$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/580b9816-8c67-31a2-89f3-fe77a1cc383f.roa File: 580b9816-8c67-31a2-89f3-fe77a1cc383f.roa (raw, json) Hash identifier: Gg2PduV0TAQxM+MLo7VGhI9tK1MRdzCSY1E4YEpRKIA= Subject key identifier: 67:FD:71:09:9A:81:5F:2D:2B:B9:9F:18:D2:22:1D:DE:1E:AB:8F:9B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAB8ECA57409C1F8A8E800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/580b9816-8c67-31a2-89f3-fe77a1cc383f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b8:ec:a5:74:09:c1:f8:a8:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b231b2fa-d68e-4e75-a8e4-6db0def18432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:52:d9:23:3c:51:57:b1:bd:ea:de:ff:8d: 52:b1:18:63:8b:33:28:b4:24:c6:26:a8:63:6b:98: cc:0b:c6:de:f9:c9:17:5d:87:b6:e6:cd:d6:96:b1: 78:e7:7c:ce:a7:f4:42:58:44:0f:84:60:d1:6e:74: 8c:02:2b:75:1c:c4:03:79:5a:7e:ed:1a:f3:60:48: 80:a4:b1:0b:aa:7f:db:25:bf:80:d6:9c:c8:53:38: c6:a8:c4:9b:f0:95:f9:b5:b8:cf:f5:1e:0e:1d:95: a1:e5:d2:cd:88:bf:79:e5:17:44:a1:56:8b:a6:18: 4c:8e:25:2e:46:a8:bc:08:77:e3:8c:bc:ea:10:19: 7f:2a:85:36:ac:ab:58:3f:3e:a1:7f:1a:20:6c:26: 32:bf:03:35:e0:82:a5:11:37:b2:76:77:fe:88:af: f0:7f:4e:ed:68:3f:39:e3:57:9d:68:18:e2:5e:9b: b1:ef:bd:49:11:59:95:83:17:3a:a9:55:c9:67:07: 9b:87:b1:85:95:02:a9:60:bc:73:66:e2:33:85:95: 1d:d8:cc:1e:d0:b5:be:21:39:d8:e2:ab:18:3a:fc: c4:fb:93:c8:78:7a:ec:3f:b5:12:2a:cf:0e:1e:7f: f1:ff:f3:52:a6:7b:ec:5e:36:1b:0e:3c:e4:2e:26: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FD:71:09:9A:81:5F:2D:2B:B9:9F:18:D2:22:1D:DE:1E:AB:8F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/580b9816-8c67-31a2-89f3-fe77a1cc383f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:b8:a4:24:13:2c:13:66:4b:73:ef:22:be:69:45:23:4e:91: 16:29:03:c5:34:41:df:77:73:ad:c8:8d:5f:a7:84:71:cc:96: 5d:21:47:61:a2:72:c7:ae:63:16:64:87:bc:54:8c:25:df:02: 5d:4f:8d:e3:f3:bf:5b:fc:bc:65:8c:aa:59:1a:a5:5f:de:bc: 2b:36:37:37:40:61:35:77:26:65:41:08:3e:59:f1:c3:c6:e2: 03:3b:90:6b:06:c3:56:fa:97:1a:08:ad:b1:9a:64:c3:c9:e3: 8e:ba:fb:ce:32:06:e5:b1:85:53:ed:1a:42:40:b6:25:7b:4f: 4c:a2:c4:6d:20:8d:69:ca:6f:60:05:69:da:90:6c:ff:31:2f: e3:98:31:43:de:e9:28:96:83:05:51:93:b8:bf:7b:bc:03:d7: 44:b3:63:a0:c8:e2:06:b8:5a:45:db:63:7d:ba:4a:17:4b:94: 4e:9d:14:9c:1f:31:30:0b:66:1f:21:fe:50:ff:56:6e:a9:36: 81:d3:bb:59:98:44:2c:7d:cb:7e:30:14:a5:19:d9:38:ca:e9: c3:5c:06:2a:8e:04:53:d7:46:56:5b:d9:82:83:3e:e2:1c:04: 1e:b8:61:a5:10:63:a1:67:79:4c:24:79:24:3a:b6:d4:b8:55: 0c:52:69:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurjspXQJwfio6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjIzMWIyZmEtZDY4ZS00ZTc1LWE4ZTQtNmRiMGRlZjE4NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOBS2SM8UVexvere/41SsRhjizMotCTGJqhj a5jMC8be+ckXXYe25s3WlrF453zOp/RCWEQPhGDRbnSMAit1HMQDeVp+7RrzYEiA pLELqn/bJb+A1pzIUzjGqMSb8JX5tbjP9R4OHZWh5dLNiL955RdEoVaLphhMjiUu Rqi8CHfjjLzqEBl/KoU2rKtYPz6hfxogbCYyvwM14IKlETeydnf+iK/wf07taD85 41edaBjiXpux771JEVmVgxc6qVXJZwebh7GFlQKpYLxzZuIzhZUd2Mwe0LW+ITnY 4qsYOvzE+5PIeHrsP7USKs8OHn/x//NSpnvsXjYbDjzkLiZqKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf9cQmagV8tK7mfGNIiHd4eq4+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTgwYjk4MTYtOGM2Ny0z MWEyLTg5ZjMtZmU3N2ExY2MzODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALG4pCQTLBNmS3PvIr5pRSNOkRYpA8U0Qd93c63IjV+nhHHMll0hR2Gi cseuYxZkh7xUjCXfAl1PjePzv1v8vGWMqlkapV/evCs2NzdAYTV3JmVBCD5Z8cPG 4gM7kGsGw1b6lxoIrbGaZMPJ4466+84yBuWxhVPtGkJAtiV7T0yixG0gjWnKb2AF adqQbP8xL+OYMUPe6SiWgwVRk7i/e7wD10SzY6DI4ga4WkXbY326ShdLlE6dFJwf MTALZh8h/lD/Vm6pNoHTu1mYRCx9y34wFKUZ2TjK6cNcBiqOBFPXRlZb2YKDPuIc BB64YaUQY6FneUwkeSQ6ttS4VQxSaZo= -----END CERTIFICATE-----Generated at Sun Apr 27 03:00:41 2025 by rpki-client