$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e664fc7-0aad-3692-adff-c92f14c966da.roa File: 7e664fc7-0aad-3692-adff-c92f14c966da.roa (raw, json) Hash identifier: GgnUFAQvhQbcwnc/SvxcWaQlmblhfvM9RLsFfvaG5NA= Subject key identifier: C9:6B:54:FE:AC:B4:B4:AB:80:90:57:90:C8:8F:7C:D9:E8:01:84:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6C8AB7318AF20038D5C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e664fc7-0aad-3692-adff-c92f14c966da.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6c:8a:b7:31:8a:f2:00:38:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ef3ab3d1-bb49-4495-bf1b-00db902f5975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:cb:78:d9:8e:84:59:31:0c:96:05:f5:ee: f2:f9:ca:ae:9e:f3:ff:2f:c7:18:85:33:c7:15:66: 51:98:f5:3f:52:d6:90:c8:30:68:0c:25:51:b5:1e: 0d:32:07:64:fc:63:e5:3a:87:a6:0e:77:83:70:98: bf:6f:88:0b:25:22:37:b0:d4:9b:bc:ee:a3:4d:18: 50:4e:7b:8d:c0:39:bc:42:9c:48:5a:54:aa:59:6b: 41:fb:4a:63:94:9f:3c:35:ae:e6:e3:b7:3e:b2:d3: 61:0c:1b:36:1d:38:36:13:01:a3:d1:3c:a4:fe:02: 18:49:7c:6a:c9:9b:71:36:9e:87:de:c5:1b:fe:53: eb:9a:5a:65:f5:98:2c:2c:61:24:9a:4b:bb:17:7e: 38:3d:19:54:4a:61:a9:e6:34:f8:96:b7:2c:da:ed: d1:27:f6:bd:40:3c:4b:90:4d:07:a6:a2:14:eb:83: c3:e4:fd:68:42:28:a5:7e:d4:0c:ae:04:1d:41:5e: 17:a1:d9:f3:5b:87:3f:d8:d3:7c:f2:57:78:f6:7a: fb:09:c3:27:9a:ef:eb:cf:89:c0:69:22:f1:31:8a: 7e:81:7f:81:d5:82:5c:a6:13:16:22:f5:05:0f:66: 36:c6:3a:9d:1c:14:dd:8d:db:69:ab:af:05:e6:2c: 80:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6B:54:FE:AC:B4:B4:AB:80:90:57:90:C8:8F:7C:D9:E8:01:84:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e664fc7-0aad-3692-adff-c92f14c966da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:07:cd:8b:d1:21:4a:c0:43:e2:b4:1b:e6:b7:bc:fd:56:1e: cd:09:1b:cc:7b:9f:b0:7f:37:7b:98:ee:7f:63:f7:aa:b8:c0: 31:be:19:33:3c:19:7a:83:8b:2c:17:aa:e4:ca:b2:e0:5c:44: bf:39:95:14:9a:81:8e:12:f5:f4:d5:ce:04:a1:a0:8a:d6:bc: d6:b5:88:fe:d8:d8:b1:b2:68:64:d8:bd:9f:e6:0c:75:f2:03: 3c:ee:3b:eb:2c:1f:84:23:e2:2b:0d:f7:f3:e5:da:5e:88:41: 00:d4:7a:3c:48:81:c2:5c:87:7e:33:14:34:ec:76:87:c1:ae: a6:05:3c:6b:c0:c6:af:40:8a:cd:8a:da:80:21:7e:14:c0:8c: be:9c:3c:0b:8b:f5:ed:11:26:7f:9c:12:36:c6:72:3e:56:14: 12:4c:fd:99:55:e6:7e:b0:72:31:d7:9b:44:82:85:05:52:4b: f5:60:da:6d:76:3b:75:52:98:f6:95:fa:24:8c:ec:a6:19:79: a0:6b:39:f9:26:81:5e:a6:c7:8f:36:85:28:91:47:e1:2f:40: c7:99:d5:3b:79:35:9e:2d:80:0b:5b:91:a7:20:62:a0:17:d4: 94:1a:b4:87:05:76:7e:5a:52:f6:c1:22:cd:dd:9e:d0:c8:a7: e8:0c:c5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2yKtzGK8gA41cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWYzYWIzZDEtYmI0OS00NDk1LWJmMWItMDBkYjkwMmY1OTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpLLeNmOhFkxDJYF9e7y+cqunvP/L8cYhTPH FWZRmPU/UtaQyDBoDCVRtR4NMgdk/GPlOoemDneDcJi/b4gLJSI3sNSbvO6jTRhQ TnuNwDm8QpxIWlSqWWtB+0pjlJ88Na7m47c+stNhDBs2HTg2EwGj0Tyk/gIYSXxq yZtxNp6H3sUb/lPrmlpl9ZgsLGEkmku7F344PRlUSmGp5jT4lrcs2u3RJ/a9QDxL kE0HpqIU64PD5P1oQiilftQMrgQdQV4XodnzW4c/2NN88ld49nr7CcMnmu/rz4nA aSLxMYp+gX+B1YJcphMWIvUFD2Y2xjqdHBTdjdtpq68F5iyAUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlrVP6stLSrgJBXkMiPfNnoAYSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2U2NjRmYzctMGFhZC0z NjkyLWFkZmYtYzkyZjE0Yzk2NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQHzYvRIUrAQ+K0G+a3vP1WHs0JG8x7n7B/N3uY7n9j96q4wDG+GTM8 GXqDiywXquTKsuBcRL85lRSagY4S9fTVzgShoIrWvNa1iP7Y2LGyaGTYvZ/mDHXy AzzuO+ssH4Qj4isN9/Pl2l6IQQDUejxIgcJch34zFDTsdofBrqYFPGvAxq9Ais2K 2oAhfhTAjL6cPAuL9e0RJn+cEjbGcj5WFBJM/ZlV5n6wcjHXm0SChQVSS/Vg2m12 O3VSmPaV+iSM7KYZeaBrOfkmgV6mx482hSiRR+EvQMeZ1Tt5NZ4tgAtbkacgYqAX 1JQatIcFdn5aUvbBIs3dntDIp+gMxfY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:47 2025 by rpki-client