$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa File: 6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa (raw, json) Hash identifier: LZtCUnrgTUgRl1q0WkE4pEZ33P8OA0/Nqyru6hsahvM= Subject key identifier: 8B:B3:73:87:30:99:4D:AC:BB:F6:3C:14:7B:E9:DA:0B:98:F2:8D:04 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD06431EA75D2CCB8B240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d0:64:31:ea:75:d2:cc:b8:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0d648cc4-f336-48c9-9968-d9a7732389cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a3:53:cb:0d:9d:23:d7:64:b8:29:69:c5:11: ef:2e:8f:3e:1a:d5:83:a5:b1:0d:6b:bb:76:13:5f: de:02:1e:e0:d6:92:f8:73:01:80:80:99:4a:b8:50: a6:fe:31:a2:a9:8c:6e:f7:a4:13:84:d1:1b:ec:dc: 62:3e:18:16:2c:63:8c:69:f7:73:07:ab:15:a1:20: 6a:84:97:bd:d9:54:19:42:51:58:e8:f3:0f:94:34: 06:9a:18:0c:e7:72:e8:ff:46:c0:94:b6:0a:fa:19: bd:91:d8:42:d2:fa:88:0c:1c:96:15:ad:1b:d3:30: a5:8c:82:27:c7:bf:13:7b:52:7b:41:e9:09:98:16: 77:17:fc:af:73:39:df:3c:6c:e0:b2:40:78:6b:af: 55:8c:41:cc:7b:a8:95:89:92:2d:6a:02:63:ae:b4: 76:89:23:a7:9a:32:c1:5e:00:92:f6:13:6c:5f:89: 3c:29:ac:a7:dc:49:d1:d3:72:98:e3:c3:b4:ff:0e: 0a:f7:5f:4e:64:d5:60:09:ff:b3:23:2a:d2:c4:76: af:f9:05:11:45:b6:91:2a:76:f8:4c:c2:6a:ff:8d: 1f:21:ca:85:34:5e:d4:88:89:9e:10:83:d3:8e:20: 00:79:6b:9b:13:19:e8:9c:b7:85:43:5e:65:ef:cb: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B3:73:87:30:99:4D:AC:BB:F6:3C:14:7B:E9:DA:0B:98:F2:8D:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:5a:44:98:13:7c:9e:1d:5b:64:34:04:86:0f:54:d1:ff:91: 64:a7:82:36:5c:34:43:47:d7:e8:8c:da:fa:82:a6:6c:51:38: 0a:c8:fe:6d:fb:65:b8:99:6e:8b:bc:2f:fb:de:97:59:98:9b: 70:9d:8a:f1:2c:fe:1b:3b:90:27:03:5c:63:3c:bd:be:5f:8b: f9:1b:fa:a0:b5:43:03:f5:16:f8:28:c9:0b:39:03:e1:b9:f7: 15:0c:cc:8d:28:c3:59:6b:88:e3:7a:4f:cf:3d:4e:c0:ed:9e: d4:e1:68:4d:f2:50:ee:9f:a0:40:96:67:9b:79:0a:8b:61:c3: cd:cd:05:e2:69:4b:f4:b6:1f:1a:b0:5e:8d:f7:a4:a6:de:dc: 29:8a:e6:42:7a:91:04:f9:51:80:98:8e:d7:6c:f4:2b:fb:90: 84:af:8d:bc:91:a7:87:f9:64:be:55:2e:8b:88:1f:9d:5b:55: 68:aa:c3:d2:e2:85:82:d6:c4:55:2d:c3:1f:1c:b0:ca:64:f3: c1:1d:93:24:29:20:e8:45:d1:08:3e:4a:bc:4c:b7:b4:0e:87: 55:2e:2b:a6:bb:4b:38:17:44:fb:78:98:65:9e:e6:1e:28:78: 25:3c:86:55:8b:33:76:3a:65:23:d9:d7:38:a3:d5:c2:e3:d6: d8:35:9b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutBkMep10sy4skAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGQ2NDhjYzQtZjMzNi00OGM5LTk5NjgtZDlhNzczMjM4OWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqNTyw2dI9dkuClpxRHvLo8+GtWDpbENa7t2 E1/eAh7g1pL4cwGAgJlKuFCm/jGiqYxu96QThNEb7NxiPhgWLGOMafdzB6sVoSBq hJe92VQZQlFY6PMPlDQGmhgM53Lo/0bAlLYK+hm9kdhC0vqIDByWFa0b0zCljIIn x78Te1J7QekJmBZ3F/yvcznfPGzgskB4a69VjEHMe6iViZItagJjrrR2iSOnmjLB XgCS9hNsX4k8Kayn3EnR03KY48O0/w4K919OZNVgCf+zIyrSxHav+QURRbaRKnb4 TMJq/40fIcqFNF7UiImeEIPTjiAAeWubExnonLeFQ15l78uLowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuzc4cwmU2su/Y8FHvp2guY8o0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjY4NmY1MTItYTY1Zi0z NWM4LTg3YWYtNGQyNmU2YjFjY2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZaRJgTfJ4dW2Q0BIYPVNH/kWSngjZcNENH1+iM2vqCpmxROArI/m37 ZbiZbou8L/vel1mYm3CdivEs/hs7kCcDXGM8vb5fi/kb+qC1QwP1FvgoyQs5A+G5 9xUMzI0ow1lriON6T889TsDtntThaE3yUO6foECWZ5t5Cothw83NBeJpS/S2Hxqw Xo33pKbe3CmK5kJ6kQT5UYCYjtds9Cv7kISvjbyRp4f5ZL5VLouIH51bVWiqw9Li hYLWxFUtwx8csMpk88EdkyQpIOhF0Qg+SrxMt7QOh1UuK6a7SzgXRPt4mGWe5h4o eCU8hlWLM3Y6ZSPZ1zij1cLj1tg1m6c= -----END CERTIFICATE-----Generated at Sat Apr 26 20:54:34 2025 by rpki-client