$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa File: 2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa (raw, json) Hash identifier: 8HIwoYMb/FyAsP5D3xCKTwjPGizgbIgR3ZuU6aB0H+Q= Subject key identifier: 94:5D:D8:A6:65:44:F2:2C:D5:20:9F:93:01:AE:96:0B:36:26:3F:E5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB64B7A8708F3941B8A1A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:64:b7:a8:70:8f:39:41:b8:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4676508b-b8cd-4122-82f5-55a118b4ba4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:a8:ed:16:12:c9:34:df:3e:c7:87:8a:18: 2d:c5:49:6b:10:d4:67:70:77:9c:6a:9b:64:f3:04: eb:a5:8a:a3:6b:54:39:a3:eb:dc:d6:1c:b2:c3:6a: 7e:2d:04:f2:6c:1b:e1:1a:31:9f:99:10:14:00:7c: 97:92:b0:f3:1c:2d:5a:d1:77:0c:e1:1f:df:10:de: 0c:8d:af:f9:1c:0c:38:f6:20:ad:61:f0:15:91:e9: 11:fd:6c:a8:fc:81:ad:19:4c:c9:73:73:44:18:9d: 3b:18:c9:5e:e8:4b:3c:f6:5a:20:3e:e8:d1:b5:a9: b7:02:e1:04:13:4d:c7:71:79:e7:18:be:83:92:2a: e4:98:99:4d:f5:73:c2:88:14:a0:f0:e3:eb:00:96: 42:95:a1:d5:73:0a:0b:f6:ef:2e:ee:5a:e7:70:a5: 8e:59:de:9f:0f:c1:01:cd:a5:fb:34:d0:d9:0c:7c: 01:87:00:86:a9:ed:6f:85:2e:c7:94:91:eb:0f:9a: 1c:5a:5a:60:95:ef:16:e8:7c:34:26:c1:a5:cf:43: 2d:d5:75:3c:90:2c:9e:0d:f7:23:ac:b9:b2:b8:3f: 0e:27:81:3d:f1:f6:b0:65:3e:68:71:79:c5:ad:ee: b2:51:bc:de:6a:9e:b6:01:d8:5a:16:24:4c:83:58: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5D:D8:A6:65:44:F2:2C:D5:20:9F:93:01:AE:96:0B:36:26:3F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a9:c4:5f:8c:e4:a5:b1:84:fb:5f:13:bd:fb:75:56:08:10: 16:d8:db:3b:00:a7:15:8e:d1:8e:0e:aa:8e:24:0e:c6:a6:d1: 30:c7:d4:4c:a8:6b:65:ad:18:2c:bd:fd:4e:b2:ef:0e:3c:68: 0b:26:f2:2a:12:ee:91:48:a3:89:d2:40:89:8f:99:8a:7b:ab: f6:b2:3c:d5:a0:1d:81:81:02:05:6d:b1:66:8b:bd:4e:73:f1: c3:49:4e:d1:92:d2:cc:19:87:ca:dc:a6:15:a5:bf:f7:e0:78: ab:f9:cb:a5:3e:e3:d2:11:23:4a:e3:a1:1a:ba:85:bb:20:49: af:62:0e:09:26:a0:8b:07:49:2e:97:a1:4f:5c:5c:3e:10:0c: 78:2c:cc:37:bd:62:86:b7:5e:c9:b5:44:cb:ce:9c:dd:b1:6b: f5:29:bd:25:96:4b:4a:ad:e0:3e:04:e7:ee:e9:d6:ed:79:22: 4f:b5:3f:05:59:94:69:b9:35:12:cd:88:aa:6f:c7:c0:03:82: a6:b8:d5:b5:be:82:08:22:6b:5d:60:e0:ba:6e:05:db:31:b7: f0:9e:7c:36:e9:e2:1e:8f:97:1b:d7:28:d1:13:a4:81:0c:aa: c4:09:96:c9:68:7d:86:e1:91:c4:56:0a:26:c9:a6:34:f8:2b: 23:c6:b7:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2S3qHCPOUG4oaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDY3NjUwOGItYjhjZC00MTIyLTgyZjUtNTVhMTE4YjRiYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1So7RYSyTTfPseHihgtxUlrENRncHecaptk 8wTrpYqja1Q5o+vc1hyyw2p+LQTybBvhGjGfmRAUAHyXkrDzHC1a0XcM4R/fEN4M ja/5HAw49iCtYfAVkekR/Wyo/IGtGUzJc3NEGJ07GMle6Es89logPujRtam3AuEE E03HcXnnGL6DkirkmJlN9XPCiBSg8OPrAJZClaHVcwoL9u8u7lrncKWOWd6fD8EB zaX7NNDZDHwBhwCGqe1vhS7HlJHrD5ocWlpgle8W6Hw0JsGlz0Mt1XU8kCyeDfcj rLmyuD8OJ4E98fawZT5ocXnFre6yUbzeap62AdhaFiRMg1ictwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRd2KZlRPIs1SCfkwGulgs2Jj/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg5MmQ1ZTItZDhiMy0z ZWI4LWFiODEtOTcyMDQ2ZmQyOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+pxF+M5KWxhPtfE737dVYIEBbY2zsApxWO0Y4Oqo4kDsam0TDH1Eyo a2WtGCy9/U6y7w48aAsm8ioS7pFIo4nSQImPmYp7q/ayPNWgHYGBAgVtsWaLvU5z 8cNJTtGS0swZh8rcphWlv/fgeKv5y6U+49IRI0rjoRq6hbsgSa9iDgkmoIsHSS6X oU9cXD4QDHgszDe9Yoa3Xsm1RMvOnN2xa/UpvSWWS0qt4D4E5+7p1u15Ik+1PwVZ lGm5NRLNiKpvx8ADgqa41bW+gggia11g4LpuBdsxt/CefDbp4h6PlxvXKNETpIEM qsQJlslofYbhkcRWCibJpjT4KyPGtzM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:51:42 2025 by rpki-client