$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01b287ca-315e-3ef2-a32d-d6dc727966c2.roa File: 01b287ca-315e-3ef2-a32d-d6dc727966c2.roa (raw, json) Hash identifier: ZFuj4BaLBtg/znRRWhG8r840swGo6HyCUr4WG2ZLbGs= Subject key identifier: F0:C1:24:40:8D:29:51:9D:A9:47:DD:4E:01:80:55:3D:4A:AD:65:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAB96AED3651FC0C0F9D70 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01b287ca-315e-3ef2-a32d-d6dc727966c2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 209.85.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b9:6a:ed:36:51:fc:0c:0f:9d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=51502deb-b646-4843-9c64-3c1d9da77b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:eb:b0:a1:a6:c0:3e:70:22:c6:72:53:30: 9e:cc:75:0e:a4:75:85:81:c6:78:c9:42:60:8a:19: 5f:2a:11:8d:5e:a2:fb:4a:ed:16:4e:c6:1e:6c:48: cc:a3:21:74:7e:b4:84:40:b4:20:3c:e9:c3:21:33: 3c:9c:a2:4a:ae:fa:25:d1:bd:c6:1f:d6:3f:53:bf: d8:97:63:2a:4b:65:62:eb:5d:61:d3:01:d3:aa:dc: 6e:2a:d2:27:b7:8b:32:26:de:68:72:01:45:88:d8: 01:95:34:61:76:65:19:b4:7b:f5:a4:03:b2:e0:37: 0b:e9:a5:3b:f0:c5:d1:5c:34:79:23:72:47:91:2e: 2f:7a:02:53:c8:06:46:b9:eb:b4:ce:85:2b:3d:9e: cd:e2:15:58:43:ea:ec:8e:dd:38:0d:29:f6:03:06: 53:a2:ba:35:52:c4:1c:39:6e:6d:53:0c:d8:d7:a9: 7e:fd:9d:c7:9b:5a:d6:38:03:8d:da:4f:3d:68:27: 3e:31:f0:80:db:12:38:d7:c4:4f:f1:47:40:2c:18: 5d:6e:97:92:4e:47:25:86:86:67:9d:a1:03:b8:58: c7:8c:d3:a2:d5:78:3b:6a:86:96:53:73:a1:6e:97: 9a:e1:e4:1a:a1:ec:b1:35:04:2e:bf:d9:52:b0:ef: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C1:24:40:8D:29:51:9D:A9:47:DD:4E:01:80:55:3D:4A:AD:65:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01b287ca-315e-3ef2-a32d-d6dc727966c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ca:6f:34:32:1d:9f:4e:da:cf:55:60:a2:4a:e5:a8:e1:5c: 01:f3:e0:67:d3:b9:67:95:80:3c:40:49:51:47:bc:a8:08:62: 10:20:19:8d:6e:1e:88:69:15:76:53:7d:af:51:64:b7:98:70: 9a:e4:78:0b:78:47:0f:18:8d:61:76:9e:7c:87:a5:55:2e:88: 58:03:b1:91:2b:ac:3b:92:a3:e7:b5:30:24:84:7f:50:6c:d0: bf:2b:05:8a:3d:fa:81:4e:17:4d:13:fc:fa:af:80:ec:c5:1e: 2d:38:9d:09:4f:36:b4:d3:82:b4:6d:6a:aa:02:18:bd:d7:70: 38:c0:bf:7f:d7:e1:f6:b0:1d:eb:68:4f:c5:a4:34:f2:fe:01: 8b:bc:3d:5f:24:38:0a:cf:0a:bd:3d:7a:65:de:87:9d:ad:2a: 5c:4f:23:b7:b3:4e:70:9d:da:4d:76:fe:9c:ad:c4:82:aa:82: f1:bb:34:a1:eb:ee:83:94:5f:e8:ca:7d:b1:a6:1d:47:59:49: 57:5b:91:af:71:6f:f7:fe:80:92:20:b9:66:74:ca:b3:cc:b6: 10:22:b5:75:23:01:81:e1:a8:8c:62:15:95:81:ee:6d:69:78: 3c:a8:1b:69:01:99:48:09:1e:1e:0c:eb:ea:b5:d8:31:9e:b9: 24:11:ed:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurlq7TZR/AwPnXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTE1MDJkZWItYjY0Ni00ODQzLTljNjQtM2MxZDlkYTc3YjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonLrsKGmwD5wIsZyUzCezHUOpHWFgcZ4yUJg ihlfKhGNXqL7Su0WTsYebEjMoyF0frSEQLQgPOnDITM8nKJKrvol0b3GH9Y/U7/Y l2MqS2Vi611h0wHTqtxuKtInt4syJt5ocgFFiNgBlTRhdmUZtHv1pAOy4DcL6aU7 8MXRXDR5I3JHkS4vegJTyAZGueu0zoUrPZ7N4hVYQ+rsjt04DSn2AwZToro1UsQc OW5tUwzY16l+/Z3Hm1rWOAON2k89aCc+MfCA2xI418RP8UdALBhdbpeSTkclhoZn naEDuFjHjNOi1Xg7aoaWU3Ohbpea4eQaoeyxNQQuv9lSsO8iPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDBJECNKVGdqUfdTgGAVT1KrWXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFiMjg3Y2EtMzE1ZS0z ZWYyLWEzMmQtZDZkYzcyNzk2NmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXKbzQyHZ9O2s9VYKJK5ajhXAHz4GfTuWeVgDxASVFHvKgIYhAgGY1u HohpFXZTfa9RZLeYcJrkeAt4Rw8YjWF2nnyHpVUuiFgDsZErrDuSo+e1MCSEf1Bs 0L8rBYo9+oFOF00T/PqvgOzFHi04nQlPNrTTgrRtaqoCGL3XcDjAv3/X4fawHeto T8WkNPL+AYu8PV8kOArPCr09emXeh52tKlxPI7ezTnCd2k12/pytxIKqgvG7NKHr 7oOUX+jKfbGmHUdZSVdbka9xb/f+gJIguWZ0yrPMthAitXUjAYHhqIxiFZWB7m1p eDyoG2kBmUgJHh4M6+q12DGeuSQR7WE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:01 2025 by rpki-client