:a7:83:1d:8d:34:f8:e9:e0: c1:2a:3d:cc:f6:29:6d:9b:aa:ae:18:5b:7e:14:25:3e:c5:d9: c9:8c:fa:be:81:73:23:95:f6:22:19:57:ef:0d:c5:0d:00:74: 9b:e8:9c:43:68:fe:b8:2b:8f:0e:85:f1:5c:79:57:8c:aa:7e: 45:6e:34:ad:1d:c0:9b:0b:a9:38:3a:65:31:8c:f3:9d:c0:f4: 4c:a9:a0:91:ed:73:df:c6:57:bb:b9:6b:c5:ac:51:87:6d:74: d0:c7:d7:f9:b5:0d:55:a4:60:5b:9a:1b:91:90:99:c1:ab:10: b2:b7:86:58:65:52:58:18:78:eb:95:3a:8b:84:6b:dd:e9:91: e3:f2:da:a1:bb:fd:da:43:12:fd:37:41:df:e0:82:ec:34:e9: fa:4b:2b:17:78:13:6f:8d:69:cd:f7:a7:70:a9:ca:42:1f:f8: ab:fd:c2:18:3c:7f:39:6a:13:25:52:96:4e:8e:71:e8:cc:45: aa:fe:e0:33:57:40:d4:d0:7e:71:ea:1e:93:e7:23:06:6b:f8: 1c:1f:23:d5:be:78:ee:32:53:8f:70:0d:74:fd:21:8e:b0:91: b4:c0:13:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggpyiF9UxYk7ciAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDBiMzA1OTktNjFlNy00ZGZmLWJhMzMtODQ3OGRmY2IyNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrjSNtnbzmKT/lmxfCyx49c40nnWvFLOHvBz uMVjvQInpFiIFRpDWhBmDjDWoL9LGyed5GWa9wLvlQJ7zNt2AtjAUnevC3o/659h k5UHpPEJE7Xc1hCUlgO5o8+haR2WVbrPi3FCDMK8jLIvmrkTt0/puBvb+vIuYhb0 3TLU7d5NXEoPlhzouL0/6dMX68yYxz5yPFoXZZb2lnT0+q5YHS6A4JGx4rHluuP/ Vwm6CA26ODQf1BMTXD60Dq6X7LjyyOzMqjTGYC+KbTzs74rDvsvRQRVMwCSNsUTh Qcprbrsk4X1+Jct2UXnfJdfm7sWeZYaH9l8/hipW1pMX7v14SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6sXrTGNx+KtHxujhjxmo+mHraPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjMyNTIwZTQtYzVlZC0z YzZlLThhNWMtZjQyMDMyNjQyODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4163nicbaijkJDZcrXh8fvsOyST9+2F2QCB5ingx2NNPjp4MEqPcz2 KW2bqq4YW34UJT7F2cmM+r6BcyOV9iIZV+8NxQ0AdJvonENo/rgrjw6F8Vx5V4yq fkVuNK0dwJsLqTg6ZTGM853A9EypoJHtc9/GV7u5a8WsUYdtdNDH1/m1DVWkYFua G5GQmcGrELK3hlhlUlgYeOuVOouEa93pkePy2qG7/dpDEv03Qd/gguw06fpLKxd4 E2+Nac33p3CpykIf+Kv9whg8fzlqEyVSlk6OcejMRar+4DNXQNTQfnHqHpPnIwZr +BwfI9W+eO4yU49wDXT9IY6wkbTAE0w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:38 2025 by rpki-client