$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa File: 23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa (raw, json) Hash identifier: A3TWP5VBAkurUa3wp24uT2no34ROTtlpCcdKyL+pc4A= Subject key identifier: DD:FD:D3:B2:72:CA:68:E5:C1:50:06:9D:DC:2B:2A:4E:F2:76:82:8B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB75E0DA72085EBBA42BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:75:e0:da:72:08:5e:bb:a4:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d3ecc2f7-c5dc-4397-8685-b0317765be3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:95:95:a5:10:6e:9a:7b:49:0b:c9:a9:29: 6a:a7:90:6f:00:14:ec:70:ca:3e:f2:da:37:e1:fb: 1f:fd:64:47:67:aa:35:87:91:59:b6:d6:a0:3c:5d: 2f:46:90:89:a9:b8:8a:9a:ec:ba:41:8c:97:a4:d7: 99:94:3f:03:61:13:5e:fb:9a:ea:89:bf:32:7d:98: af:71:a1:e5:c5:1b:98:fc:b4:7d:62:4c:bd:ae:c1: ad:74:e5:33:17:9f:35:68:87:88:26:b2:26:58:41: 09:58:b4:bf:2b:7d:57:aa:dc:14:eb:0a:fe:3d:f8: 30:07:55:03:fd:0a:46:fe:67:2d:61:87:a2:92:2a: 09:8d:6c:38:bd:16:6e:0d:d8:f3:dc:b6:2d:ee:cd: 2e:cd:1f:82:a5:de:21:54:93:a9:4c:24:e5:63:27: 1e:c2:fd:17:f9:f8:ac:91:70:9a:13:e9:8b:ad:35: 10:b8:01:8b:59:d6:a3:d0:c5:55:36:ae:ba:d6:b8: 88:f0:aa:79:be:9f:7f:91:45:05:e5:09:a2:da:1b: 67:52:49:b7:96:6d:62:59:e8:6d:2f:1f:4b:64:cf: e5:ee:fd:d7:8a:d7:69:e9:d6:8c:af:a7:be:ff:e9: f5:0c:45:59:77:d0:68:df:3d:55:c7:16:0b:d8:a7: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FD:D3:B2:72:CA:68:E5:C1:50:06:9D:DC:2B:2A:4E:F2:76:82:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:49:70:81:54:44:aa:09:83:b1:68:69:3b:c3:28:ee:5c:16: 01:0d:89:61:03:e9:b9:d0:0e:3c:9a:25:df:ff:87:57:92:fc: 26:d6:1b:bc:25:9d:2c:96:ce:0c:99:dd:60:d4:6b:05:4b:89: 36:8d:b8:a4:e5:07:e2:1d:e0:5d:53:f0:74:18:02:07:72:8a: b6:05:ae:76:31:00:d7:ff:30:37:68:cf:0a:33:d3:4a:c9:2d: 2c:df:63:c0:6e:37:18:d7:22:a7:24:fa:66:d7:77:19:d1:7d: 25:dc:f2:6b:90:83:f0:ac:ae:8f:eb:c2:3c:fd:ec:eb:50:3f: 75:99:4b:b1:5e:0a:8e:b4:59:b0:b6:94:91:45:48:23:5a:4c: 13:bc:0d:28:84:32:a4:cd:60:a4:36:10:49:1a:90:b0:1e:8a: 9e:3a:98:a3:8d:62:28:5c:8f:04:39:42:09:c0:1a:1c:35:04: 1d:50:a3:e8:2f:ef:1e:02:43:00:d0:8c:e4:06:5c:fb:50:a4: 39:08:be:7b:8c:eb:40:b1:b0:b4:36:78:fc:ab:e5:65:d2:43: 2a:43:03:8d:8d:6c:ba:14:f0:04:c2:35:18:67:e1:f6:79:1b: d8:42:3d:94:42:dc:13:e1:dc:85:2a:e4:38:63:11:39:2c:0c: a8:b5:1b:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3Xg2nIIXrukK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDNlY2MyZjctYzVkYy00Mzk3LTg2ODUtYjAzMTc3NjViZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql2VlaUQbpp7SQvJqSlqp5BvABTscMo+8to3 4fsf/WRHZ6o1h5FZttagPF0vRpCJqbiKmuy6QYyXpNeZlD8DYRNe+5rqib8yfZiv caHlxRuY/LR9Yky9rsGtdOUzF581aIeIJrImWEEJWLS/K31XqtwU6wr+PfgwB1UD /QpG/mctYYeikioJjWw4vRZuDdjz3LYt7s0uzR+Cpd4hVJOpTCTlYycewv0X+fis kXCaE+mLrTUQuAGLWdaj0MVVNq661riI8Kp5vp9/kUUF5Qmi2htnUkm3lm1iWeht Lx9LZM/l7v3Xitdp6daMr6e+/+n1DEVZd9Bo3z1VxxYL2KeCbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3907JyymjlwVAGndwrKk7ydoKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjNkNWZhNmEtMDViMi0z ZTdlLThlMTMtYTY2ZDM1MDQ2ZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlJcIFURKoJg7FoaTvDKO5cFgENiWED6bnQDjyaJd//h1eS/CbWG7wl nSyWzgyZ3WDUawVLiTaNuKTlB+Id4F1T8HQYAgdyirYFrnYxANf/MDdozwoz00rJ LSzfY8BuNxjXIqck+mbXdxnRfSXc8muQg/Csro/rwjz97OtQP3WZS7FeCo60WbC2 lJFFSCNaTBO8DSiEMqTNYKQ2EEkakLAeip46mKONYihcjwQ5QgnAGhw1BB1Qo+gv 7x4CQwDQjOQGXPtQpDkIvnuM60CxsLQ2ePyr5WXSQypDA42NbLoU8ATCNRhn4fZ5 G9hCPZRC3BPh3IUq5DhjETksDKi1G+4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:08 2025 by rpki-client