$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa File: 0ae0857b-014b-3e54-a84d-e870cfb7a555.roa (raw, json) Hash identifier: aAYZogPpqwHGvMMwXMoxM6UhQergF2zuB/3g5ijo0Fo= Subject key identifier: 85:D7:1B:E4:6D:89:86:E7:DF:E2:73:4D:44:E3:E2:D6:21:38:B4:A8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABDC7AD1CA26F546CBEC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bd:c7:ad:1c:a2:6f:54:6c:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c61e04a6-ab2a-4c8b-80c5-3b45d9351672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3a:e9:d5:24:dc:88:ae:9b:84:c9:df:20:95: 61:e0:a5:70:dd:50:2f:63:98:13:4e:08:58:6d:16: 77:ec:a7:04:52:a6:30:98:b9:89:a9:00:35:cc:1c: 56:3f:2d:a9:4c:91:a8:be:30:b5:39:39:e9:04:b2: 0a:dc:69:0e:e9:52:ca:e0:3a:c8:97:3f:cd:1f:e2: d8:a0:df:e6:45:65:dc:65:3a:67:cc:71:c3:13:3c: 96:f6:83:84:ca:6a:11:a2:08:6d:ee:b7:65:00:40: b7:bf:9a:73:9c:0f:39:7f:fe:5f:3c:ab:e3:85:e8: 80:cf:b4:86:7a:e7:bc:fd:64:f9:60:f3:11:bf:32: fe:47:f2:c1:b5:6c:c5:0f:ae:fe:46:ad:c8:8b:dc: d1:73:e8:96:8b:84:e8:d5:f2:63:ea:e4:e4:68:a6: 18:e4:5c:5f:1f:63:bf:47:2c:20:71:a2:bf:f1:5d: 4a:d4:91:8c:67:50:85:38:6e:08:02:6c:59:d2:76: 50:58:5b:f8:7e:d4:1a:12:c6:2c:29:a7:59:e1:93: 98:68:e9:6a:a7:c9:b1:d9:eb:2b:d9:98:dd:35:8b: d0:e5:fb:77:7e:61:f4:45:01:89:78:01:e3:3e:34: 92:b3:d1:a8:ac:fe:88:c4:7c:aa:a2:a9:ca:0d:b9: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D7:1B:E4:6D:89:86:E7:DF:E2:73:4D:44:E3:E2:D6:21:38:B4:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4b:0d:a6:a1:2d:3d:80:c3:ba:1f:f5:46:fc:b8:69:61:17: 87:d1:5f:d0:fc:47:6a:f2:0a:ef:01:2f:25:d9:9d:42:39:0d: ff:ae:b4:b5:32:ac:1e:71:67:16:13:24:cd:0d:ee:42:cb:71: 77:74:b0:11:bf:50:53:7e:c3:9d:d6:07:b6:05:84:c0:69:e4: b2:08:0f:52:13:51:6f:7d:c5:18:1c:9c:74:18:9c:35:ed:f6: 45:85:bd:dd:a5:a9:7a:c3:a9:95:b4:14:0c:ce:b1:70:e2:47: d5:7e:b2:40:fd:5a:ac:63:84:9c:6d:36:1c:a0:2a:6c:d6:f9: 70:69:dc:1f:43:41:d8:2a:83:5e:69:e3:ab:6f:80:35:81:49: ce:c5:89:15:8c:eb:ff:87:6b:38:e5:54:48:13:f2:12:68:e7: e3:0f:38:2e:ff:33:18:be:db:e2:55:fc:e8:ab:66:13:3f:3a: 76:c2:dd:94:e2:15:2e:b5:55:9b:9d:d5:50:f5:c0:1c:22:92: 8e:14:3e:11:9e:22:65:75:60:33:b3:7b:33:8d:ce:b9:c6:3b: 2c:ad:84:d7:29:26:8e:b7:54:12:9c:eb:30:c3:0b:3e:e5:d0: b3:d0:b4:a5:a1:28:e5:44:42:9d:03:f4:06:5c:21:ed:5a:cc: e2:d8:a3:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkur3HrRyib1RsvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzYxZTA0YTYtYWIyYS00YzhiLTgwYzUtM2I0NWQ5MzUxNjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjrp1STciK6bhMnfIJVh4KVw3VAvY5gTTghY bRZ37KcEUqYwmLmJqQA1zBxWPy2pTJGovjC1OTnpBLIK3GkO6VLK4DrIlz/NH+LY oN/mRWXcZTpnzHHDEzyW9oOEymoRoght7rdlAEC3v5pznA85f/5fPKvjheiAz7SG eue8/WT5YPMRvzL+R/LBtWzFD67+Rq3Ii9zRc+iWi4To1fJj6uTkaKYY5FxfH2O/ RywgcaK/8V1K1JGMZ1CFOG4IAmxZ0nZQWFv4ftQaEsYsKadZ4ZOYaOlqp8mx2esr 2ZjdNYvQ5ft3fmH0RQGJeAHjPjSSs9GorP6IxHyqoqnKDbktwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXXG+RtiYbn3+JzTUTj4tYhOLSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFlMDg1N2ItMDE0Yi0z ZTU0LWE4NGQtZTg3MGNmYjdhNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9LDaahLT2Aw7of9Ub8uGlhF4fRX9D8R2ryCu8BLyXZnUI5Df+utLUy rB5xZxYTJM0N7kLLcXd0sBG/UFN+w53WB7YFhMBp5LIID1ITUW99xRgcnHQYnDXt 9kWFvd2lqXrDqZW0FAzOsXDiR9V+skD9WqxjhJxtNhygKmzW+XBp3B9DQdgqg15p 46tvgDWBSc7FiRWM6/+HazjlVEgT8hJo5+MPOC7/Mxi+2+JV/OirZhM/OnbC3ZTi FS61VZud1VD1wBwiko4UPhGeImV1YDOzezONzrnGOyythNcpJo63VBKc6zDDCz7l 0LPQtKWhKOVEQp0D9AZcIe1azOLYo2I= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:47 2025 by rpki-client