$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f78efb23-6782-3c4f-8332-9c1ccd9c62e1.roa File: f78efb23-6782-3c4f-8332-9c1ccd9c62e1.roa (raw, json) Hash identifier: aJ7Q3l0NzOKUl5b0NPFUjad0gvvjOaikZc3fBY22K7w= Subject key identifier: 31:0F:58:05:CB:05:0C:E1:E9:06:D3:FD:7D:8A:72:DF:72:44:D5:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58179B936C573E2AA4CEE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f78efb23-6782-3c4f-8332-9c1ccd9c62e1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 173.194.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:79:b9:36:c5:73:e2:aa:4c:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=367e5818-58d9-4ad7-a1a8-bbc782018838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:d4:fb:7f:19:88:06:7d:96:69:c3:44:e2: a7:dc:a3:3c:e7:85:d2:77:3c:e6:e0:da:45:c0:dc: 04:89:8b:cf:35:93:e4:16:31:d8:37:0a:ec:ce:29: eb:34:ce:88:46:39:49:d2:7b:aa:9c:37:2d:62:fd: 4e:be:cd:b3:46:7b:d0:31:70:f1:83:e8:aa:46:5a: e3:39:14:a8:43:1f:2b:9b:2b:f4:32:a8:32:08:f4: bc:8e:33:81:b0:90:49:1a:76:f4:7c:37:5b:56:e5: eb:c2:c2:d9:01:f5:3a:54:e4:39:ce:60:b4:9f:47: 3b:79:ed:77:d8:df:85:cf:ec:d3:9a:f8:04:6c:bf: ad:58:b7:a5:f0:a1:e9:97:d0:9b:2c:8e:71:d2:b8: a3:2d:2e:94:f8:c4:ec:84:1b:83:cd:ee:ea:a5:c8: 2c:b0:63:26:77:28:cc:23:39:f4:b8:5b:db:50:08: e7:6e:c8:5f:ec:ea:b4:91:1b:35:35:41:08:ac:6f: 71:4a:85:88:3a:aa:d0:bc:c8:87:e2:3d:00:6e:ef: 4e:a3:cc:07:80:54:f7:1b:86:9c:9f:9c:08:e6:0a: d9:c2:8c:75:7c:75:33:b5:f0:d9:a4:51:d4:d8:93: b8:db:dd:38:e6:db:bf:a4:64:70:60:23:3a:6e:8e: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0F:58:05:CB:05:0C:E1:E9:06:D3:FD:7D:8A:72:DF:72:44:D5:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f78efb23-6782-3c4f-8332-9c1ccd9c62e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8d:fb:d9:72:49:9e:a5:37:cb:16:c7:ac:f2:d3:37:54:80: 65:41:71:43:57:26:7c:cc:1a:43:92:83:88:64:cc:3f:12:b5: 65:b8:d9:21:03:a8:5a:60:a4:99:1b:54:72:e8:8b:15:e7:82: 41:5e:8e:d9:31:e9:a7:d3:99:e2:20:29:fe:70:57:86:d8:16: 3a:1a:68:58:cf:16:32:1a:bb:88:52:21:ca:da:c9:1f:c1:5d: a2:78:ed:b8:31:ad:ce:e4:fc:01:9d:6f:0b:eb:79:f1:e6:d1: 17:b3:e2:07:71:24:b8:80:33:25:b1:b4:b3:65:2f:3b:1d:4c: e0:c4:dd:2f:96:ed:57:df:77:46:c1:67:09:96:97:8d:ec:31: fc:10:5f:89:3c:32:c4:b2:09:ef:e7:ab:6c:b5:94:46:df:db: 1f:99:1c:fd:7d:f2:b9:2e:c5:50:b8:e6:81:64:d8:04:69:e6: 4d:c7:7c:8f:c4:ba:a0:3c:94:9e:b8:10:a6:0b:70:ef:0d:7b: f0:7f:4b:fa:02:03:32:39:f2:bf:42:67:a3:49:ec:2f:2e:dd: 29:89:2c:3b:ef:85:75:ae:a5:07:f1:e8:f0:d9:72:d7:25:58: ec:dd:b2:b5:1a:e5:2f:3b:0b:bb:7a:5e:c3:c6:17:93:d0:4c: d7:eb:45:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXm5NsVz4qpM7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzY3ZTU4MTgtNThkOS00YWQ3LWExYTgtYmJjNzgyMDE4ODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN/U+38ZiAZ9lmnDROKn3KM854XSdzzm4NpF wNwEiYvPNZPkFjHYNwrszinrNM6IRjlJ0nuqnDctYv1Ovs2zRnvQMXDxg+iqRlrj ORSoQx8rmyv0MqgyCPS8jjOBsJBJGnb0fDdbVuXrwsLZAfU6VOQ5zmC0n0c7ee13 2N+Fz+zTmvgEbL+tWLel8KHpl9CbLI5x0rijLS6U+MTshBuDze7qpcgssGMmdyjM Izn0uFvbUAjnbshf7Oq0kRs1NUEIrG9xSoWIOqrQvMiH4j0Abu9Oo8wHgFT3G4ac n5wI5grZwox1fHUztfDZpFHU2JO429045tu/pGRwYCM6bo6xSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEPWAXLBQzh6QbT/X2Kct9yRNXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjc4ZWZiMjMtNjc4Mi0z YzRmLTgzMzItOWMxY2NkOWM2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKN+9lySZ6lN8sWx6zy0zdUgGVBcUNXJnzMGkOSg4hkzD8StWW42SED qFpgpJkbVHLoixXngkFejtkx6afTmeIgKf5wV4bYFjoaaFjPFjIau4hSIcrayR/B XaJ47bgxrc7k/AGdbwvrefHm0Rez4gdxJLiAMyWxtLNlLzsdTODE3S+W7Vffd0bB ZwmWl43sMfwQX4k8MsSyCe/nq2y1lEbf2x+ZHP198rkuxVC45oFk2ARp5k3HfI/E uqA8lJ64EKYLcO8Ne/B/S/oCAzI58r9CZ6NJ7C8u3SmJLDvvhXWupQfx6PDZctcl WOzdsrUa5S87C7t6XsPGF5PQTNfrRSA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:14 2025 by rpki-client