$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f8be572-9350-3fee-b62b-33feb50ca1a0.roa File: 6f8be572-9350-3fee-b62b-33feb50ca1a0.roa (raw, json) Hash identifier: w8JVPG/3IJpXWsoWpOLowHD9TtUJCMXsJohkRRufQbA= Subject key identifier: FC:FC:A8:CF:77:6A:3C:4D:61:F0:FF:A2:91:F1:83:6C:E2:7A:39:C7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACC9D18BF11F6DE09A680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f8be572-9350-3fee-b62b-33feb50ca1a0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 209.85.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cc:9d:18:bf:11:f6:de:09:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3c922c94-9bcc-4c21-873d-7ef0b12037b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:56:9d:62:44:14:84:06:60:b8:29:79:1c: 04:1c:85:20:b9:14:24:79:93:80:5c:5f:58:a3:e6: e2:a5:4a:08:87:55:94:31:01:2c:79:ec:7f:7d:08: a1:29:3c:40:7b:9b:35:a3:aa:5e:99:db:22:49:94: cf:60:97:4d:74:dc:1e:26:0b:72:59:62:9f:fd:cb: ed:9a:fa:77:6d:e0:11:7c:a8:95:62:89:f1:e1:b3: d1:20:3b:74:9c:e7:d3:34:07:a6:ea:32:74:2f:2e: 0b:29:86:9b:bd:8d:b1:a4:4a:ff:1b:cd:44:69:9c: 89:1f:ca:f1:4b:cc:9e:f9:a3:41:df:2f:fe:2f:3d: e0:b7:67:80:5f:be:76:33:da:59:9a:1d:ca:06:73: 36:f1:da:91:c0:a5:56:25:87:35:7d:ac:4f:36:a0: e1:48:31:c7:c1:7e:53:4b:b7:66:3d:ff:ef:58:f4: a4:68:80:c7:65:d0:9b:96:f7:fb:59:88:a2:f8:b1: 54:70:ba:bd:7a:00:6e:27:c9:41:e2:7d:f0:11:b4: e2:2f:54:eb:c9:fc:de:b2:3d:44:8b:c5:44:0d:9d: 90:ce:54:ad:1a:e7:a7:81:2a:b5:27:66:62:75:a8: 08:e5:31:b9:63:47:a0:71:61:fe:ea:61:db:ae:8d: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FC:A8:CF:77:6A:3C:4D:61:F0:FF:A2:91:F1:83:6C:E2:7A:39:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f8be572-9350-3fee-b62b-33feb50ca1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1d:12:0e:df:37:f7:9e:85:f0:f6:1f:74:00:69:a3:53:14: f0:14:37:59:2e:a9:ce:df:fb:e0:46:02:4a:a6:82:1a:3e:b8: 56:10:9b:24:d8:c1:63:43:0b:7b:32:49:77:fa:c5:c6:06:fe: d3:78:ee:f4:be:0b:5d:a1:f7:48:4a:67:79:a2:0d:52:b4:59: 55:60:0e:8a:2e:9a:e3:ff:3b:96:88:81:9a:af:14:54:c5:7d: 7f:be:9f:42:d5:5b:bf:18:51:07:f7:a7:42:ee:27:15:fc:d7: 78:d2:67:c8:d3:a3:3f:eb:75:f0:76:ac:e6:ad:4c:0e:2c:c3: 49:30:9f:f3:81:24:b3:9c:2d:34:d1:ed:f6:9f:96:8e:6a:22: f8:fe:96:5d:30:7c:92:59:5d:3a:1c:01:1a:ef:81:38:97:90: 13:f4:6c:48:f4:0e:98:74:89:9d:6d:28:4c:61:83:87:76:45: 22:5e:88:07:72:8a:eb:6c:fc:53:1f:96:4c:c1:d8:c4:6b:b7: 9f:20:78:48:00:c5:48:a7:4e:e8:2c:0f:8d:30:55:26:fa:87: 3f:0a:4e:23:b1:12:a3:2e:4c:a9:76:2d:a7:cb:be:ab:b6:9c: d0:bf:a1:52:2f:57:93:6f:15:e4:53:b3:92:2b:ea:07:ed:1c: e4:77:ca:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusydGL8R9t4JpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2M5MjJjOTQtOWJjYy00YzIxLTg3M2QtN2VmMGIxMjAzN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmdWnWJEFIQGYLgpeRwEHIUguRQkeZOAXF9Y o+bipUoIh1WUMQEseex/fQihKTxAe5s1o6pemdsiSZTPYJdNdNweJgtyWWKf/cvt mvp3beARfKiVYonx4bPRIDt0nOfTNAem6jJ0Ly4LKYabvY2xpEr/G81EaZyJH8rx S8ye+aNB3y/+Lz3gt2eAX752M9pZmh3KBnM28dqRwKVWJYc1faxPNqDhSDHHwX5T S7dmPf/vWPSkaIDHZdCblvf7WYii+LFUcLq9egBuJ8lB4n3wEbTiL1Tryfzesj1E i8VEDZ2QzlStGuengSq1J2ZidagI5TG5Y0egcWH+6mHbro2O/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz8qM93ajxNYfD/opHxg2ziejnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmY4YmU1NzItOTM1MC0z ZmVlLWI2MmItMzNmZWI1MGNhMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8dEg7fN/eehfD2H3QAaaNTFPAUN1kuqc7f++BGAkqmgho+uFYQmyTY wWNDC3sySXf6xcYG/tN47vS+C12h90hKZ3miDVK0WVVgDooumuP/O5aIgZqvFFTF fX++n0LVW78YUQf3p0LuJxX813jSZ8jToz/rdfB2rOatTA4sw0kwn/OBJLOcLTTR 7faflo5qIvj+ll0wfJJZXTocARrvgTiXkBP0bEj0Dph0iZ1tKExhg4d2RSJeiAdy iuts/FMflkzB2MRrt58geEgAxUinTugsD40wVSb6hz8KTiOxEqMuTKl2LafLvqu2 nNC/oVIvV5NvFeRTs5Ir6gftHOR3yqc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:46 2025 by rpki-client