$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68dab11e-d192-3f30-83b6-9ea314f94268.roa File: 68dab11e-d192-3f30-83b6-9ea314f94268.roa (raw, json) Hash identifier: 2S6EVCmnKNXEyo1gn8if6Mc46ut1NYUtPWvHTnkTj3o= Subject key identifier: 8C:7A:8A:AC:B3:73:7F:C7:CE:D2:FB:FB:A5:6D:65:82:A8:CF:13:E0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABA3A01BCAA59E6432698 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68dab11e-d192-3f30-83b6-9ea314f94268.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ba:3a:01:bc:aa:59:e6:43:26:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5595ec18-8489-439f-9889-14a3ddaeceb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:49:bb:7b:13:85:1a:99:4a:92:4a:86:42: e6:36:34:ec:3b:cb:d9:58:07:f6:ca:ff:4c:55:6f: 4f:19:98:bc:09:57:49:41:53:05:4c:bb:d2:b1:cc: ea:fd:d3:d6:e7:3d:a8:5c:ac:c3:b6:ad:9c:d5:0f: 4f:34:93:c3:e4:c4:50:57:cf:ed:e1:69:97:16:47: 7a:91:9b:4f:6c:99:fe:08:48:53:3b:5a:b1:14:82: 43:6d:41:77:31:75:2b:47:d0:f7:b1:a7:30:6d:ee: 34:82:f6:26:eb:df:ea:62:4b:e8:b0:e6:1b:36:2d: 07:eb:0a:77:64:8c:f5:d9:39:5b:b5:f5:95:dd:4f: 28:9b:ea:d5:a3:41:4b:c0:84:c0:1c:2c:37:95:2d: c4:e9:f9:9d:b8:2d:88:c8:2f:0b:03:61:40:22:ca: 35:c6:94:e2:34:31:2d:4e:c9:58:78:b9:c2:46:94: bc:1f:bb:7b:07:5a:7a:ae:f4:df:ca:79:e5:0f:af: c5:54:85:e2:13:f6:c4:79:7a:9f:fe:cd:a6:d5:09: 13:c3:50:6c:42:52:a8:2f:d6:11:6e:01:43:7d:25: ed:74:1f:05:e3:96:10:5c:94:15:4d:3b:87:59:11: 79:3f:f8:7b:0b:63:b1:3e:ed:f4:48:dd:ea:cb:aa: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7A:8A:AC:B3:73:7F:C7:CE:D2:FB:FB:A5:6D:65:82:A8:CF:13:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68dab11e-d192-3f30-83b6-9ea314f94268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8e:ac:9e:fe:c6:94:c2:23:a4:64:cf:9d:89:b1:50:e2:46: b2:b7:3d:2e:4d:66:46:5c:f1:ed:ef:71:c2:92:76:c1:4a:21: d0:85:9e:e1:3b:d1:a0:25:7e:2e:04:a4:e7:cb:ed:1a:56:c2: 54:a2:49:39:a6:48:30:12:81:1f:7a:c8:b2:51:35:51:1b:30: 7b:2c:13:19:43:52:84:20:9a:89:93:41:c2:7a:31:dc:f6:f6: d8:47:01:3a:fe:b8:7a:b9:61:1b:0f:d7:ce:40:4d:d1:ac:5c: 16:a9:35:3e:80:4d:12:5d:e2:3b:c7:52:4f:23:ae:80:c4:a6: 07:76:ab:df:a6:b7:9a:f7:cf:23:f3:4d:85:5a:37:7b:93:fc: 9f:87:05:3a:e1:b4:31:7b:ee:54:b2:ae:7b:ac:1d:9d:98:2f: eb:76:0a:5b:05:ed:f6:c8:8f:84:d1:5a:0c:f9:84:ce:86:49: 90:a1:e9:2c:10:03:e5:f1:9e:f5:36:b0:cd:eb:d0:f0:51:67: 1b:77:12:cd:23:fe:a0:64:bd:13:3a:74:e5:6d:4d:5d:7e:02: 8e:04:bd:e4:f0:f9:e9:1d:20:84:32:24:0e:9e:39:c5:84:63: aa:f1:46:cd:87:36:b9:93:48:ec:b7:5a:95:b2:59:85:43:64: 38:a4:36:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuro6AbyqWeZDJpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTU5NWVjMTgtODQ4OS00MzlmLTk4ODktMTRhM2RkYWVjZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC5Ju3sThRqZSpJKhkLmNjTsO8vZWAf2yv9M VW9PGZi8CVdJQVMFTLvSsczq/dPW5z2oXKzDtq2c1Q9PNJPD5MRQV8/t4WmXFkd6 kZtPbJn+CEhTO1qxFIJDbUF3MXUrR9D3sacwbe40gvYm69/qYkvosOYbNi0H6wp3 ZIz12TlbtfWV3U8om+rVo0FLwITAHCw3lS3E6fmduC2IyC8LA2FAIso1xpTiNDEt TslYeLnCRpS8H7t7B1p6rvTfynnlD6/FVIXiE/bEeXqf/s2m1QkTw1BsQlKoL9YR bgFDfSXtdB8F45YQXJQVTTuHWRF5P/h7C2OxPu30SN3qy6qGqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx6iqyzc3/HztL7+6VtZYKozxPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhkYWIxMWUtZDE5Mi0z ZjMwLTgzYjYtOWVhMzE0Zjk0MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqOrJ7+xpTCI6Rkz52JsVDiRrK3PS5NZkZc8e3vccKSdsFKIdCFnuE7 0aAlfi4EpOfL7RpWwlSiSTmmSDASgR96yLJRNVEbMHssExlDUoQgmomTQcJ6Mdz2 9thHATr+uHq5YRsP185ATdGsXBapNT6ATRJd4jvHUk8jroDEpgd2q9+mt5r3zyPz TYVaN3uT/J+HBTrhtDF77lSyrnusHZ2YL+t2ClsF7fbIj4TRWgz5hM6GSZCh6SwQ A+XxnvU2sM3r0PBRZxt3Es0j/qBkvRM6dOVtTV1+Ao4EveTw+ekdIIQyJA6eOcWE Y6rxRs2HNrmTSOy3WpWyWYVDZDikNjI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:49 2025 by rpki-client