$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa File: 85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa (raw, json) Hash identifier: XYtF5p0nNzzx+BJnm+7gQBdamBps6GUU4y6NXttLZn0= Subject key identifier: DD:44:A7:72:4A:53:AC:BF:8A:FF:20:43:66:7E:99:0D:33:B1:12:A7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6386763DB1F273F18100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 209.85.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:63:86:76:3d:b1:f2:73:f1:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1376f849-2574-4f97-b0e1-93ccd3d5600c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0e:20:c5:b2:81:d7:ee:d3:6e:9e:f9:a2:d9: b5:5b:a0:60:10:7a:09:9a:cf:8e:b3:8d:41:77:6b: 71:bb:3a:eb:b8:6d:83:33:e7:66:a2:cf:f9:54:7f: 04:67:d0:e0:cd:5e:4a:a8:12:c0:2c:f1:d8:85:7f: 2e:48:7c:1b:0d:6b:66:14:4d:94:c8:0e:c4:a9:2c: 37:bb:97:32:ab:a0:5c:4f:c4:ed:df:8d:4d:2b:a7: 3f:74:80:eb:05:30:1b:82:79:54:1e:e7:e1:56:1e: 3b:66:41:15:88:e3:31:a5:fd:61:4c:a0:94:8d:c5: d7:97:57:95:95:bf:a4:85:c5:a8:aa:8e:a8:b1:41: 46:86:2d:91:8a:7b:34:aa:f5:c3:d7:60:fd:6c:26: a8:61:49:9d:57:fa:32:42:f5:fc:49:5f:2e:96:5a: 7b:46:51:60:46:32:90:88:79:02:59:1b:2f:56:43: 1a:97:e9:21:43:b8:27:7a:65:26:1b:31:77:a1:b4: b2:26:f9:43:a2:f9:b2:0b:16:84:77:72:23:ef:35: a0:cc:64:8e:0f:b4:9c:e4:25:63:a2:b7:8b:93:03: 0a:89:49:fa:27:0a:5c:7e:67:5f:46:a1:63:dd:06: 3e:a7:32:6d:d5:bb:9c:e2:54:23:c7:24:f6:eb:74: bf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:44:A7:72:4A:53:AC:BF:8A:FF:20:43:66:7E:99:0D:33:B1:12:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b6:d2:8f:9b:4d:5b:46:a6:c0:fb:6c:8d:bb:73:42:fe:a4: 5a:03:c9:a1:ce:c6:9e:3a:b6:f4:f7:5e:b9:91:29:5f:9b:eb: f9:3f:79:56:6f:1d:dd:90:75:2a:83:35:b2:1f:00:ad:55:ae: c8:80:32:5b:db:a1:7f:30:6f:00:4a:59:e0:e4:b4:e7:21:ec: 7c:15:97:49:38:b9:78:c2:ce:15:0e:20:d5:f1:92:27:c9:e8: c8:c6:df:97:ae:61:31:43:fe:a1:8e:29:47:38:10:c7:4a:e6: 4c:36:81:ba:4f:fb:b2:51:c8:e6:cc:eb:2a:a8:5c:59:d7:af: 3f:94:04:7f:b9:aa:0e:b1:a7:2d:11:3e:bf:5c:6a:11:0f:ab: 8a:61:f2:72:ec:55:c7:5b:ad:99:55:2f:ec:5f:ef:c6:d1:9a: 5f:31:d2:56:8a:70:a4:a8:f1:14:59:8a:9c:66:c5:f7:72:54: 7c:cc:48:34:7d:27:93:60:96:5a:5a:ca:42:1f:ef:57:d5:19: 9a:ae:34:6a:7b:50:0a:3a:f6:79:fb:a6:dc:1c:31:36:d3:4c: da:82:ec:33:0c:d5:4b:5e:3c:d0:0f:fc:71:e9:03:62:4f:74: f0:48:dc:3a:91:60:60:e9:ef:11:ec:2b:d8:7b:46:07:b5:5f: 3f:a1:3c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2OGdj2x8nPxgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTM3NmY4NDktMjU3NC00Zjk3LWIwZTEtOTNjY2QzZDU2MDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA4gxbKB1+7Tbp75otm1W6BgEHoJms+Os41B d2txuzrruG2DM+dmos/5VH8EZ9DgzV5KqBLALPHYhX8uSHwbDWtmFE2UyA7EqSw3 u5cyq6BcT8Tt341NK6c/dIDrBTAbgnlUHufhVh47ZkEViOMxpf1hTKCUjcXXl1eV lb+khcWoqo6osUFGhi2Rins0qvXD12D9bCaoYUmdV/oyQvX8SV8ullp7RlFgRjKQ iHkCWRsvVkMal+khQ7gnemUmGzF3obSyJvlDovmyCxaEd3Ij7zWgzGSOD7Sc5CVj oreLkwMKiUn6JwpcfmdfRqFj3QY+pzJt1buc4lQjxyT263S/QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1Ep3JKU6y/iv8gQ2Z+mQ0zsRKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODVlOTgzNzMtNzJhNy0z YmI4LThjODItYjJmNmZmNDc4Y2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ220o+bTVtGpsD7bI27c0L+pFoDyaHOxp46tvT3XrmRKV+b6/k/eVZv Hd2QdSqDNbIfAK1VrsiAMlvboX8wbwBKWeDktOch7HwVl0k4uXjCzhUOINXxkifJ 6MjG35euYTFD/qGOKUc4EMdK5kw2gbpP+7JRyObM6yqoXFnXrz+UBH+5qg6xpy0R Pr9cahEPq4ph8nLsVcdbrZlVL+xf78bRml8x0laKcKSo8RRZipxmxfdyVHzMSDR9 J5NgllpaykIf71fVGZquNGp7UAo69nn7ptwcMTbTTNqC7DMM1UtePNAP/HHpA2JP dPBI3DqRYGDp7xHsK9h7Rge1Xz+hPJ8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:51 2025 by rpki-client