$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/081be601-da6c-3041-b82f-8033cf46d942.roa File: 081be601-da6c-3041-b82f-8033cf46d942.roa (raw, json) Hash identifier: k69d2TixY2XRHcvS0zImlRgj7+uvBbhoB7xLEYg5Nv4= Subject key identifier: C5:FB:66:35:B1:79:96:06:87:8F:54:42:16:D8:5D:09:C4:E8:05:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD1849FC36D1D2A9BD680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/081be601-da6c-3041-b82f-8033cf46d942.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d1:84:9f:c3:6d:1d:2a:9b:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3d0a687a-9809-42a1-98ab-0b6d2a19ffdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:02:7a:d2:5e:2d:35:05:c6:0d:d4:1e:f8:72: bc:42:b4:65:37:78:e9:b2:59:e0:f3:05:a8:4e:14: ce:5c:6b:0e:07:30:f2:0e:f8:84:ff:fa:ea:be:57: 43:a9:3f:60:ca:28:09:9d:90:ec:1f:56:8e:e3:d3: bf:c8:fe:65:19:a9:54:da:06:6c:b7:a9:76:3e:b6: 16:7f:63:8b:67:7e:30:e1:f7:82:31:42:55:d6:44: 91:b9:29:0d:5f:4b:f1:ea:6c:47:00:c0:ab:0e:7c: 8e:1c:21:a3:fc:4b:e9:d5:82:b6:a1:7c:32:4b:fe: d5:95:3e:eb:d3:f8:53:9d:ac:9e:52:1f:7a:a6:fa: 05:70:36:a8:b3:7b:54:7c:e9:f7:7b:4b:e6:c1:a6: 6d:71:94:81:1d:23:0f:57:19:88:87:ba:0d:17:bb: 27:0b:9d:04:44:f3:72:1f:05:da:e2:00:7d:09:7c: 60:b5:4e:aa:cd:85:e6:c4:30:5d:95:8e:6e:4f:59: 5d:69:02:79:ea:c3:f8:d8:cb:0a:70:23:67:b0:c5: 35:8d:66:bb:b6:9e:b6:63:63:4e:18:26:6e:b0:d7: de:45:58:33:9c:14:c5:1a:f6:21:6e:bf:ed:92:25: 80:af:6a:ac:e8:24:36:b0:0b:69:45:fc:2e:40:d5: 90:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FB:66:35:B1:79:96:06:87:8F:54:42:16:D8:5D:09:C4:E8:05:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/081be601-da6c-3041-b82f-8033cf46d942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:aa:e4:bd:99:6c:fd:ba:2b:9e:d7:e2:1c:4b:61:0d:51:7e: ae:6f:89:af:44:e4:21:45:55:eb:ed:ae:10:86:ef:56:5d:f5: 14:a0:c9:88:9b:43:f8:c8:01:ec:4e:26:fb:aa:a3:58:bd:4e: 86:d0:c2:df:1d:9a:db:99:5c:cc:ff:cb:9f:9e:f0:72:96:89: af:5a:50:0f:12:ec:43:61:19:9f:10:52:2e:84:00:e2:80:e3: d4:ce:d9:11:3e:e8:b4:6a:09:a4:54:fa:1e:10:1c:17:48:32: 05:fa:81:b5:59:33:51:d2:83:11:b9:37:07:40:8b:2d:41:86: 41:f2:00:67:59:8b:f8:c3:86:cd:f1:e6:98:62:ac:ab:56:1d: 11:9e:d8:47:13:94:db:21:08:50:b2:9b:92:09:19:89:29:83: 73:11:d1:f2:37:81:2b:97:4a:04:be:f6:aa:cb:a3:48:7a:d4: b0:b7:89:42:89:70:98:6f:a6:97:f8:0d:35:d0:fb:04:df:1a: a8:cb:e5:16:49:5a:bb:ae:8c:6a:79:89:5f:f6:36:94:d1:30: 38:a6:ad:03:42:5d:10:f8:61:67:9b:48:4a:e9:07:e3:34:bd: bd:d7:b9:e9:4e:98:43:3a:ea:8f:1b:ea:bb:0c:bc:3b:31:c4: e6:0c:18:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutGEn8NtHSqb1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2QwYTY4N2EtOTgwOS00MmExLTk4YWItMGI2ZDJhMTlmZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwJ60l4tNQXGDdQe+HK8QrRlN3jpslng8wWo ThTOXGsOBzDyDviE//rqvldDqT9gyigJnZDsH1aO49O/yP5lGalU2gZst6l2PrYW f2OLZ34w4feCMUJV1kSRuSkNX0vx6mxHAMCrDnyOHCGj/Evp1YK2oXwyS/7VlT7r 0/hTnayeUh96pvoFcDaos3tUfOn3e0vmwaZtcZSBHSMPVxmIh7oNF7snC50ERPNy HwXa4gB9CXxgtU6qzYXmxDBdlY5uT1ldaQJ56sP42MsKcCNnsMU1jWa7tp62Y2NO GCZusNfeRVgznBTFGvYhbr/tkiWAr2qs6CQ2sAtpRfwuQNWQjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX7ZjWxeZYGh49UQhbYXQnE6AWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDgxYmU2MDEtZGE2Yy0z MDQxLWI4MmYtODAzM2NmNDZkOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+q5L2ZbP26K57X4hxLYQ1Rfq5via9E5CFFVevtrhCG71Zd9RSgyYib Q/jIAexOJvuqo1i9TobQwt8dmtuZXMz/y5+e8HKWia9aUA8S7ENhGZ8QUi6EAOKA 49TO2RE+6LRqCaRU+h4QHBdIMgX6gbVZM1HSgxG5NwdAiy1BhkHyAGdZi/jDhs3x 5phirKtWHRGe2EcTlNshCFCym5IJGYkpg3MR0fI3gSuXSgS+9qrLo0h61LC3iUKJ cJhvppf4DTXQ+wTfGqjL5RZJWruujGp5iV/2NpTRMDimrQNCXRD4YWebSErpB+M0 vb3XuelOmEM66o8b6rsMvDsxxOYMGOM= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:51 2025 by rpki-client