$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d2bfa6d-f368-3589-bda1-46463fd6657c.roa File: 6d2bfa6d-f368-3589-bda1-46463fd6657c.roa (raw, json) Hash identifier: nhSiAZrUAayMj73UkM6rlDNFYqyJTNAXvfihgt5o9wk= Subject key identifier: 52:FF:78:EA:4B:FF:09:9C:39:B8:22:FD:EF:05:79:BD:17:24:8A:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6BECF603070EE6E6E984 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d2bfa6d-f368-3589-bda1-46463fd6657c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6b:ec:f6:03:07:0e:e6:e6:e9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1783e689-d288-4521-b256-cc4bfea0d5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b3:b7:66:0e:61:49:10:ea:0f:31:6c:6f:76: e3:9b:ba:80:4a:b7:5b:81:b7:cf:d4:b2:f1:3b:ba: 44:85:3d:b1:bc:0c:77:8b:14:07:e9:4f:7b:17:17: 04:8b:4b:46:04:b8:5d:a8:22:38:0b:44:36:16:00: 26:46:5d:6b:1b:3d:51:8e:3f:df:23:cb:fc:82:d3: 35:72:c2:b4:07:9a:04:8b:c0:84:37:67:92:af:30: 86:db:b7:fc:66:58:2e:f4:c7:b5:f3:21:9b:98:b5: 99:54:6c:86:67:42:6c:9a:12:24:57:05:e4:fa:2e: 9b:1b:d7:0e:6c:3b:cb:6a:c0:16:b1:99:98:76:73: 31:a8:3f:c7:0b:37:60:01:41:28:10:b1:44:40:f9: c9:1e:10:f1:d9:2e:20:d5:e6:a6:d8:45:7c:2f:91: 78:26:52:33:e2:dd:0e:5e:08:d9:52:3b:02:c7:04: 1f:bc:04:d6:2d:61:6f:6e:3a:67:af:75:16:40:11: 1f:2d:96:f9:6c:07:27:b5:e9:6d:2e:f9:14:18:9d: 09:77:9d:11:28:88:64:96:c4:59:aa:95:cf:53:33: f8:96:81:a1:01:b4:4b:e6:ec:49:6f:16:a1:6d:e4: 39:be:3c:3c:e8:b5:a3:de:23:ac:f0:9f:40:61:1f: 7c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FF:78:EA:4B:FF:09:9C:39:B8:22:FD:EF:05:79:BD:17:24:8A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d2bfa6d-f368-3589-bda1-46463fd6657c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:55:83:4d:44:1a:c5:af:db:55:dd:7e:0d:23:bc:5e:ae:d8: 01:2f:f4:93:c9:d2:26:cf:29:9c:a8:61:13:e8:94:d6:4e:d7: 1b:1b:2f:99:f4:ee:66:a7:6e:3b:f8:00:ff:a7:73:1b:68:a4: 2c:ae:ae:bb:ad:6b:e3:9d:67:60:81:dc:71:a3:63:7c:c3:d6: 95:df:0c:69:40:ff:03:a3:b6:65:8e:07:4a:01:92:c3:82:59: 10:81:12:c7:9b:06:63:36:a7:7d:44:70:31:2f:a2:6e:bf:cd: 51:dd:62:33:e4:8f:8e:e2:ed:a0:0d:2a:f3:10:2e:60:dd:39: 45:da:41:42:09:da:4c:31:81:c0:39:6d:02:c1:71:26:02:93: 5e:ce:fe:be:44:52:74:6d:c3:c8:d2:91:be:c7:47:89:19:cf: 98:bc:3d:25:24:8f:4c:16:08:ec:a3:8a:f3:74:e8:62:89:7e: 2b:f0:49:e3:80:06:b9:98:54:5f:34:7d:f2:70:65:15:0c:d8: d9:5e:bb:ff:47:2c:fe:e2:40:86:cc:b4:29:c8:76:75:33:dc: e8:96:a2:64:39:af:f0:54:f3:b0:f0:ab:f2:2a:f8:da:a5:60: a2:24:c1:12:c0:1f:4e:5e:37:9e:4c:42:7c:99:d7:51:df:e1: a3:3d:4b:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2vs9gMHDubm6YQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTc4M2U2ODktZDI4OC00NTIxLWIyNTYtY2M0YmZlYTBkNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbO3Zg5hSRDqDzFsb3bjm7qASrdbgbfP1LLx O7pEhT2xvAx3ixQH6U97FxcEi0tGBLhdqCI4C0Q2FgAmRl1rGz1Rjj/fI8v8gtM1 csK0B5oEi8CEN2eSrzCG27f8Zlgu9Me18yGbmLWZVGyGZ0JsmhIkVwXk+i6bG9cO bDvLasAWsZmYdnMxqD/HCzdgAUEoELFEQPnJHhDx2S4g1eam2EV8L5F4JlIz4t0O XgjZUjsCxwQfvATWLWFvbjpnr3UWQBEfLZb5bAcnteltLvkUGJ0Jd50RKIhklsRZ qpXPUzP4loGhAbRL5uxJbxahbeQ5vjw86LWj3iOs8J9AYR98QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL/eOpL/wmcObgi/e8Feb0XJIq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmQyYmZhNmQtZjM2OC0z NTg5LWJkYTEtNDY0NjNmZDY2NTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrcIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1Vg01EGsWv21Xdfg0jvF6u2AEv9JPJ0ibPKZyoYRPolNZO1xsbL5n0 7manbjv4AP+ncxtopCyurruta+OdZ2CB3HGjY3zD1pXfDGlA/wOjtmWOB0oBksOC WRCBEsebBmM2p31EcDEvom6/zVHdYjPkj47i7aANKvMQLmDdOUXaQUIJ2kwxgcA5 bQLBcSYCk17O/r5EUnRtw8jSkb7HR4kZz5i8PSUkj0wWCOyjivN06GKJfivwSeOA BrmYVF80ffJwZRUM2Nleu/9HLP7iQIbMtCnIdnUz3OiWomQ5r/BU87Dwq/Iq+Nql YKIkwRLAH05eN55MQnyZ11Hf4aM9S5c= -----END CERTIFICATE-----Generated at Sat Apr 26 19:56:26 2025 by rpki-client