$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4662bfca-3908-3276-98ae-86c4dc72e61f.roa File: 4662bfca-3908-3276-98ae-86c4dc72e61f.roa (raw, json) Hash identifier: DKiuK8JHOaDKcqys7fOIXQmR3S16BWa79lcWP10crtY= Subject key identifier: FF:07:93:DD:4A:4D:AB:3A:4B:7A:FE:4D:1A:95:9E:37:07:43:4C:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABDDE6CCC034178107560 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4662bfca-3908-3276-98ae-86c4dc72e61f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 209.85.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bd:de:6c:cc:03:41:78:10:75:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3a8562d5-b380-4ef7-adf0-1f76f57ed2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a2:9c:91:50:ae:5a:c8:05:e9:15:91:3f:41: d2:1c:73:49:d5:55:e1:64:bd:55:6d:f7:42:e1:fe: 79:b9:69:ca:da:9c:a2:61:8f:a8:ac:26:e7:8f:55: 8c:ab:95:0d:08:56:0a:c8:68:6a:32:ad:a9:95:e7: 07:05:71:5d:27:b0:3a:56:41:67:7a:48:0a:e2:e5: 60:8a:e1:9d:a1:b0:ab:e1:23:53:8c:1b:29:cf:15: 5a:e8:b4:21:97:23:fc:07:97:38:61:5a:a8:26:55: 2e:3a:22:c7:d8:5f:d2:4a:fe:37:ae:70:48:ef:14: b4:a3:0d:d1:94:fb:3e:44:0c:d5:b0:42:28:f0:33: 7e:ed:14:9d:64:bc:48:fe:7b:77:3c:92:d4:0d:26: bd:90:09:ac:71:22:45:7d:d1:99:b7:cf:b6:d4:f4: 1c:d9:89:76:d5:69:ab:4b:8d:7a:2c:4f:c2:0b:b8: f6:56:83:ca:bb:14:3e:d5:c1:d0:36:2b:9a:19:8f: ec:bb:04:75:b4:24:75:01:87:cb:e4:3f:41:03:0a: 6f:b7:4b:c0:7e:09:9b:d5:11:ba:6d:01:74:f3:0a: 21:ea:e2:01:48:10:b7:f8:e1:d1:4a:c7:ec:4e:14: 8e:52:0a:1c:f1:06:1e:fd:43:d4:9b:9c:b7:ab:6d: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:07:93:DD:4A:4D:AB:3A:4B:7A:FE:4D:1A:95:9E:37:07:43:4C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4662bfca-3908-3276-98ae-86c4dc72e61f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ca:7e:99:9c:bb:5c:65:39:1e:9e:0c:68:b5:21:73:6b:82: 9e:39:2c:b9:c3:81:3c:84:92:d6:88:ee:ac:1a:ff:3e:3d:dc: b4:6d:5b:fa:1a:e4:47:68:f6:c6:5f:16:e2:6d:6e:c5:30:36: aa:c9:57:ab:e5:5d:fe:97:5f:ef:9d:b7:8e:51:68:d2:fd:40: 93:e8:f2:78:84:82:1f:ad:08:e8:3b:fe:01:c0:3c:59:4d:15: a9:35:10:38:f0:20:06:e2:b8:68:b0:1d:5c:19:33:f5:b7:0b: d1:bb:1f:61:48:48:35:48:11:b9:cc:f6:bd:cb:f4:94:e6:28: d3:2d:43:0a:49:13:56:c3:70:d7:e5:3f:57:bb:0e:37:b5:79: 9d:c6:d0:92:36:a3:25:34:ff:fd:cb:16:62:23:17:e5:62:5e: 0c:b7:9b:11:6b:f3:bc:ed:39:19:15:c0:1e:44:69:11:1e:6b: e2:f6:36:d9:46:9b:77:8d:86:f8:01:eb:bd:31:bd:4d:b8:f9: 46:22:01:e6:03:3b:3a:a1:31:6f:ce:c7:e1:8f:f8:4f:e4:47: ad:e7:cb:b3:18:37:9c:4a:5e:b2:a2:1a:50:7a:10:75:15:a6: 9d:cc:2d:e5:d1:f5:d6:74:f1:2a:03:c9:c8:a6:36:72:ce:44: 27:73:c4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkur3ebMwDQXgQdWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2E4NTYyZDUtYjM4MC00ZWY3LWFkZjAtMWY3NmY1N2VkMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KKckVCuWsgF6RWRP0HSHHNJ1VXhZL1VbfdC 4f55uWnK2pyiYY+orCbnj1WMq5UNCFYKyGhqMq2plecHBXFdJ7A6VkFnekgK4uVg iuGdobCr4SNTjBspzxVa6LQhlyP8B5c4YVqoJlUuOiLH2F/SSv43rnBI7xS0ow3R lPs+RAzVsEIo8DN+7RSdZLxI/nt3PJLUDSa9kAmscSJFfdGZt8+21PQc2Yl21Wmr S416LE/CC7j2VoPKuxQ+1cHQNiuaGY/suwR1tCR1AYfL5D9BAwpvt0vAfgmb1RG6 bQF08woh6uIBSBC3+OHRSsfsThSOUgoc8QYe/UPUm5y3q23rWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8Hk91KTas6S3r+TRqVnjcHQ0wpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDY2MmJmY2EtMzkwOC0z Mjc2LTk4YWUtODZjNGRjNzJlNjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfKfpmcu1xlOR6eDGi1IXNrgp45LLnDgTyEktaI7qwa/z493LRtW/oa 5Edo9sZfFuJtbsUwNqrJV6vlXf6XX++dt45RaNL9QJPo8niEgh+tCOg7/gHAPFlN Fak1EDjwIAbiuGiwHVwZM/W3C9G7H2FISDVIEbnM9r3L9JTmKNMtQwpJE1bDcNfl P1e7Dje1eZ3G0JI2oyU0//3LFmIjF+ViXgy3mxFr87ztORkVwB5EaREea+L2NtlG m3eNhvgB670xvU24+UYiAeYDOzqhMW/Ox+GP+E/kR63ny7MYN5xKXrKiGlB6EHUV pp3MLeXR9dZ08SoDycimNnLORCdzxJc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:57:03 2025 by rpki-client