$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa File: 1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa (raw, json) Hash identifier: XfQpSsgd2DHNNWaNoAfkTpRa8MT2op6c73KRmWKSmac= Subject key identifier: 1F:E7:52:E4:0C:54:F7:DF:C3:96:2E:93:37:B9:78:9D:80:0C:53:9B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB769F222AFAB183E95600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 209.85.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:76:9f:22:2a:fa:b1:83:e9:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=315f05e6-5cd1-4784-9b3d-656aa754adf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:08:e1:47:31:10:3d:a7:a0:08:1d:15:ae:ca: 98:25:16:8a:ba:28:16:f0:b7:1c:c7:b6:51:11:aa: 9d:c8:8d:0f:28:fe:25:2a:e8:94:22:c3:5b:37:5d: 12:b4:78:b5:30:a9:7a:41:63:c8:e3:3a:90:46:81: 6d:8b:a9:46:cf:57:2a:f5:ae:9c:69:4d:42:2d:ea: 4f:72:2d:f4:1a:a9:97:6b:9f:8b:28:ee:78:1e:f4: 6e:6c:17:45:f8:fa:64:5a:0f:89:3f:16:a3:df:cc: fb:3b:ca:d4:ff:1d:98:a6:c1:e4:68:19:b9:f3:71: e8:1b:39:cf:0e:25:a1:44:ea:a4:0f:25:21:66:63: aa:66:b2:58:49:ec:97:59:73:18:7d:40:c9:a7:f1: b4:15:df:9e:2d:8d:02:82:45:e2:f3:f5:72:87:f5: 7e:44:58:68:5a:ee:af:d3:f6:f8:e3:4f:e8:f5:9e: 29:71:24:a6:f7:5f:57:e7:56:1d:13:40:e8:65:c4: b4:ae:2c:35:0f:82:19:62:c9:b2:08:fb:04:3d:55: b5:8d:87:e7:b8:13:5d:cc:45:26:24:a2:4c:e5:ee: ed:ea:c7:65:1f:82:38:1f:15:e9:6d:db:da:0d:c8: e9:7d:51:c9:69:b9:72:c4:71:79:08:cc:75:a8:f2: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E7:52:E4:0C:54:F7:DF:C3:96:2E:93:37:B9:78:9D:80:0C:53:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:3a:a3:cc:be:af:fb:16:29:28:d7:c9:c4:da:ba:dd:6c:04: 6f:68:d7:f2:f3:a7:7c:27:5f:d5:ec:ba:dc:71:12:43:9f:0c: 88:72:1b:b6:b7:99:95:6a:c1:12:14:98:75:5c:6a:b0:56:bb: ef:89:89:e2:83:cf:9c:de:12:3b:dd:66:bd:5b:70:8b:3a:ad: 66:12:a4:ad:60:bf:7e:e1:e9:57:02:20:ea:57:1f:04:a7:83: 04:5d:b2:a0:2e:f1:b0:da:fa:06:93:76:f2:58:f1:01:56:a0: 61:6b:d7:fa:e7:18:6e:d1:da:bb:ad:2f:7d:6d:27:ef:2b:87: d2:14:a3:07:a7:d8:e0:4c:3e:6d:bb:77:3f:2c:23:c3:7e:bc: 37:6f:6f:27:89:0d:90:b2:59:9c:18:fe:c6:08:5b:cc:31:9b: 02:df:c5:0e:f3:bb:3e:ee:1c:b8:07:97:c0:19:23:07:53:78: c7:48:f2:94:f4:b1:bc:bf:46:e2:35:49:90:30:0b:a4:6a:b3: 14:78:2d:9b:1b:ce:1a:7e:3b:5c:80:f4:ad:dc:01:ca:ba:c3: 7d:7c:ed:f7:4f:84:eb:9c:cf:ae:20:ea:8b:2a:04:14:16:76: 96:9c:e1:de:d1:7a:16:16:44:10:a3:4d:6c:36:9a:ca:8a:33: 30:5b:f1:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3afIir6sYPpVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzE1ZjA1ZTYtNWNkMS00Nzg0LTliM2QtNjU2YWE3NTRhZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwjhRzEQPaegCB0VrsqYJRaKuigW8Lccx7ZR EaqdyI0PKP4lKuiUIsNbN10StHi1MKl6QWPI4zqQRoFti6lGz1cq9a6caU1CLepP ci30GqmXa5+LKO54HvRubBdF+PpkWg+JPxaj38z7O8rU/x2YpsHkaBm583HoGznP DiWhROqkDyUhZmOqZrJYSeyXWXMYfUDJp/G0Fd+eLY0CgkXi8/Vyh/V+RFhoWu6v 0/b440/o9Z4pcSSm919X51YdE0DoZcS0riw1D4IZYsmyCPsEPVW1jYfnuBNdzEUm JKJM5e7t6sdlH4I4HxXpbdvaDcjpfVHJablyxHF5CMx1qPI22QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/nUuQMVPffw5Yukze5eJ2ADFObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTYzOGViNzYtN2YxMS0z ZWZlLTllMmItYTU2NjE2YjdlYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALI6o8y+r/sWKSjXycTaut1sBG9o1/Lzp3wnX9XsutxxEkOfDIhyG7a3 mZVqwRIUmHVcarBWu++JieKDz5zeEjvdZr1bcIs6rWYSpK1gv37h6VcCIOpXHwSn gwRdsqAu8bDa+gaTdvJY8QFWoGFr1/rnGG7R2rutL31tJ+8rh9IUowen2OBMPm27 dz8sI8N+vDdvbyeJDZCyWZwY/sYIW8wxmwLfxQ7zuz7uHLgHl8AZIwdTeMdI8pT0 sby/RuI1SZAwC6RqsxR4LZsbzhp+O1yA9K3cAcq6w3187fdPhOucz64g6osqBBQW dpac4d7RehYWRBCjTWw2msqKMzBb8XE= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:50 2025 by rpki-client