$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4981af08-7878-344a-892f-01ab6f8b7d9d.roa File: 4981af08-7878-344a-892f-01ab6f8b7d9d.roa (raw, json) Hash identifier: IuJsNkdnPhcPoOvTJgroGjSWgmIcvt9LdmEMps4pXEA= Subject key identifier: 43:2B:1A:47:3B:ED:36:E8:C5:11:D6:36:58:E8:81:AE:70:65:E9:83 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACC558AD4A515E6EEE180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4981af08-7878-344a-892f-01ab6f8b7d9d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cc:55:8a:d4:a5:15:e6:ee:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=46915de6-bac3-4280-9e87-b9f58a58905d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:99:ba:71:03:7e:34:0d:26:bc:1d:0c:18: 96:cc:fc:cb:2b:f0:0c:83:06:8a:60:6e:1c:35:b1: aa:cc:a1:f4:03:f6:0e:82:d3:e5:64:f6:36:e1:45: 02:ac:90:0d:0f:7e:10:bb:d5:c3:c8:bf:24:72:d3: 05:d7:28:b4:66:6a:74:15:df:6d:db:f2:a3:50:da: a8:92:e2:78:b3:ab:dd:35:c8:cc:23:dd:b9:55:30: 03:57:42:b3:e8:1e:40:19:a5:f1:ba:1a:00:fe:f6: 42:83:c3:ef:cc:8b:a8:bf:b9:e9:3e:87:5e:16:7a: f8:d8:d1:75:c6:22:de:88:eb:53:43:7b:fe:aa:48: b6:c2:64:03:d3:d7:0b:b7:94:3d:6c:b4:67:5f:66: 0b:ef:db:48:84:35:d0:71:fa:ee:52:af:29:15:17: 0b:a3:e3:c5:f7:f2:ab:84:25:f1:99:67:26:3a:3b: 4a:ad:b9:55:fd:95:df:ac:23:6f:9a:21:1a:88:e7: 45:0b:89:93:a8:32:51:ec:12:a8:f4:d6:9c:b5:ff: 73:eb:a2:f1:76:2c:2f:d3:4e:34:5b:cc:c8:34:37: b1:d0:b3:98:f6:a0:4b:08:6c:4f:fb:22:e0:db:9e: 45:9e:c3:96:9d:d6:d0:1c:b9:9b:7c:90:9f:ba:7e: f0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2B:1A:47:3B:ED:36:E8:C5:11:D6:36:58:E8:81:AE:70:65:E9:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4981af08-7878-344a-892f-01ab6f8b7d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b3:b6:4f:e8:95:61:70:78:8c:b8:40:27:aa:0e:70:59:0b: fe:c7:e0:c8:8a:20:98:34:06:b2:61:77:3e:0f:83:65:01:10: bd:54:e4:33:7c:63:ae:55:f9:2c:c6:7e:c8:99:c7:d3:92:58: ca:e1:8d:23:56:e1:fd:63:7d:92:4e:56:24:6f:9f:0b:3c:c8: d9:40:b6:8b:5f:24:2f:3f:51:68:ca:44:7d:bf:0b:7e:0a:9f: 1c:98:0e:d8:0d:60:97:74:bb:b2:a3:22:3e:1c:2a:0a:d2:7c: 86:3c:b0:b1:d5:cc:57:2c:2b:ca:a0:8a:c6:cc:cc:9b:5e:99: 23:55:2a:04:ae:03:5c:18:e2:87:dc:63:1c:31:6c:cf:b3:33: c6:7a:53:9d:4e:70:b9:77:b5:38:cc:db:e8:d1:ec:d8:9c:2a: 6b:c5:1b:68:56:77:60:3d:bd:d0:39:8e:76:86:ac:eb:bb:8b: bb:52:ab:e5:79:73:57:78:3a:2d:9c:2b:55:99:76:d4:f3:34: df:17:ed:8f:7a:b6:77:99:80:0b:ba:ce:7a:9b:83:ca:7d:84: e4:fe:65:0f:8e:5f:ed:03:bd:4c:2e:67:9a:51:96:05:81:0f: b9:8b:10:d7:3d:4c:d8:72:bb:13:a9:24:d2:89:22:ef:b9:c0: 4d:36:56:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusxVitSlFebu4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDY5MTVkZTYtYmFjMy00MjgwLTllODctYjlmNThhNTg5MDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWqZunEDfjQNJrwdDBiWzPzLK/AMgwaKYG4c NbGqzKH0A/YOgtPlZPY24UUCrJAND34Qu9XDyL8kctMF1yi0Zmp0Fd9t2/KjUNqo kuJ4s6vdNcjMI925VTADV0Kz6B5AGaXxuhoA/vZCg8PvzIuov7npPodeFnr42NF1 xiLeiOtTQ3v+qki2wmQD09cLt5Q9bLRnX2YL79tIhDXQcfruUq8pFRcLo+PF9/Kr hCXxmWcmOjtKrblV/ZXfrCNvmiEaiOdFC4mTqDJR7BKo9Nactf9z66Lxdiwv0040 W8zINDex0LOY9qBLCGxP+yLg255FnsOWndbQHLmbfJCfun7wUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMrGkc77TboxRHWNljoga5wZemDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDk4MWFmMDgtNzg3OC0z NDRhLTg5MmYtMDFhYjZmOGI3ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyztk/olWFweIy4QCeqDnBZC/7H4MiKIJg0BrJhdz4Pg2UBEL1U5DN8 Y65V+SzGfsiZx9OSWMrhjSNW4f1jfZJOViRvnws8yNlAtotfJC8/UWjKRH2/C34K nxyYDtgNYJd0u7KjIj4cKgrSfIY8sLHVzFcsK8qgisbMzJtemSNVKgSuA1wY4ofc YxwxbM+zM8Z6U51OcLl3tTjM2+jR7NicKmvFG2hWd2A9vdA5jnaGrOu7i7tSq+V5 c1d4Oi2cK1WZdtTzNN8X7Y96tneZgAu6znqbg8p9hOT+ZQ+OX+0DvUwuZ5pRlgWB D7mLENc9TNhyuxOpJNKJIu+5wE02Vro= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:06 2025 by rpki-client