$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aac0a89-c692-33ad-b439-320e12b19fad.roa File: 0aac0a89-c692-33ad-b439-320e12b19fad.roa (raw, json) Hash identifier: GcO5Poc4p5a78y6gBsstGhpCnLMceCbUuSGwVftAKyk= Subject key identifier: BE:B0:36:83:88:74:5B:58:39:57:FE:32:5F:B3:03:49:F7:2E:F0:22 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB619928C07DC7045C8CC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aac0a89-c692-33ad-b439-320e12b19fad.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:61:99:28:c0:7d:c7:04:5c:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=794a940d-1b80-42a7-b823-e6f5529a7854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f4:f0:43:cd:7a:2d:c5:96:d6:f6:e1:b2:93: 79:3f:27:d1:d8:7c:20:3a:87:d3:ef:b4:a8:82:74: db:f4:46:22:8d:75:24:c0:3e:d1:b2:b8:48:04:64: ad:3f:c4:0a:94:bb:13:b5:dd:41:0f:35:7d:d5:45: e6:f0:8d:62:9e:43:2d:3c:61:2b:0f:01:3e:1c:c6: 1c:22:53:bb:81:43:99:47:20:97:04:18:42:90:84: a9:b6:eb:e9:a6:49:14:2f:b7:6c:f5:19:4c:3d:fd: dd:15:ee:a2:64:c6:2a:ea:56:c2:61:22:ec:bb:4e: dc:73:0a:25:b4:ea:75:9e:a9:5e:95:c8:42:d1:df: 83:ab:e4:93:7e:51:ef:f4:ae:f3:d4:a8:64:1e:15: 8d:54:2b:27:f2:b8:9e:3b:68:0b:24:15:dd:1f:d6: 15:b0:cb:fc:8a:f9:71:87:d6:10:b9:37:d1:2f:67: 61:22:04:25:71:b6:dc:18:45:73:2e:0b:7f:24:a3: 69:21:30:ed:da:b2:bc:5e:95:ee:be:5f:dd:a4:c5: 99:c9:a8:ef:95:54:19:87:52:a8:88:60:12:14:b4: b7:51:2b:59:7a:54:83:07:39:85:b7:cf:fe:0a:cd: 82:7b:63:51:fd:25:0f:99:2d:b1:dd:63:43:55:de: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B0:36:83:88:74:5B:58:39:57:FE:32:5F:B3:03:49:F7:2E:F0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aac0a89-c692-33ad-b439-320e12b19fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:09:fa:46:c8:37:fe:a7:2e:d7:4a:b8:b2:5b:04:3d:67:72: d4:a6:90:3b:1c:c0:d2:81:4d:e1:d7:2d:3a:89:8b:54:8a:3b: b8:0f:7f:70:ab:ef:ef:1f:93:05:66:ca:03:9b:c6:7c:5f:af: 34:97:60:db:9d:f3:20:dd:48:40:01:05:cd:22:de:a8:f6:fc: 2f:a6:83:ea:8b:25:64:27:98:47:fe:72:30:30:0d:69:ec:3c: be:99:b7:4f:be:78:48:bd:eb:1b:06:6c:96:fb:df:61:8a:c4: ae:bd:dd:a7:c3:40:05:e6:12:14:84:da:73:05:2f:53:81:37: cf:ed:c0:e4:59:5f:40:e4:ac:7c:81:eb:1b:c4:67:ca:db:a1: b1:e8:27:64:24:24:8c:05:0e:6a:30:ad:cf:e8:aa:d4:24:d5: 4c:14:a0:13:87:28:12:d1:bc:57:db:08:e0:7b:47:88:f9:b6: d9:00:70:f5:88:0c:97:0b:ba:aa:fa:cc:d1:a9:df:36:e8:ea: 10:0f:af:ef:7a:46:dd:9f:f0:74:72:ca:da:be:4a:cb:76:7e: b3:c3:05:4d:df:f2:4e:e3:25:66:3e:1c:db:09:91:7c:78:26: ee:ae:35:c5:c6:f5:a7:51:9f:48:e2:bd:55:0f:44:bd:18:bf: f6:5c:ad:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2GZKMB9xwRcjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Nzk0YTk0MGQtMWI4MC00MmE3LWI4MjMtZTZmNTUyOWE3ODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PTwQ816LcWW1vbhspN5PyfR2HwgOofT77So gnTb9EYijXUkwD7RsrhIBGStP8QKlLsTtd1BDzV91UXm8I1inkMtPGErDwE+HMYc IlO7gUOZRyCXBBhCkISptuvppkkUL7ds9RlMPf3dFe6iZMYq6lbCYSLsu07ccwol tOp1nqlelchC0d+Dq+STflHv9K7z1KhkHhWNVCsn8rieO2gLJBXdH9YVsMv8ivlx h9YQuTfRL2dhIgQlcbbcGEVzLgt/JKNpITDt2rK8XpXuvl/dpMWZyajvlVQZh1Ko iGASFLS3UStZelSDBzmFt8/+Cs2Ce2NR/SUPmS2x3WNDVd6LIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6wNoOIdFtYOVf+Ml+zA0n3LvAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFhYzBhODktYzY5Mi0z M2FkLWI0MzktMzIwZTEyYjE5ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgJ+kbIN/6nLtdKuLJbBD1nctSmkDscwNKBTeHXLTqJi1SKO7gPf3Cr 7+8fkwVmygObxnxfrzSXYNud8yDdSEABBc0i3qj2/C+mg+qLJWQnmEf+cjAwDWns PL6Zt0++eEi96xsGbJb732GKxK693afDQAXmEhSE2nMFL1OBN8/twORZX0DkrHyB 6xvEZ8rbobHoJ2QkJIwFDmowrc/oqtQk1UwUoBOHKBLRvFfbCOB7R4j5ttkAcPWI DJcLuqr6zNGp3zbo6hAPr+96Rt2f8HRyytq+Sst2frPDBU3f8k7jJWY+HNsJkXx4 Ju6uNcXG9adRn0jivVUPRL0Yv/ZcreM= -----END CERTIFICATE-----Generated at Mon Apr 28 06:45:55 2025 by rpki-client